last executing test programs: 2m5.777346806s ago: executing program 3 (id=102): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x2, 0x0, 0x0, 0x100, 0x10024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x80, 0x0, 0xfffffffe, 0x1, 0x0, 0xce3, 0x0, 0x0, 0x7}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) timer_create(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x100000000000018a, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x10, &(0x7f0000000c80), 0xff, 0x249, &(0x7f0000000880)="$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") connect$unix(r6, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e70551da9fb07ff9b8eabfa200000000000007020000f8ffffffb7030000b70400000000000085000000160000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000840)) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) set_mempolicy(0x3, &(0x7f0000000340)=0x10000, 0x3) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="0600b300fe754457de70871f531c6bd73b0a3806b8699efd31b0c25b4b8c9cf0637e7b955d458f437a760279824202d1"], 0x0, 0x8cb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 2m5.540830659s ago: executing program 3 (id=111): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xa497, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statfs(&(0x7f0000000200)='./cgroup/../file0\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x10000, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) iopl(0x3) r8 = getpid() syz_pidfd_open(r8, 0x0) sched_getaffinity(r8, 0x8, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005710000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r10 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsmount(r10, 0x0, 0x80) 2m5.317844663s ago: executing program 3 (id=117): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x308, 0x3d8, 0x3d8, 0x308, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f8, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x6, 0x1}, {0x4, 0x5, 0x2}, 0x3ff, 0x6}}}, {{@uncond, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@hbh={{0x48}, {0x1ff, 0x2, 0x1, [0x8, 0x7, 0xfffb, 0xf8d, 0x2f7a, 0x6, 0xffff, 0x1, 0xa63c, 0x6, 0xd1, 0x6, 0x9d7f, 0x5, 0x693, 0x299a], 0x5}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 2m5.166406155s ago: executing program 3 (id=122): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340), 0x2, 0x475, &(0x7f0000002880)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xc4, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x6c, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff8000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x36bbd7a1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4f}]}, 0xc4}, 0x1, 0x0, 0x0, 0x880}, 0x4001) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mount$bpf(0x0, &(0x7f0000001180)='./file0/../file0\x00', &(0x7f00000011c0), 0x40000, &(0x7f0000001340)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@gid}, {@mode={'mode', 0x3d, 0x10000}}, {@mode={'mode', 0x3d, 0x9}}, {}, {}], [{@seclabel}, {@smackfsdef={'smackfsdef', 0x3d, ':$)(-('}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x32, 0x33, 0x30, 0x66, 0x66, 0x31], 0x2d, [0x30, 0x37, 0x33, 0x38], 0x2d, [0x64, 0x61, 0x31, 0x65], 0x2d, [0x35, 0x32, 0x62, 0x66], 0x2d, [0x63, 0x39, 0x65, 0x36, 0x38, 0x35, 0x37, 0x37]}}}, {@euid_lt}, {@flag='nomand'}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@audit}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '.$-!+!*&{@,['}}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x2, &(0x7f0000000180)=""/4096, 0x1000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r5, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="c3", 0x1}]) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xc8c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="ffff2abddb2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x7c, r8, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r9, &(0x7f0000001dc0)=ANY=[@ANYBLOB='lock mem'], 0xc) close(0x3) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r10 = open$dir(&(0x7f0000000040)='./file0/../file0\x00', 0x580, 0x40) move_mount(r10, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000880}, 0x5) 2m4.191326319s ago: executing program 3 (id=138): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280), 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190001"], 0x30}}, 0x0) getpid() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3f, 0x200000005c832, 0xffffffffffffffff, 0x0) 2m3.783794146s ago: executing program 3 (id=149): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e", 0x19}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa636", 0x15}], 0x2}, 0x0) 2m3.783567826s ago: executing program 32 (id=149): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e", 0x19}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa636", 0x15}], 0x2}, 0x0) 1m52.581203202s ago: executing program 0 (id=293): dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r3 = add_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="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", 0xfd, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="cf2aad22a2cba696a1c32e18fb0016170b53032807685e29131cbd343554185af4c4c7e5a84c734c3fc1f632a676049e557e086f43c093f4e76b8a8cd55d661c02a97d37aaf928b5e27d4a5c13c38344a6d0a55daf93060b00987db144f2fe", 0x5f, r3) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) open_tree(r4, &(0x7f00000003c0)='./file0\x00', 0x80101) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) ppoll(&(0x7f0000000180)=[{r1, 0xd4d8}], 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r8, 0x8957) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept4(r8, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000a40)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xc, 0x0, @val=0x80}}}}}}}, 0x0) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m51.702781926s ago: executing program 0 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000400)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0xcba}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) 1m51.536732188s ago: executing program 0 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) cachestat(r2, &(0x7f0000002600)={0xfffffffffffffffe, 0x4}, &(0x7f0000002640), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x5}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}, {0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x3}, 0x20004004) 1m51.44543521s ago: executing program 0 (id=314): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x4, &(0x7f00000001c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x31]}}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000e80000000000000000000000711076b70000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000900)={0x0, 0xfffffffffffffcc4}) mkdir(0x0, 0x0) munlockall() 1m51.275496192s ago: executing program 0 (id=317): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x101, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6df, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8880}, 0x880) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0xffffffffffffffff) close(r0) 1m51.063547585s ago: executing program 0 (id=321): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x200cc02, &(0x7f0000000080), 0x1, 0x570, &(0x7f00000010c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000008000000e27f000001000000000000fe", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYBLOB="ea41398e6cc907ca199728679a697325b545fc70f6902ccf45afbda2b1d830a795656ca099fa3d5f37059aa8d8d431cc92066495e4e2a14aba80fdee2a462578e140e30377a6926811e9b01fa345d4055049fce9327ca9dacb1f84a82ca3a1558a9ea84e9336c1e6dbea989a121d9aa51cfc0e34e1e4f383f6378f7070245a063f34da06bade2edacce30491d269c6d00757452519d41dbee201c1edb81ecc5929ac3ca901043dd87642d50adb9cb9b9419d6765d4164118a0ff9e26183a5ad45e246891f60b75c167c0db330977be5e1ef2d8800e35bbe51274767150611e79cf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x1}, 0x18) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) (async) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) pread64(0xffffffffffffffff, &(0x7f0000002180)=""/4105, 0x1009, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) creat(&(0x7f0000000ec0)='./file0\x00', 0x88) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',context=']) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close(r2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0xa18004, &(0x7f0000000080)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x43cc}}]}, 0x1, 0x50d, &(0x7f00000007c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqNuxut9gDLCSG0EmKPIHVD4kZR7DiKnaUJPaRnrkhU4gRH/gDOPXHngugNCZUDEj8iUIPEwWjGk9RN7cZqEjvEn480mvfmTf39vqbzXvzS+AUwsq5GxF5ETETEpxExm13PZUd81D6S+57s31s+2L+3nItW65N/5NL25Fp0/JnElew1ixHxg+9E/Dj3fNzGzu76UrVa2crq883a5nxjZ/fGWm1ptbJa2SiXFxcWb35w6/3ymfX1rdpEVvry49/vfeOnSVoz2ZXOfpyldtcLR3ES4xHxvfMINgRjWX8mhp0ILyUfEa9HxNvp8z8bY+lX84XGBpMZAHBeWq3ZaM121gGAyy6froHl8qVsLWAm8vlSqb2G90ZM56v1RvP6nfr2xkp7rWwuCvk7a9XKn7O1wrko5JL6Qlp+Wi8fq9+KiNci4ueTU2m9tFyvrgzzGx8AGGFXjs3//55sz/8AwCVXHHYCAMDAmf8BYPSY/wFg9Jj/AWD0tOf/qT7vvn+uuQAAg+H9PwCMHvM/AIyU73/8cXK0DrLPv175bGd7vf7ZjZVKY71U214uLde3Nkur9fpq+pk9tZNer1qvby68F9t357652WjON3Z2b9fq2xvN2+nnet+uFNK79gbQMwCgl9feevgol8zIH06lR3Ts5VAYambAecsPOwFgaGzmA6PrxN2+gEvrFO/xLQ/AJdFli95nFLv9glCr1WqdX0rAObv2Bev/MKo61v/9L2AYMdb/YXRZ/4fR1Wrl+t3zP/q9EQC42KzxAz1+/v96dv5N9sOBH60cv+PBeWYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9vh/r+lbC/wmcjnS6WIVyJiLgq5O2vVys2IeDUi/jhZmEzqC0POGQA4rfxfc9n+X9dm3515punNK0fFiYj4yS8/+cXdpWZz6w8RE7l/Th5ebz7IrpcHnz0AcLLDeTo9d7yRf7J/b/nwGGQ+f/t2RBTb8Q/2J+LgKP54jKfnYhQiYvpfuazelutYuziNvfsR8flu/c/FTLoG0t759Hj8JPYrA42ffyZ+Pm1rn5O/i8+dQS4wah4m489H3Z6/fFxNz92f/2I6Qp1eNv4lL7V8kI6BT+Mfjn9jPca/q/3GeO93322Xpp5vux/xxfGIw9gHHePPYfxcj/jv9hn/T1968+1eba1fRVyL7vE7Y803a5vzjZ3dG2u1pdXKamWjXF5cWLz5wa33y/PpGvV879ng7x9ef7VXW9L/6R7xiyf0/6t99v/X//30h195Qfyvv9Mtfj7eeEH8ZE78Wp/xl6Z/W+zVlsRf6dH/k77+1/uM//gvu89tGw4ADE9jZ3d9qVqtbP0fFR4l39MMPw2FwReSf7IXII2uhW8NKtZEdG/62TvtZ/pYU6v1UrF6jRhnseoGXARHD31E/GfYyQAAAAAAAAAAAAAAAF0N4jeWht1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq//BQAA///DDc9i") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = socket(0x28, 0x1, 0x0) connect$packet(r4, &(0x7f0000000100)={0x28, 0xf8, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) (async) connect$packet(r4, &(0x7f0000000100)={0x28, 0xf8, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x420002, 0x3a6}, &(0x7f0000000040), &(0x7f0000000200)) (async) syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x420002, 0x3a6}, &(0x7f0000000040), &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x6020400) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000400)=[{&(0x7f0000000080)="7cd1f233f595b9483683fb7f", 0xc}], 0x1, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 1m51.063336935s ago: executing program 33 (id=321): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x200cc02, &(0x7f0000000080), 0x1, 0x570, &(0x7f00000010c0)="$eJzs3c9vHFcdAPDvjO3YTdI6gR6gAhKgEFCUdbxpo6oStFxAqKqEqDggkFJjbyyTdTbY61IbS7h/A0ggcYI/gQMSB6SeOHDjiMQBIcqhUoEIlCBxGDSzY3vrrJuN91ez+/lIk/nx3uz3vd3MvLdv1/sCmFgXI2IvIk5FxOsRMV8eT8olXm4teb57d3eX79/dXU4iy177Z1Kk58ei7ZzcmfIx5yLim1+L+F7yYNzN7Z1bS/V6baPcX2iu31nY3N65sra+tFpbrd2uVq8vXr/6wrXnqyes2Zfnjh65sP7r97669sq3fvfbT77zx70v/igv1tkyrb0e/dSq+sxBnNx0RLwyiGAjMFWuT424HJxMGhEfiYjPFNf/fEwV/zu7MTXgkgEAg5Jl85HNt+8DAOMuLcbAkrQSEWladgIqrTG8p+N0Wm9sNi/fbGzdXmmNlZ2LmfTmWr129fzsn39QZJ5J8v3FIq1IL/arR/avRcT5iPjp7BPFfmW5UV8ZTZcHACbemfb2PyL+M5umlUpXp3b4VA8AeGw88E0ZAGDsaf8BYPJo/wFg8nTR/pcf9u8NvCwAwHB4/w8Ak0f7DwCTR/sPABPlG6++mi/Z/fL3r1fe2N661Xjjykpt81ZlfWu5stzYuFNZbTRWi9/sWX/Y49UbjTuLz8XWmwvN2mZzYXN758Z6Y+t280bxu943ajNDqRUA8EHOX3j7T0lE7L34RLFE21wO2moYb2kfcwGPl55m8dFBgMdat7N9AeOnqya86CT8YeBlAUaj4495z3XcfL+fP0IQ3zOCD5VLH+9+/N8czzBejOzD5DrZ+P9LfS8HMHwnH///bl/LAQxfliVH5/w/dZAEAIylHr7Cl/24X50QYKQeNpl3Xz7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDFzNiK+H0laKeYCT/N/00ol4smIOBczyc21eu1qRDwVFyJiZjbfXxx1oQGAHqXvJuX8X5fmnz17NPVU8t/ZYh0RP/zFaz87ExEbi/nxfx0cn92fPqx6eF4P8woCAN37WzeZ3lxqNjeq5brtjfy9u7vL+0t56EtZNjugoh567ysHk48u37+7WyytlOnIsiyLmCv6Eqf/ncR0ec5cRDwTEVN9iL/3VkR8rFP9k2Js5Fw582l7/ChjPznU+On74qdFWmudP30fffTQg39x4UPu7fz+83Kn6y+Ni8W68/U/V9yhelfc/+Yi9u9999viT5eRpjrEz6/5i623Xw+P8dzvv/7AwWy+lfZWxDPTneInB/GTY+I/22Ud//KJT/3kpWPSsl9GXIrO8dtjLTTX7yxsbu9cWVtfWq2t1m5Xq9cXr1994drz1YVijHphf6T6Qf948fJTx5Utr//pY+LPdaz/4VP+uS7r/6v/vf6dTx/uzh6N/4XPdn79n+4YvyVvEz/fZfyl0785dvruPP5KvLt7ktf/cpfx3/n7zkqXWQGAIdjc3rm1VK/XNnrayN+FPsJZ+x2Jh2fOc3VXjP3uYm/V+WsUG316Wo7ZyDtj3WSe6bk6MwOsxQdtTB/0Ffv7yN/OH3HI1Un7XoueNu4NK9Zo7kfA8Bxe9KMuCQAAAAAAAAAAAAAAcJxh/OnSqOsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA+Pp/AAAA//+f48KR") bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000008000000e27f000001000000000000fe", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYBLOB="ea41398e6cc907ca199728679a697325b545fc70f6902ccf45afbda2b1d830a795656ca099fa3d5f37059aa8d8d431cc92066495e4e2a14aba80fdee2a462578e140e30377a6926811e9b01fa345d4055049fce9327ca9dacb1f84a82ca3a1558a9ea84e9336c1e6dbea989a121d9aa51cfc0e34e1e4f383f6378f7070245a063f34da06bade2edacce30491d269c6d00757452519d41dbee201c1edb81ecc5929ac3ca901043dd87642d50adb9cb9b9419d6765d4164118a0ff9e26183a5ad45e246891f60b75c167c0db330977be5e1ef2d8800e35bbe51274767150611e79cf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x1}, 0x18) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) (async) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) pread64(0xffffffffffffffff, &(0x7f0000002180)=""/4105, 0x1009, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) creat(&(0x7f0000000ec0)='./file0\x00', 0x88) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',context=']) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close(r2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0xa18004, &(0x7f0000000080)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x43cc}}]}, 0x1, 0x50d, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = socket(0x28, 0x1, 0x0) connect$packet(r4, &(0x7f0000000100)={0x28, 0xf8, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) (async) connect$packet(r4, &(0x7f0000000100)={0x28, 0xf8, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x420002, 0x3a6}, &(0x7f0000000040), &(0x7f0000000200)) (async) syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x420002, 0x3a6}, &(0x7f0000000040), &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x6020400) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000400)=[{&(0x7f0000000080)="7cd1f233f595b9483683fb7f", 0xc}], 0x1, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 28.092878911s ago: executing program 6 (id=1540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0xe67, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/4082, 0x1020}, 0x80181}], 0x400000000000039, 0x10000, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") chdir(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x8b, 0x33, 0x0, @rand_addr=0x64010102, @broadcast, {[@generic={0x44, 0x4, "eab3"}]}}, "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"}}, 0xfce) 27.710119087s ago: executing program 6 (id=1550): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10e, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@block_validity}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44f, &(0x7f0000000400)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800"], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 27.5370716s ago: executing program 6 (id=1552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0xf) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d1fca4f1d0461442e12c4d90f415ec8", 0x11}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x22}], 0x1}, 0x4c2103a0) 27.449015531s ago: executing program 6 (id=1553): mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x2, 0x2172, 0xffffffffffffffff, 0x297a4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000001c0)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_open_dev$rtc(&(0x7f00000005c0), 0x7fffffffffffffff, 0xe00) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000680)={0x2d, 0x5, 0xc, 0x19, 0xb, 0x35e2, 0x0, 0x169, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000280)=@generic={0x1f, "c52fd28a2121fada2b83f73129b764b25e2311ac9ba3e2fa2d76b804941518987cb5154d283c40cc40e4edbad624e504660998fb680daf84198032b34095f0600856b787fdd725bdb3e94e4c979489df0480b4476de06f29311c0d9037ca10b09282a0e86df3887ce767a479e38a69a0ccd8edd58df4a6c15c1c4f76659d"}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)="c039f2ff930384e8a4df4ef33a583b8e91db24ae68c2bfbeffcd5736cab6e8dc3ff2869fb33619683d91921b7410bbe08da8e797c988", 0x36}, {&(0x7f0000002380)="1811fc85d190fe77be52abf711472d7fca9df10a3f20261869e1762e4a7a3d8cc9bd830ae2588abe3e29d1a023c7f67d73d60529614879cbc22ba040cfb7aade14c64680cced9b02924186d2e7fc75c6f9772ad046b92e7f8ca5f41a53bff1bad9ad4e8f2233c940a405766633102ee58ddb27e0f4def5a87143a2173127aebb31e9aaee105e9797d34599fb16ab10fa9da78bf8ea78e33f0d91d0530a093fed67166632a5c0a451381063120e4433b31c590a5dd2c0b13de11528b72dc4780bf21b04e3826be52ab72c488d9970c32fc148dd2a5287a1fe507f1ae7d835197cc264a896a12886e4f49e17000d18a26de2c6e2e95ba7870fa79d707e0984bf6104e8162d415623c8b477b66164abcfaa891a890499c1810c77beefce34ac7bb6ffb3b75c2a98002e05649f9320fa76a2c5ebc4b0d522b6a6832b51d99279a70507d953bf91179c1225ac85fe00f252f6a97bd5afe996ce56fc72b4ec5df3780d5687393bdec8ff021122ca916a68aa92ef5f7043732bfbb491f46c01eeecc151a9db727d2b8d50d9248402cce2a9ac2a01ef88a2f9574d7c3fe52023beea71eae163835027bd030461086cfcd7013a69a5cbc9c556b66c40f41a0b9088c749c8c835f18713e70ed97921e2699b1b7f4e2fd71f6bec1a674e3866b1620dcc2404c4b1a9e680090e9ed6753cced12682b1104c43ad17566ff4c564c7491d1ba9d938f277746bfb8ff503301957e5adfea2eb6d89e3062e2bb0bc5b38137db4223448fbe2203ccf81bbfe7751f3531d505a04f2ed1097b829dc52b3cc6153defa43f9fbb67b98b161a82c22de87f2fbb63997234d637a72a545f9bd760edec67a6a08a500a63fe80e8da9a869c6338b7242aa4892785c04e169e48750140ba8f4734f7269539bfeea3add63948fc8e4693527af04d4c6a5591204c4c5d2838c87c0f147705590945ae0bec5b7072033b16b610b34c909553d90a95523bfbcc8bb1316f35bebf91ff610456b803ea0b7add6a4ef15e6650890801d1b3913914ad6b137d9c530ca84b13b93d162c70d1dc7c1ab4faa945f63491b30a6c946d71014e9c8777fe96dbca7a7042876d68e51cec632435049351c38700b2ce7471c5db8f0bdf0510b4feb58e2dd05e8d28440e3e47d262535a8ddced13a195e2a296d9912bfac898f381e9d1e7a6ab4da7af54cdc0adce4112320c109459da1e70cb25cba21ae518eba9e3a59bcb01edbb9ae71048592aa9968c1f4854b98779e72af4172f662a4bd105d32e6cd831b700e824ab95f14233f7551a46d652e3c270870ea710e7a6f96ec63b77ebe89c3c5c5d683313bc6f659eb5feb565373b215fb994007f39b47139209584eb273e68d27675baa728737ce17f4d38805b16c6f2a620857b1166d4173b5e1b40420e71bbd3d75d7a0c07cbe881701f120b4f520b17f08a8252fa0d2516268aa249ca3a048117ab9b5923dd59fdafc9cc210b9ff9ed71997fb24ca633143f6b292ed9582629cace7c7dd5b3e26b73990498f67f59ea844a796270ca63fb67ca44776e73050ab1faa5e035aa0e5a712628342b4d2f623cf85cf8150500db216c5395ef487950a544828ab9257bde54ff6b5f5c49b8fdce3baff67b2e769ea7cf2fd9d8ccbbbc20a4564e4733c763a39859a9ae46e4f09c644b51590bbf1d7f9d09044b62f22bea981955cdeea0891a8b03b3598a28c3f408bd73b6d3541f9ec94ffbc39e6a06edceb4f8513a41773723cd60387f2361cdbaa1ddcdad2cc012eb0eb9a41355494972f06b6eb34e6ccc7e679c9f36ba845fd661e10150d53e2f8bfb7d8bc165463eb6ab35af9a9288ef211ff475c5f68042490ad107e36f495eb4207434e5ab64caebe87110a306bc1c314cecc0127cd394de4c18c0e25c2d8f2cd62ac567512656af0f740bb6b0988d2ac4b10bdbe416495e722ddecc75c8d4f178bfa194223c5e901c81fcb856d462321f120a511e54efa123879b6e14316c82dfc9dc848dc72c060e1259d5bc437bcb70b5cc7b63855d4c9f2ee73ab5a1359b4f04e755f649ce6d0209a27b3dcb2e03e6d312cc3e27f79cb30e6eb988842eb656159105250fe43c51d81d5d6f7367f382d765aab95e2e0d34ef44224014a5940c0f174967581d53abf401c5023706f94df28c149a53e06a6aa754dd7989d4b86703c8fb8412b76392d156a006c3f394b3269eeb8af946ade05fb6d8bb380dda485e6d584c6c4af9718e4de952ac81ef0f374b279bcbfa360d4f5527ee64d76c735b6e8be644311eea43e4b963dc3c9138258cd08f51b0d901f97120dce7132f649eeb005cfbb1d4a795fb38ba15929112744f9b81a3d5ce5269383fcc963f9b60f87a308ad9136c2f094b8dd997da712bc639267f1211a5688edcbdc1141dc032ef38c1761570033cd4c8f59536d76dcf7a4206b833321b55271ea3466f2781a9d62b8c1cd36c7a176c33ea87ed839a05b25f59f2e33b8432dd0683fc074287dd5ba41166da02745b7c130b85e3bd0f3dba560c3a03bc68b5050fc0d271d41ffd89658e4084fc09c0288605568414e86bb08df1bf782b64d749b4bacfa59d338086b4f8f268c7fba63199f85ff26bdb3a70dd90ba0a16fcc74f2b6ab9759780a8a34a9060e54eea916bf2a394aae33f0902822900362aa2ffeb94b9f78368380eb3e6e216be085c1eb18413b9cc083323da54e1909f44ccb5bf895a8218c9b3154759eb004c8fbe4f630c3eebe8c78c78210ae7142fb75f74ffeba7ab58c4b09be12d9a4cc5c1111974459d464e3ee2714ebb1cd7cf63f2211b914ece7a28502d611e744306d35e9d51df7587b8914693a43739d10c849ff1b2da582be4605353d236ed212ef949a68ca2b2d777d2b34d99d70796c42691a332b6c8bccb8efc0425004c460860be7257703d8c0085caf3104593a64811bf082ee21e89854a7afe0cc5a2f1a3b47d4cf4a7142e27a9201ae6317e571075fcdaea63da1d058667da51ca34e8d76dc2e0c9142da1b07ed58324c7e4e4414fb981f6397c2d69534a32d1fe063bb799bd74569bab8deb282b6ead9f61eb5d6be8bbd59a4f4bb79650819132a15ddb88c64af3a8dbf703f7d8fa506ef5b6fa728cfd948aea93b3454ad7d6ace13b453e91a369b94f73e7f9fce628c1bcec0daec31a8aa51284697d93816c5f081899a41b881c545b54510b3ac46d0c902818d525b7c581ac0bb743f23f0de4c212f468a3a94d30a3e006558c199cf8a5ff32c461c8733a73c6f5380592766b5d2d16c763666c385c0f94294e66563bc87f7813b5e5810ac69cb3822f911eac627712b2291b3c1969fc0d2f402d5d56b8962d37e75a4388931b60bf767bbef798585984c168fdf5e9cdca04c422205df448953012c7e099e6af75d06c5ee8b31869e04b0fe217fb90004251cf0ac0c3bd7e672c710729015b512b2ea8a223a691dab359022a45cdea31a792c0d15f21ecab74c85015766e52519e94907c44e0dfdb05e513f8f0382f9576f25e4d5a0fad1755e83e8d3823a0d2ec2ff8b0dd1ad87ae459cd74ae9e5ede9caca17de64defa76d5659cb0166d6742e0410822e581ceca7c71488b4047d84c343cc2339f4f8e1ca53eda384e4ebfca4c6f17d4727457bb053ddd60e1080c205d7b9545d93431c9108e87f07aaf6c627e456bf74da7edf52c6b117c4f6927f3dfa15d3d8588d6efbb2b3ebf584455e6c608322643a87d78f66de63fcf6601afe23fd1052c69e6c7efb38042fc6a2a54cb608f9227ca40ca953a27a482e15e72540c38ca47c69507b9f533ec43685254abd5fcbc063b55122d46965ae3d2f72fa4b398ed391fda240a033fc8e1fdaefc81f7d229b940ac41937b92929a40012c06417c53429d5112abf771a227c6588f8c135204b504b64b1136c8518d3a18bfb078ea6504ef635d6dd05931eedea1674ed2e32a087abcb2023915d63ed6dda6bf70e70f1140f076f34c4a913ae9820da0e1b92c01b204e105bf7475cd468d3e691ad2a4ef413432a837e587b20a4fa3fa95915a355abdcc0ac9104c3630f47d152a8b3bc14f287a4787e869960f259c3302923c89a6b71c7af5bf12c99744bb3f87a102b0a39ba9be13f519e60cd5542f3c6738bafe3b523d261943c7bc636de9b2c6f24fafc1c106f3933850ecad96954d1d22916e38c12a4aa9f583e2292449adaad2288f9e2990a2eacfe4158902270c6e8867bea5737121931e267dd94e48c31ad709fdcaff43c0fa9b3004385e33cc2f0884c93b56c3aa19f15c27ca7eab7dbf5e408dea281221a85866424dcaaa3a9a24ce219a99ed8f74b60f91f81a945ce8d549d331093704907bbc64efc6f0c634351c0ff14fc732dc4e133341f23285b65a27d3286365ee93f6afdb744f3ef427a35276ef7acf8081cf6da0f3196d1173f6382fd09231a77a27ba9d72d5be1e4d71bc8f1aa5eb8f1328b16e5c59d8f535328c17c35d5b542d0d608961902b565b1476085ea1e79c74d721f22c33cfc581406cecc74ce1c51794f2331ee2b254aa13993ca4ee2d176fe2a178e08c38f38aa3aa675ef3ec690a0239d8c8ef2c7bd3ed7aa608959677e2ba35e5c46c42f9119bf24d869426f1638f8951d2a5afd85642a149c7603a6b647d7d8f778c6a6b9677ce1ad1f44bf6965c5aae7c7553a839c69996a0176ea97c8c2b5e72f17e4228d343a845a59d2d5756b4be8e79126686a116f514c584c9962abbbd91f6076d1a76d36e219d4639d503146bc3ce05848a6c5edd1e39992d3f2131c89b24c728592b92b6d45c4b28b16fad0e0741eb513c7c70f5e2d3cc467eb9fe97443245a62d5fb1ad050ef136204e12337cfd3a922237e490f9c91dcfcafb53eec7cbaafdfb4b55ab3a07d8cc2427e1709627c9611fb79b29b8d216f1124dc5e7b0340c3e8f6c63c2b7eb76158106f2c615138fcb2f14496284d8e9ac7bd3997d940877ce7d8490164fc6a88b90c9c60b3af4a8a931cb992ea0c4bb40352b4cedbfbb5876caa5f1630bce53cda3b5692a260cda888d27e606dbfb3ff5eb1a3f84d3c523fd7a625538bf31ba597861a2b56199fdedcb8f92e91bb7c6304b7dd38e0cd73d2d3e8f9fe1f557857f65c72ff41bc4c237759f3f0ec4e4475f2b322adfea6e4bc4e3cbf94805305b4186a6647e92455f614c284c2d4fc1ecbfdfc001a5299c9ed426864fa2fe1ad75cc23a1eee5d35f879db4a6ea3fccd40cd8533815326ae82f1ec490a0df35fb7b0c679d6c83d06c0d2a04dc245250987599b91c7d48904393d5758e76bbcea7a9119ccea37bd6f535aaf4cfb7d67a37b8a3d32744e1fed08c5fdbb2c0dbfdf2d16badc5cfb0dbf5ed3e2f48cefb837631d62b2bcf33e0ab92aea9db7617a818ad2d5285f6acf720f038a64e1955238e6c3b0452d49b75eff652b388f44fac76549f725f307740041f6ebf5085ecd55a89d13ae466721a3920e88bedd187e42a92ac0d4cfa633bcaf936fdfd967412fc2eafce257a680862f59af44b9110310dbdebc85e1a7553d16858a7d61995f74dad7ceb204d66f1188883590d092d3edee4316937f8f1f3b0224753d7b636783e46e877df8afe465a213f0aeb89040430616d09a9f44222b330d5d4a2628468d8df6d2f74271ed052f1afd330396a1703238c9489fcf15755575b9c84dc93e8831f84b17642f69031680b961fa018c58d99bd85066f14b5a802bfde24c26d6ddaff8120eca24c7b8bc591e37a0c7f6900387444322531a076bd8e185c7703390739c1f9a100f9fdcb09f6fed279881c84d67c9", 0x1000}, {&(0x7f0000000300)="5d462a2e79759a141de374e11d91a2870febcebf7b7c0b582576e13866dab9815bca4dc4da21ec7ddc3982de550cc28e618c3379386043e43595fc669f660c7db25b0f", 0x43}, {&(0x7f0000000380)="4b950d4206c7f8fb09b46c783a91e7e0b521cb1acd5338706866706dfe5318c77aec4a9a1d3ac1ea218c665c6940b3141e70bbed034936b7711373a79d18b330bd7d7587a33249fb7989b36df016d856922c59a2cf149c3676d5b64d667c424a6052588d3012f9caeec86bb44a7cfb096a4ce416e5f3336905c164627df1ca2804f7cecd265fcf5aa48d9fce4b6c7407ef40858d8e", 0x95}], 0x4, &(0x7f0000000480)=[{0x90, 0x117, 0x1ff, "ea9f180c17ac575345c331c8f1845aae228c690ad2cd7ff23660eb6a6b8e3cfc528b9a3ef12c30650c27eaa6825af34bfa2fbd798cb0466ebfb0b3076bc38f889343ea23cdf88c15f43862928266ff660c5806b4779101708fbdde1af6951c1b59acaccdafc3dcb2c03af510da455d728cfdecec037eb4ad6f2686f03f82"}, {0x90, 0x112, 0xfffffff7, "8612f5dff82ff3c4dd0f9090554816efd8208c7c60a07ed8ff2b8d5df29aa3004d5c6d41c08e51665fb72aa2cec7caf27b9339f0f2a033799dc7a10de6e63ed59c0d13dd343f47d146a578590e046ed8bfb9776cd2d0c8846d712b18ea2707766ea083b9453ad5e3f7f96f9fc6b8d3dba8b79b3036cd1284606eb359"}], 0x120}}, {{0x0, 0x0, &(0x7f00000005c0)}}], 0x2, 0x20004000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000004000/0x4000)=nil) 27.277974123s ago: executing program 6 (id=1554): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000010000000000000000030000000f000000030000850800000000000000010000000900000005000000050000008b0000001000000001000000b7d800000b0000000000001008000000030000000000000b05000000000000000200000d000000000c000000050000000b00000005000000002e00"], &(0x7f0000000540)=""/7, 0x7f, 0x7, 0x0, 0x2, 0x10000, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r1}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xf3}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x6d, 0x9, 0xfffffffa, 0x0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x20, 0x4, 0x9}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x5, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x7, [@struct={0xf, 0x6, 0x0, 0x4, 0x1, 0x3, [{0xd}, {0x0, 0x3, 0x7b9}, {0x4, 0x4, 0x4}, {0x10, 0x3, 0x800}, {0xa, 0x0, 0x401}, {0xe, 0x3, 0x7ff}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x3}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x5f, 0x30, 0x0, 0x2e, 0x30]}}, &(0x7f00000003c0)=""/216, 0x93, 0xd8, 0x1, 0x9, 0x0, @void, @value}, 0xfffffffffffffd41) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeee, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r8}, 0x10) setitimer(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) connect$phonet_pipe(r9, &(0x7f0000000680)={0x23, 0x40, 0x2, 0x4}, 0x10) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SG_GET_VERSION_NUM(r10, 0x2284, &(0x7f0000000080)) 26.368150007s ago: executing program 6 (id=1564): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 26.339601357s ago: executing program 34 (id=1564): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 5.071703194s ago: executing program 4 (id=1899): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40), 0x6, 0x77c, &(0x7f00000002c0)="$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") removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x409, 0x4, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) 2.283850975s ago: executing program 7 (id=1938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000640)="14654cbc", 0x4}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="b5a501", @ANYRES8=r4], 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="f80000000201010100000000000000000300000608001a400000000660000180000003400000000006000340000200002c000180140003000000000000000000000000000000000014000400fc0000000000000000000000000000001400018008000100ac1e010108000200ac1414bb08000840ffffffff1f0018800800034000001000080001400000000708000340fffffff808000240000000090800024000000009080025000000000408000240000008000c001700000000060000000018001640006f1db41500000600000000300000000000000d000080011400198008000100630500000800020042080000f889656f10c1140a5098270d1caf8e7825da41126a769cf7f7c444e4966658c6fe7849d440e72dac44313221b4694a0833f36aa0a5fb7f2507f21a1d317a0db3992f89cfc0b64003011021d764b14e1cc8a059caf72da6a459d1119ad83bf74e85a274c7be27818775f33cc3d48b8982c60cc3d760a93347432addd72d7d67bdbc0c35de18c818e343e25cad13a9e9"], 0xf8}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x62040200) socket$packet(0x11, 0x3, 0x300) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @local}, 0x10) 2.186544237s ago: executing program 5 (id=1940): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0xd, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="580100001000010000000000fbdbdf25ff0100000000000000000000000000010000000000000000000000000000000100000000000000000000a00000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000007f000001000000000000000000000000be870000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400af0000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fstat(0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x2) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000400)={0x43, 0xff, 0x3}) r6 = io_uring_setup(0x394d, &(0x7f0000000240)={0x0, 0xb7c1, 0x1000, 0x2, 0x277, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000380)={0x6, 0x0, &(0x7f00000001c0)=[r1, r0]}, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+|[@\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xffffffffffffdffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000200)=0xb) 2.065495439s ago: executing program 4 (id=1943): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x300, @loopback, 0xffffffff}, 0x1c) 1.99960797s ago: executing program 2 (id=1944): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1.9988853s ago: executing program 5 (id=1945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.99851772s ago: executing program 4 (id=1946): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0xb2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000d80)=[{0x0}, {0x0}], 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}, {&(0x7f0000000040)='\\', 0x1}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELRULE={0x70, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x85}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xe0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xcb, 0x6, "2a58bc758890b8f98d71a35783cebcf54952630b9a37bffb52a21e0363f5e41dc5534265fb97b7eee9e8d71523eaee97caee2291282c76686ebb0a70ab1b125a7c62552eb943b1e402ce1d0df0220afa4107077c2af24ca516e6e3b7c9d397a0b99a78921f25728a2663f74010ba219a4416ea0f98bda5ff15cd700771e121b54e6fea52ba9b521db204fbee360deaa27aa30bcecac789ba969143d5f9b638e8fb495b09e6b16ce03ee61813565f5007f8f8121c98b08934bec2da0f27d14f75717151cff2d6be"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x26c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x3c, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x3c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r5, 0x2285, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x943d04a83b3b753) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_tables_targets\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, r6, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3"], 0xff, 0x2b1, &(0x7f0000000100)="$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") mount$nfs(&(0x7f0000000100)=',..', 0x0, 0x0, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.9865788s ago: executing program 2 (id=1947): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 1.96375195s ago: executing program 5 (id=1948): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="96ca3430396413f63415e57d760b0000000516000002000000f8ff000005000000794c3f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="96ca3430396413f63415e57d760b0000000516000002000000f8ff000005000000794c3f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="e90c61151451e6110103c212a19a4539120faca20180c20000000800450000240000e0000011907800000000000000000000000000109078a10c000109cf88f0"], 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="e90c61151451e6110103c212a19a4539120faca20180c20000000800450000240000e0000011907800000000000000000000000000109078a10c000109cf88f0"], 0x0) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "9e188a80c32aa9b86ed6ce56992732d9f7fc6cda762c07530a038941764a92bb", "074336477e9205df5f47f7da965c25c746ba7f8ca07841d3da17308a6df3f54855ecedd6d8664fa125e3972a48e81039", "a562ff321beb3f036b9fd27aeff89c8e79a57a3873e0b4e6553e2c44", {"4cf02a016458a5f67aa497153eddc6a1", "9a3f9661ac468177dc130be49bdd8eb5"}}}}}}}, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "9e188a80c32aa9b86ed6ce56992732d9f7fc6cda762c07530a038941764a92bb", "074336477e9205df5f47f7da965c25c746ba7f8ca07841d3da17308a6df3f54855ecedd6d8664fa125e3972a48e81039", "a562ff321beb3f036b9fd27aeff89c8e79a57a3873e0b4e6553e2c44", {"4cf02a016458a5f67aa497153eddc6a1", "9a3f9661ac468177dc130be49bdd8eb5"}}}}}}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x6b, 0xf, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r4, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) r5 = dup3(r3, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) (async) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) sendmsg$kcm(r5, &(0x7f0000000980)={&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x1, {0xa, 0x7, 0x401, @private2, 0x6}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)="3b2090f6efa2cb6fca7bf4542d5ccb9837b483420ae1903098cc0e436e423c7024d314e21ab27ca52ac6050b2562e15bc16e2703a87d0cebbbcee0a36afc818323e413650d31600fa5668e89e5575f9af9cb3d6622559eca46b513dd55c93ed6aa868c89da4df8423e68fef757184fd1a6fd6da1c8c358158f859c98ae9235cb362c134338fff5d89a36d4e3c5abeb0224a2e359303c8c3026c420ca1f24e8aac54dab737a805bf814e8e3d067008c6dcd4fcb62907451e0a1efaa37668faff867f4f45979d683db1eb1fc3bb980703562c58f2290db8522956d21701febbd7b51006c0528ebda81b650aaba1d832c6e111e963ed44a", 0xf6}, {&(0x7f0000000780)}], 0x2, &(0x7f0000000800)=[{0xb0, 0x112, 0x2, "df31090c7d6bb75b728ee72903de5ee24c1e4d6132fdec5c95cabd0d8a7b12c4bf81fabfeae19e74cb559bb6cf4d301e06126a4fdaabb1fb36a8a7b4154854179af7a4d4435a229ad09ad52cac715bf641f9d9ead49fc2dcd937b92db429defaf47d26f177556556ab62433179953dafddc0b03f7e20d7096cd5ca32da314320e61b75d26eda762fd44d3ff40135aed1901e8faccde192886e832dc5626aa8af"}, {0xb8, 0xb8eb4e6226ed8d46, 0x4, "b594b6348034e971516e344d85ef1083d67dcd30bfef8442edcf75614d9e8f249d40885d44a844a610778e3f2978827f7de4a7fc838695c7e4d76b2b40a6faf89a2bf8345308706a838114a60929f856e62a53ca48d0d33985c87df770558f138f2514034f2984e6be7932b39ee80b18018e92b8339f9f16641a6da91d1add6f519ab0f010bc16ec4a4d3c559977f5fcb56dde9a008b28650a343fabf6822176ae254a37"}], 0x168}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="434881c837f467e3ad164ce69b6cf05e2f627bddc926f1d67003d42011708c7d3a015f57d81a8b44f3daeb61cfddeb95ea617425a698c083e8b2fa5ed97fbad84d3084d34082c1f1136e4279f848246355e0290a199cb54d8de99a07", @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="434881c837f467e3ad164ce69b6cf05e2f627bddc926f1d67003d42011708c7d3a015f57d81a8b44f3daeb61cfddeb95ea617425a698c083e8b2fa5ed97fbad84d3084d34082c1f1136e4279f848246355e0290a199cb54d8de99a07", @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f00000002c0)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10000) pipe2(0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 1.9598354s ago: executing program 2 (id=1949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.913988271s ago: executing program 2 (id=1951): dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r3 = add_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="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", 0xfd, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="cf2aad22a2cba696a1c32e18fb0016170b53032807685e29131cbd343554185af4c4c7e5a84c734c3fc1f632a676049e557e086f43c093f4e76b8a8cd55d661c02a97d37aaf928b5e27d4a5c13c38344a6d0a55daf93060b00987db144f2fe", 0x5f, r3) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) open_tree(r4, &(0x7f00000003c0)='./file0\x00', 0x80101) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) ppoll(&(0x7f0000000180)=[{r1, 0xd4d8}], 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r8, 0x8957) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept4(r8, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x81}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000a40)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xc, 0x0, @val=0x80}}}}}}}, 0x0) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.767369334s ago: executing program 1 (id=1953): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (fail_nth: 13) 1.545980267s ago: executing program 1 (id=1954): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000000300)={0x0, 0x1e, 0x1}, &(0x7f0000000340)=0x0) timer_gettime(r0, &(0x7f0000000380)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) unshare(0x68040200) (fail_nth: 14) 1.427554348s ago: executing program 5 (id=1955): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.367908109s ago: executing program 7 (id=1956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x3, 0x0) getsockname$packet(r1, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8400000010"], 0x84}}, 0x0) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100039042cbd7000eaffffff000003e4", @ANYRES32, @ANYBLOB="83000400cb1507002800128008000100736974001c000280080014000400000008000300ac141410050009"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) close(0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) 980.577695ms ago: executing program 5 (id=1957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) setrlimit(0x9, &(0x7f0000000000)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 980.381575ms ago: executing program 7 (id=1958): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 976.823925ms ago: executing program 4 (id=1959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 933.622736ms ago: executing program 5 (id=1960): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) socket$inet(0x2, 0x5, 0x106) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x46, "afe154b0019053c29b28190389b686bc47de26451764649765e2ff12b1656168cb508d449637d2ccb13d26f30bd43c5386f867241978296c144c656899a6d91c778f97d7fee6"}, &(0x7f0000000100)=0x4e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000140)={r7, 0x400}, &(0x7f00000002c0)=0x8) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x10, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffbfa, @remote, 0xa}, 0x1c) 933.227626ms ago: executing program 4 (id=1961): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0xf) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d1fca4f1d0461442e12c4d90f415ec8", 0x11}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x22}], 0x1}, 0x4c2103a0) 924.923856ms ago: executing program 2 (id=1962): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0xb2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000d80)=[{0x0}, {0x0}], 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}, {&(0x7f0000000040)='\\', 0x1}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELRULE={0x70, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x85}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xe0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xcb, 0x6, "2a58bc758890b8f98d71a35783cebcf54952630b9a37bffb52a21e0363f5e41dc5534265fb97b7eee9e8d71523eaee97caee2291282c76686ebb0a70ab1b125a7c62552eb943b1e402ce1d0df0220afa4107077c2af24ca516e6e3b7c9d397a0b99a78921f25728a2663f74010ba219a4416ea0f98bda5ff15cd700771e121b54e6fea52ba9b521db204fbee360deaa27aa30bcecac789ba969143d5f9b638e8fb495b09e6b16ce03ee61813565f5007f8f8121c98b08934bec2da0f27d14f75717151cff2d6be"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x34}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r5, 0x2285, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x943d04a83b3b753) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_tables_targets\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, r6, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3"], 0xff, 0x2b1, &(0x7f0000000100)="$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") mount$nfs(&(0x7f0000000100)=',..', 0x0, 0x0, 0x4, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 890.726586ms ago: executing program 7 (id=1963): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statfs(&(0x7f0000000200)='./cgroup/../file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x10000, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) iopl(0x3) setrlimit(0xd, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) sched_getaffinity(r6, 0x8, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r9 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsmount(r9, 0x0, 0x80) 772.735088ms ago: executing program 7 (id=1964): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r2) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0xfd}, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r4 = socket(0x200000000000011, 0x3, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r5) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r10, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000940)={0x15c, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7bb, 0x1a}}}}, [@NL80211_ATTR_IE={0x30, 0x2a, [@cf={0x4, 0x6, {0xd, 0x9, 0xc, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @ht={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x6, 0x2, 0x0, 0xb, 0x0, 0x1, 0x0, 0x1}, 0x800, 0x3, 0x81}}]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0d, 0x0]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SAE_PASSWORD={0xb, 0x115, "4fa80ce1f85db4"}, @NL80211_ATTR_PMK={0x40, 0xfe, "5788bc4f475ddd989469940609e7f769b196c540f7274ba805354c5b1943664f2fdbce64089fd1ab205cf6fa638d2fc6bf1e73266ad330f60574b677"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac10, 0xfac09]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9000}, @NL80211_ATTR_PMK={0x25, 0xfe, "30c4d34cf40b4f00f5f1cebb6f744a70958280c37105ef532725155c4967316291"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400000, {0x33, 0x6, 0x4}}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9d66b3236d7d"}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x4, 0x3, 0x4, 0x7, 0x6, 0x8000, 0x7, 0x4, 0x6, 0x91f3, 0x2, 0x0, 0x7, 0x5, 0x3, 0x8]}, @NL80211_ATTR_SSID={0x14, 0x34, @random="7be97daa98ab788987be37f3bef27566"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8c5}, 0xb27dc8df87590b49) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x38, 0x1403, 0x10, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0xe0e19807f3ca2fec, 0x4) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000580)}, 0x811) 587.600931ms ago: executing program 1 (id=1965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r4}, 0x10) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[], 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") 296.187575ms ago: executing program 7 (id=1966): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0x1000}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r1, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x28541, 0x14b) open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x4001, 0x45) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x0) fallocate(r2, 0x20, 0x4000, 0x8000) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) r4 = io_uring_setup(0xf2b, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2, 0x3f}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x648c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0xffffffffffffffcd}, {&(0x7f0000000d40)="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"}, {&(0x7f0000000140)="3917ff0900c12eb98fd711112ab117dbf8feef6c3ac6bb8d2f399f98d9d63f19508bb00ecbeee5196e54a9c30dd6f8a6e5cc0a122db2bf84522b58313de3aa9241f9abbc60f253385cea07aa5ecebecbfd4c4eadf55ddc8c51cac6f6e01cbb98854b9347fdb38546c072d8c829f88d1bc5a344bc6275a6afd6f1edcc80b49cf01ef11f36fdb8bdb5e72403d752759f065e88f096d05be953e9d4170e894b401d9abd5a943b40"}], 0x1, 0x33000, 0xadcb, 0x3) 268.964045ms ago: executing program 1 (id=1967): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 208.642596ms ago: executing program 1 (id=1968): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e8f4fbff000000004000001d8500000007000000440000002a0000"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r1, &(0x7f0000000200), 0x4) creat(&(0x7f0000000100)='./bus\x00', 0x0) 108.358768ms ago: executing program 1 (id=1969): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0xb2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000d80)=[{0x0}, {0x0}], 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}, {&(0x7f0000000040)='\\', 0x1}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELRULE={0x70, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x85}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xe0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xcb, 0x6, "2a58bc758890b8f98d71a35783cebcf54952630b9a37bffb52a21e0363f5e41dc5534265fb97b7eee9e8d71523eaee97caee2291282c76686ebb0a70ab1b125a7c62552eb943b1e402ce1d0df0220afa4107077c2af24ca516e6e3b7c9d397a0b99a78921f25728a2663f74010ba219a4416ea0f98bda5ff15cd700771e121b54e6fea52ba9b521db204fbee360deaa27aa30bcecac789ba969143d5f9b638e8fb495b09e6b16ce03ee61813565f5007f8f8121c98b08934bec2da0f27d14f75717151cff2d6be"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x26c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x3c, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x3c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r5, 0x2285, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x943d04a83b3b753) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_tables_targets\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, r6, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3"], 0xff, 0x2b1, &(0x7f0000000100)="$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") mount$nfs(&(0x7f0000000100)=',..', 0x0, 0x0, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 33.532759ms ago: executing program 2 (id=1970): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 0s ago: executing program 4 (id=1971): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x128, 0x1403, 0x400, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x51}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000240)=0x1) (async) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000280)=""/53) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x0, 0x0, 0xa, 0x6, 0x7fffffffffffffe8, 0x8}], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x6, &(0x7f0000000380)=""/6, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x2, 0xaf5b, 0x8e}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x5, 0xd, 0xb}, {0x5, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x5}, {0x1, 0x5, 0x4, 0xc}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000002c0)='mm_vmscan_node_reclaim_begin\x00', r3, 0x0, 0xa4b}, 0x18) (async) getsockopt(r1, 0x5, 0x3, &(0x7f00000005c0)=""/10, &(0x7f0000000600)=0xa) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r4, &(0x7f0000000640)={{0xcc, 0x7, 0x8, 0x378, 0x15c, 0x3, 0x319, 0x6}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1820) (async) syz_open_dev$sg(&(0x7f0000001e80), 0x1ff, 0x200000) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)={0x80, 0x118, 0xd}, 0x18) r6 = syz_open_dev$vcsu(&(0x7f0000001f80), 0x8, 0x80000) renameat2(r5, &(0x7f0000001f40)='./file0\x00', r6, &(0x7f0000001fc0)='./file0\x00', 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000002000)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = accept4$unix(r6, &(0x7f0000002040), &(0x7f00000020c0)=0x6e, 0x800) getsockopt(r8, 0x3, 0xfffffffb, &(0x7f0000002100)=""/155, &(0x7f00000021c0)=0x9b) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000002240)={@private2, 0x0}, &(0x7f0000002280)=0x14) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000022c0)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000023c0)=0xe8) (rerun: 64) sendmsg$nl_xfrm(r9, &(0x7f00000025c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002580)={&(0x7f0000002400)=@updpolicy={0x160, 0x19, 0x4, 0x70bd28, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00', 0x4e21, 0xc, 0x4e21, 0x0, 0xa, 0x80, 0xa0, 0x2, r10, r11}, {0x80000000, 0x80, 0x8, 0x1, 0xdb76, 0x9, 0x8, 0x10001}, {0x7, 0x1, 0x42, 0xa}, 0x80000001, 0x0, 0x0, 0x0, 0x1, 0x3}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x2}}, @lifetime_val={0x24, 0x9, {0xd, 0xc, 0x8, 0x5}}, @lastused={0xc, 0xf, 0x77}, @replay_thresh={0x8, 0xb, 0x40}, @lifetime_val={0x24, 0x9, {0x6, 0x9c87557, 0x4}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd25, 0xdc, [0x7fffffff]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x84) r12 = openat$cgroup_ro(r7, &(0x7f0000002600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x6c0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000002680), r7) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000037c0)={&(0x7f00000026c0)="a6565e431ed280750bc4b46264a8a7e6", &(0x7f0000002700)=""/4096, &(0x7f0000003700)="494cb509db61c9598465c7c9d2366b2c06e7db693c830fb5f06730faee2b2c3a560f7f472c45647c30bfd327e1bcf5bd625a3a23e904d55db8b7c0e0029f18f4b266df", &(0x7f0000003780), 0xfff, r12, 0x4}, 0x38) (async, rerun: 64) ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f0000003800)=0x0) (rerun: 64) r14 = syz_open_procfs(r13, &(0x7f0000003840)='map_files\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003940)={&(0x7f0000003880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @const={0xa}]}, {0x0, [0x0, 0x2e, 0x2e, 0x0, 0x2e, 0x2e, 0x0, 0x5f, 0x5f]}}, &(0x7f00000038c0)=""/81, 0x3b, 0x51, 0x1, 0x80000001, 0x10000, @value=r14}, 0x28) kernel console output (not intermixed with test programs): int in max_burst socket option. [ 132.609949][ T8222] Use struct sctp_assoc_value instead [ 132.643034][ T8227] xt_hashlimit: max too large, truncated to 1048576 [ 132.698620][ T8229] loop1: detected capacity change from 0 to 8192 [ 132.788058][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1451'. [ 132.835059][ T8233] loop6: detected capacity change from 0 to 512 [ 132.852465][ T8233] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.878386][ T8233] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 132.901211][ T8233] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1452: attempt to clear invalid blocks 2 len 1 [ 132.961194][ T8233] EXT4-fs (loop6): Remounting filesystem read-only [ 132.984841][ T8233] EXT4-fs (loop6): 1 truncate cleaned up [ 132.991765][ T8233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.023838][ T4598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.090169][ T486] nci: nci_rx_work: unknown MT 0x5 [ 133.106773][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1461'. [ 133.900903][ T8275] loop1: detected capacity change from 0 to 164 [ 133.910307][ T8275] Unable to read rock-ridge attributes [ 133.920056][ T8275] Unable to read rock-ridge attributes [ 133.926212][ T8275] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 133.938090][ T8275] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1464'. [ 133.951822][ T8278] loop5: detected capacity change from 0 to 2048 [ 133.969139][ T8280] loop4: detected capacity change from 0 to 512 [ 133.986798][ T8278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.001654][ T8280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.017831][ T8280] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.187721][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.300120][ T8300] loop5: detected capacity change from 0 to 512 [ 134.312070][ T8300] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 134.332890][ T8300] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 134.366772][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1472'. [ 134.716729][ T8312] loop2: detected capacity change from 0 to 2048 [ 134.744701][ T8312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.869639][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.915793][ T8321] loop1: detected capacity change from 0 to 164 [ 134.926391][ T8321] Unable to read rock-ridge attributes [ 134.941564][ T8321] Unable to read rock-ridge attributes [ 134.947490][ T8321] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 134.966461][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.004247][ T8329] loop2: detected capacity change from 0 to 128 [ 135.031542][ T8331] loop1: detected capacity change from 0 to 512 [ 135.040565][ T8331] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.057231][ T8331] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 135.086989][ T8325] loop4: detected capacity change from 0 to 8192 [ 135.162255][ T8335] loop1: detected capacity change from 0 to 2048 [ 135.185655][ T8335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.259981][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 135.259998][ T29] audit: type=1400 audit(1743399672.716:9434): avc: denied { getopt } for pid=8339 comm="syz.2.1485" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.290957][ T29] audit: type=1326 audit(1743399672.736:9435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.4.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2dc9ad169 code=0x7ffc0000 [ 135.314482][ T29] audit: type=1326 audit(1743399672.736:9436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.4.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2dc9ad169 code=0x7ffc0000 [ 135.319072][ T8340] loop2: detected capacity change from 0 to 128 [ 135.408000][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.431914][ T29] audit: type=1400 audit(1743399672.886:9437): avc: denied { bind } for pid=8343 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.451957][ T29] audit: type=1400 audit(1743399672.886:9438): avc: denied { read } for pid=8343 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.455234][ T8344] loop5: detected capacity change from 0 to 512 [ 135.478205][ T8348] loop1: detected capacity change from 0 to 512 [ 135.478822][ T8344] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.493393][ T29] audit: type=1400 audit(1743399672.946:9439): avc: denied { create } for pid=8339 comm="syz.2.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 135.519003][ T29] audit: type=1400 audit(1743399672.956:9440): avc: denied { write } for pid=8339 comm="syz.2.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 135.538422][ T29] audit: type=1400 audit(1743399672.956:9441): avc: denied { setopt } for pid=8339 comm="syz.2.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 135.558054][ T8344] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 135.562374][ T8352] loop4: detected capacity change from 0 to 128 [ 135.573315][ T8344] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1487: attempt to clear invalid blocks 2 len 1 [ 135.587837][ T8344] EXT4-fs (loop5): Remounting filesystem read-only [ 135.595124][ T8344] EXT4-fs (loop5): 1 truncate cleaned up [ 135.605673][ T8348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.625657][ T8344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.641536][ T8348] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.714110][ T4307] bio_check_eod: 326 callbacks suppressed [ 135.714127][ T4307] kworker/u8:8: attempt to access beyond end of device [ 135.714127][ T4307] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 135.760168][ T4307] kworker/u8:8: attempt to access beyond end of device [ 135.760168][ T4307] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 135.795609][ T4307] kworker/u8:8: attempt to access beyond end of device [ 135.795609][ T4307] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 135.828665][ T4307] kworker/u8:8: attempt to access beyond end of device [ 135.828665][ T4307] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 135.842274][ T4307] kworker/u8:8: attempt to access beyond end of device [ 135.842274][ T4307] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 135.852897][ T29] audit: type=1326 audit(1743399673.286:9442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8362 comm="syz.6.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b082d169 code=0x7ffc0000 [ 135.856102][ T4307] kworker/u8:8: attempt to access beyond end of device [ 135.856102][ T4307] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 135.878991][ T29] audit: type=1326 audit(1743399673.286:9443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8362 comm="syz.6.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b082d169 code=0x7ffc0000 [ 135.892444][ T4307] kworker/u8:8: attempt to access beyond end of device [ 135.892444][ T4307] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 135.966339][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.980766][ T8366] loop6: detected capacity change from 0 to 512 [ 135.990610][ T37] kworker/u8:2: attempt to access beyond end of device [ 135.990610][ T37] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 135.995395][ T8366] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 136.013202][ T37] kworker/u8:2: attempt to access beyond end of device [ 136.013202][ T37] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 136.028703][ T8366] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 136.037417][ T4307] kworker/u8:8: attempt to access beyond end of device [ 136.037417][ T4307] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 136.071590][ T8370] loop2: detected capacity change from 0 to 164 [ 136.092229][ T8370] Unable to read rock-ridge attributes [ 136.107810][ T8370] Unable to read rock-ridge attributes [ 136.125073][ T8370] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 136.136668][ T8370] __nla_validate_parse: 3 callbacks suppressed [ 136.136683][ T8370] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1492'. [ 136.288214][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1494'. [ 136.326126][ T8391] loop2: detected capacity change from 0 to 512 [ 136.416295][ T8425] loop2: detected capacity change from 0 to 128 [ 136.442982][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.504367][ T8445] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1509'. [ 136.526403][ T8447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1508'. [ 136.549772][ T8449] loop2: detected capacity change from 0 to 164 [ 136.564253][ T8449] Unable to read rock-ridge attributes [ 136.574837][ T8449] Unable to read rock-ridge attributes [ 136.587343][ T8449] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 136.599519][ T8449] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1510'. [ 136.685715][ T8460] loop2: detected capacity change from 0 to 512 [ 136.696959][ T8460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 136.732879][ T8460] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 136.776361][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 136.792521][ T8468] loop6: detected capacity change from 0 to 512 [ 136.837192][ T8468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.850090][ T8468] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.970106][ T8483] SELinux: Context system_u:object_r:getty_etc_t:s0 is not valid (left unmapped). [ 137.121406][ T8489] loop5: detected capacity change from 0 to 512 [ 137.131256][ T8489] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 137.169433][ T8489] FAULT_INJECTION: forcing a failure. [ 137.169433][ T8489] name failslab, interval 1, probability 0, space 0, times 0 [ 137.182141][ T8489] CPU: 0 UID: 0 PID: 8489 Comm: syz.5.1520 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 137.182170][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.182186][ T8489] Call Trace: [ 137.182194][ T8489] [ 137.182203][ T8489] dump_stack_lvl+0xf6/0x150 [ 137.182279][ T8489] dump_stack+0x15/0x1a [ 137.182299][ T8489] should_fail_ex+0x261/0x270 [ 137.182322][ T8489] should_failslab+0x8f/0xb0 [ 137.182347][ T8489] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 137.182408][ T8489] ? sidtab_sid2str_get+0xb8/0x140 [ 137.182443][ T8489] ? vsnprintf+0x84d/0x8a0 [ 137.182528][ T8489] kmemdup_noprof+0x2b/0x70 [ 137.182618][ T8489] sidtab_sid2str_get+0xb8/0x140 [ 137.182657][ T8489] security_sid_to_context_core+0x1eb/0x2f0 [ 137.182763][ T8489] security_sid_to_context+0x27/0x30 [ 137.182796][ T8489] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 137.182833][ T8489] security_lsmprop_to_secctx+0x40/0x80 [ 137.182862][ T8489] audit_log_task_context+0x7a/0x180 [ 137.182901][ T8489] audit_log_task+0xfb/0x250 [ 137.182923][ T8489] audit_seccomp+0x68/0x130 [ 137.182946][ T8489] __seccomp_filter+0x694/0x10e0 [ 137.182980][ T8489] ? vfs_write+0x669/0x950 [ 137.183005][ T8489] __secure_computing+0x7e/0x160 [ 137.183034][ T8489] syscall_trace_enter+0xcf/0x1f0 [ 137.183067][ T8489] do_syscall_64+0xaa/0x1c0 [ 137.183085][ T8489] ? clear_bhb_loop+0x25/0x80 [ 137.183105][ T8489] ? clear_bhb_loop+0x25/0x80 [ 137.183129][ T8489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.183192][ T8489] RIP: 0033:0x7efe8945d169 [ 137.183206][ T8489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.183223][ T8489] RSP: 002b:00007efe87aa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 137.183241][ T8489] RAX: ffffffffffffffda RBX: 00007efe89676080 RCX: 00007efe8945d169 [ 137.183269][ T8489] RDX: 0000000000000000 RSI: 000000000000c17a RDI: 0000000000000007 [ 137.183282][ T8489] RBP: 00007efe87aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 137.183295][ T8489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.183305][ T8489] R13: 0000000000000000 R14: 00007efe89676080 R15: 00007ffda7387608 [ 137.183325][ T8489] [ 137.569792][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1522'. [ 137.603682][ T8499] loop4: detected capacity change from 0 to 164 [ 137.620364][ T8499] Unable to read rock-ridge attributes [ 137.632618][ T8499] Unable to read rock-ridge attributes [ 137.638383][ T8499] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 137.650292][ T8499] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1523'. [ 137.707319][ T8504] 9pnet_fd: Insufficient options for proto=fd [ 137.741032][ T8510] FAULT_INJECTION: forcing a failure. [ 137.741032][ T8510] name failslab, interval 1, probability 0, space 0, times 0 [ 137.753833][ T8510] CPU: 1 UID: 0 PID: 8510 Comm: syz.1.1528 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 137.754001][ T8510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.754013][ T8510] Call Trace: [ 137.754021][ T8510] [ 137.754030][ T8510] dump_stack_lvl+0xf6/0x150 [ 137.754058][ T8510] dump_stack+0x15/0x1a [ 137.754083][ T8510] should_fail_ex+0x261/0x270 [ 137.754153][ T8510] should_failslab+0x8f/0xb0 [ 137.754185][ T8510] __kmalloc_cache_noprof+0x55/0x320 [ 137.754221][ T8510] ? alloc_fdtable+0x74/0x1b0 [ 137.754247][ T8510] alloc_fdtable+0x74/0x1b0 [ 137.754325][ T8510] dup_fd+0x508/0x580 [ 137.754348][ T8510] ? _raw_spin_unlock+0x26/0x50 [ 137.754377][ T8510] ksys_unshare+0x345/0x700 [ 137.754431][ T8510] __x64_sys_unshare+0x1f/0x30 [ 137.754472][ T8510] x64_sys_call+0x2c93/0x2e10 [ 137.754493][ T8510] do_syscall_64+0xc9/0x1c0 [ 137.754511][ T8510] ? clear_bhb_loop+0x25/0x80 [ 137.754565][ T8510] ? clear_bhb_loop+0x25/0x80 [ 137.754592][ T8510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.754616][ T8510] RIP: 0033:0x7f212148d169 [ 137.754631][ T8510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.754648][ T8510] RSP: 002b:00007f211faf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 137.754670][ T8510] RAX: ffffffffffffffda RBX: 00007f21216a5fa0 RCX: 00007f212148d169 [ 137.754706][ T8510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 137.754720][ T8510] RBP: 00007f211faf7090 R08: 0000000000000000 R09: 0000000000000000 [ 137.754734][ T8510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.754746][ T8510] R13: 0000000000000000 R14: 00007f21216a5fa0 R15: 00007ffc75974c28 [ 137.754778][ T8510] [ 137.762136][ T8504] loop4: detected capacity change from 0 to 164 [ 137.814662][ T4598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.916979][ T8517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1531'. [ 137.925586][ T8504] FAULT_INJECTION: forcing a failure. [ 137.925586][ T8504] name failslab, interval 1, probability 0, space 0, times 0 [ 137.979247][ T8504] CPU: 1 UID: 0 PID: 8504 Comm: syz.4.1526 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 137.979279][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.979294][ T8504] Call Trace: [ 137.979301][ T8504] [ 137.979309][ T8504] dump_stack_lvl+0xf6/0x150 [ 137.979338][ T8504] dump_stack+0x15/0x1a [ 137.979359][ T8504] should_fail_ex+0x261/0x270 [ 137.979463][ T8504] should_failslab+0x8f/0xb0 [ 137.979489][ T8504] __kmalloc_cache_noprof+0x55/0x320 [ 137.979530][ T8504] ? alloc_bprm+0x64/0x680 [ 137.979558][ T8504] alloc_bprm+0x64/0x680 [ 137.979618][ T8504] do_execveat_common+0x12b/0x7e0 [ 137.979671][ T8504] ? getname_flags+0x15e/0x3b0 [ 137.979711][ T8504] __x64_sys_execveat+0x75/0x90 [ 137.979816][ T8504] x64_sys_call+0x2ac7/0x2e10 [ 137.979844][ T8504] do_syscall_64+0xc9/0x1c0 [ 137.979868][ T8504] ? clear_bhb_loop+0x25/0x80 [ 137.979896][ T8504] ? clear_bhb_loop+0x25/0x80 [ 137.980003][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.980031][ T8504] RIP: 0033:0x7fb2dc9ad169 [ 137.980120][ T8504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.980143][ T8504] RSP: 002b:00007fb2db017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 137.980166][ T8504] RAX: ffffffffffffffda RBX: 00007fb2dcbc5fa0 RCX: 00007fb2dc9ad169 [ 137.980182][ T8504] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 137.980225][ T8504] RBP: 00007fb2db017090 R08: 0000000000001000 R09: 0000000000000000 [ 137.980240][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.980255][ T8504] R13: 0000000000000000 R14: 00007fb2dcbc5fa0 R15: 00007fff56269ae8 [ 137.980279][ T8504] [ 138.022605][ T8521] loop6: detected capacity change from 0 to 512 [ 138.050903][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1533'. [ 138.135045][ T8521] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 138.206057][ T8521] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 138.281862][ T8539] loop6: detected capacity change from 0 to 512 [ 138.290723][ T8539] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.290899][ T8541] loop5: detected capacity change from 0 to 512 [ 138.335220][ T8539] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 138.353642][ T8539] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1540: attempt to clear invalid blocks 2 len 1 [ 138.374639][ T8541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.398140][ T8539] EXT4-fs (loop6): Remounting filesystem read-only [ 138.423227][ T8541] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.434425][ T8539] EXT4-fs (loop6): 1 truncate cleaned up [ 138.440837][ T8539] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.606158][ T8570] loop2: detected capacity change from 0 to 8192 [ 138.647144][ T4598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.678330][ T8578] loop6: detected capacity change from 0 to 512 [ 138.688964][ T8578] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 138.709478][ T8579] loop1: detected capacity change from 0 to 512 [ 138.716001][ T8578] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 138.728685][ T8579] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.746749][ T8579] EXT4-fs (loop1): 1 truncate cleaned up [ 138.761844][ T8579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.948160][ T8587] loop6: detected capacity change from 0 to 4096 [ 138.961007][ T8587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.994388][ T8587] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 139.041220][ T8587] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 139.089408][ T4598] EXT4-fs error (device loop6): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /222/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 139.146345][ T4598] EXT4-fs error (device loop6): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 139.227034][ T4598] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 139.248828][ T4598] EXT4-fs error (device loop6): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /222/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 139.309247][ T4598] EXT4-fs error (device loop6): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 139.387144][ T4598] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 139.408387][ T8605] loop2: detected capacity change from 0 to 512 [ 139.413985][ T4598] EXT4-fs error (device loop6): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /222/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 139.422113][ T8605] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.446989][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.487991][ T4598] EXT4-fs error (device loop6): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 139.493303][ T8605] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 139.551253][ T4598] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 139.587814][ T8611] loop4: detected capacity change from 0 to 2048 [ 139.605802][ T4598] EXT4-fs error (device loop6): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /222/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 139.644474][ T8605] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1560: attempt to clear invalid blocks 2 len 1 [ 139.668918][ T8605] EXT4-fs (loop2): Remounting filesystem read-only [ 139.676855][ T4598] EXT4-fs error (device loop6): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 139.698527][ T8605] EXT4-fs (loop2): 1 truncate cleaned up [ 139.704990][ T8605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.719706][ T4598] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 139.720166][ T8611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.741524][ T4598] EXT4-fs error (device loop6): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /222/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 139.766804][ T4598] EXT4-fs error (device loop6): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 139.791587][ T4598] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 139.804958][ T4598] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 139.817023][ T4598] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 139.833393][ T4598] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 139.847047][ T4598] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 139.859065][ T4598] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 139.891144][ T8609] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 139.891144][ T8609] program syz.5.1561 not setting count and/or reply_len properly [ 139.931727][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.995538][ T8614] loop5: detected capacity change from 0 to 128 [ 140.006593][ T8619] loop2: detected capacity change from 0 to 164 [ 140.027619][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.037213][ T8619] Unable to read rock-ridge attributes [ 140.052020][ T8619] Unable to read rock-ridge attributes [ 140.055147][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.059722][ T8619] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 140.095985][ T8622] loop1: detected capacity change from 0 to 512 [ 140.148856][ T8622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.164701][ T8622] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.191642][ T8637] FAULT_INJECTION: forcing a failure. [ 140.191642][ T8637] name failslab, interval 1, probability 0, space 0, times 0 [ 140.204435][ T8637] CPU: 1 UID: 0 PID: 8637 Comm: syz.4.1568 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 140.204462][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.204474][ T8637] Call Trace: [ 140.204479][ T8637] [ 140.204486][ T8637] dump_stack_lvl+0xf6/0x150 [ 140.204510][ T8637] dump_stack+0x15/0x1a [ 140.204527][ T8637] should_fail_ex+0x261/0x270 [ 140.204588][ T8637] should_failslab+0x8f/0xb0 [ 140.204612][ T8637] __kmalloc_cache_noprof+0x55/0x320 [ 140.204660][ T8637] ? tcf_action_init_1+0x118/0x4c0 [ 140.204688][ T8637] tcf_action_init_1+0x118/0x4c0 [ 140.204713][ T8637] ? strcmp+0x21/0x50 [ 140.204744][ T8637] tcf_action_init+0x1ce/0x620 [ 140.204853][ T8637] tc_ctl_action+0x2be/0x880 [ 140.204924][ T8637] ? __pfx_tc_ctl_action+0x10/0x10 [ 140.205032][ T8637] rtnetlink_rcv_msg+0x6b7/0x740 [ 140.205110][ T8637] ? ref_tracker_free+0x3b8/0x420 [ 140.205135][ T8637] netlink_rcv_skb+0x12f/0x230 [ 140.205165][ T8637] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.205199][ T8637] rtnetlink_rcv+0x1c/0x30 [ 140.205263][ T8637] netlink_unicast+0x605/0x6c0 [ 140.205293][ T8637] netlink_sendmsg+0x609/0x720 [ 140.205380][ T8637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.205487][ T8637] __sock_sendmsg+0x140/0x180 [ 140.205518][ T8637] ____sys_sendmsg+0x350/0x4e0 [ 140.205544][ T8637] __sys_sendmsg+0x1a0/0x240 [ 140.205574][ T8637] __x64_sys_sendmsg+0x46/0x50 [ 140.205591][ T8637] x64_sys_call+0x26f3/0x2e10 [ 140.205643][ T8637] do_syscall_64+0xc9/0x1c0 [ 140.205664][ T8637] ? clear_bhb_loop+0x25/0x80 [ 140.205689][ T8637] ? clear_bhb_loop+0x25/0x80 [ 140.205710][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.205729][ T8637] RIP: 0033:0x7fb2dc9ad169 [ 140.205743][ T8637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.205830][ T8637] RSP: 002b:00007fb2db017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.205853][ T8637] RAX: ffffffffffffffda RBX: 00007fb2dcbc5fa0 RCX: 00007fb2dc9ad169 [ 140.205867][ T8637] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 140.205881][ T8637] RBP: 00007fb2db017090 R08: 0000000000000000 R09: 0000000000000000 [ 140.205895][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.205908][ T8637] R13: 0000000000000000 R14: 00007fb2dcbc5fa0 R15: 00007fff56269ae8 [ 140.205929][ T8637] [ 140.316919][ T8640] netem: change failed [ 140.318434][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 140.318448][ T29] audit: type=1400 audit(1743399677.746:9764): avc: denied { create } for pid=8639 comm="syz.4.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.345104][ T8623] chnl_net:caif_netlink_parms(): no params data found [ 140.374419][ T29] audit: type=1400 audit(1743399677.796:9765): avc: denied { create } for pid=8639 comm="syz.4.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.503627][ T29] audit: type=1400 audit(1743399677.796:9766): avc: denied { ioctl } for pid=8639 comm="syz.4.1569" path="socket:[21367]" dev="sockfs" ino=21367 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.504091][ T29] audit: type=1400 audit(1743399677.866:9767): avc: denied { create } for pid=8639 comm="syz.4.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 140.548905][ T29] audit: type=1400 audit(1743399677.866:9768): avc: denied { write } for pid=8639 comm="syz.4.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.568354][ T29] audit: type=1400 audit(1743399677.896:9769): avc: denied { create } for pid=8631 comm="syz.2.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.589015][ T29] audit: type=1400 audit(1743399677.906:9770): avc: denied { write } for pid=8631 comm="syz.2.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.609644][ T29] audit: type=1400 audit(1743399678.036:9771): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 140.611521][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.631679][ T29] audit: type=1400 audit(1743399678.036:9772): avc: denied { search } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.662325][ T29] audit: type=1400 audit(1743399678.036:9773): avc: denied { open } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.718994][ T8652] loop4: detected capacity change from 0 to 512 [ 140.748541][ T8652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.762907][ T8652] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.826578][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.833736][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.853373][ T8623] bridge_slave_0: entered allmulticast mode [ 140.860090][ T8623] bridge_slave_0: entered promiscuous mode [ 140.867011][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.874123][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.881501][ T8623] bridge_slave_1: entered allmulticast mode [ 140.884653][ T8667] loop1: detected capacity change from 0 to 512 [ 140.888244][ T8623] bridge_slave_1: entered promiscuous mode [ 140.916324][ T8667] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.942440][ T8670] loop5: detected capacity change from 0 to 164 [ 140.953490][ T8623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.961714][ T8667] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 140.977538][ T8623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.992969][ T8670] Unable to read rock-ridge attributes [ 140.999080][ T8670] Unable to read rock-ridge attributes [ 141.018733][ T8670] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 141.064010][ T8623] team0: Port device team_slave_0 added [ 141.084370][ T8623] team0: Port device team_slave_1 added [ 141.121514][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.128587][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.128614][ T8623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.143710][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.172514][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.173598][ T8681] FAULT_INJECTION: forcing a failure. [ 141.173598][ T8681] name failslab, interval 1, probability 0, space 0, times 0 [ 141.198573][ T8623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.211169][ T8681] CPU: 1 UID: 0 PID: 8681 Comm: syz.2.1581 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 141.211232][ T8681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.211260][ T8681] Call Trace: [ 141.211268][ T8681] [ 141.211279][ T8681] dump_stack_lvl+0xf6/0x150 [ 141.211319][ T8681] dump_stack+0x15/0x1a [ 141.211341][ T8681] should_fail_ex+0x261/0x270 [ 141.211374][ T8681] should_failslab+0x8f/0xb0 [ 141.211414][ T8681] kmem_cache_alloc_noprof+0x59/0x340 [ 141.211524][ T8681] ? skb_clone+0x154/0x1f0 [ 141.211550][ T8681] skb_clone+0x154/0x1f0 [ 141.211575][ T8681] dev_queue_xmit_nit+0x15d/0x6a0 [ 141.211616][ T8681] dev_hard_start_xmit+0xe1/0x400 [ 141.211658][ T8681] ? validate_xmit_skb+0x68f/0x880 [ 141.211738][ T8681] __dev_queue_xmit+0x101a/0x20b0 [ 141.211761][ T8681] ? bt_sync_linked_regs+0xcb/0x2d0 [ 141.211804][ T8681] ? ip6t_do_table+0xed/0xbe0 [ 141.211829][ T8681] ? __dev_queue_xmit+0x18b/0x20b0 [ 141.211933][ T8681] ? netlbl_enabled+0x25/0x40 [ 141.211971][ T8681] ? selinux_ip_postroute+0x1ef/0xc10 [ 141.212001][ T8681] ip6_finish_output2+0xa61/0xd70 [ 141.212135][ T8681] ? __rcu_read_unlock+0x34/0x70 [ 141.212173][ T8681] ip6_finish_output+0x43b/0x540 [ 141.212217][ T8681] ip6_output+0xf7/0x240 [ 141.212299][ T8681] ? __pfx_ip6_finish_output+0x10/0x10 [ 141.212343][ T8681] ? __pfx_ip6_output+0x10/0x10 [ 141.212391][ T8681] ip6_xmit+0x93f/0xcc0 [ 141.212417][ T8681] ? __pfx_dst_output+0x10/0x10 [ 141.212438][ T8681] ? inet6_csk_route_socket+0x282/0x3e0 [ 141.212555][ T8681] inet6_csk_xmit+0x1df/0x220 [ 141.212597][ T8681] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 141.212719][ T8681] __tcp_transmit_skb+0x12dd/0x1a20 [ 141.212779][ T8681] tcp_connect+0x1e8d/0x22b0 [ 141.212818][ T8681] tcp_v6_connect+0xbbe/0xc80 [ 141.212838][ T8681] ? mod_objcg_state+0x3f9/0x530 [ 141.212886][ T8681] ? mod_objcg_state+0x3f9/0x530 [ 141.212934][ T8681] __inet_stream_connect+0x15c/0x7c0 [ 141.212972][ T8681] ? should_failslab+0x8f/0xb0 [ 141.213016][ T8681] ? __kmalloc_cache_noprof+0x18d/0x320 [ 141.213140][ T8681] ? tcp_sendmsg_fastopen+0x163/0x500 [ 141.213172][ T8681] tcp_sendmsg_fastopen+0x40e/0x500 [ 141.213205][ T8681] tcp_sendmsg_locked+0x2574/0x2760 [ 141.213236][ T8681] ? mntput+0x49/0x70 [ 141.213260][ T8681] ? terminate_walk+0x271/0x290 [ 141.213336][ T8681] ? __rcu_read_unlock+0x4e/0x70 [ 141.213371][ T8681] ? avc_has_perm_noaudit+0x1cc/0x210 [ 141.213405][ T8681] ? avc_has_perm+0xd6/0x150 [ 141.213432][ T8681] ? _raw_spin_unlock_bh+0x36/0x40 [ 141.213472][ T8681] ? __pfx_tcp_sendmsg+0x10/0x10 [ 141.213501][ T8681] tcp_sendmsg+0x30/0x50 [ 141.213530][ T8681] inet6_sendmsg+0x77/0xd0 [ 141.213598][ T8681] __sock_sendmsg+0x8b/0x180 [ 141.213631][ T8681] __sys_sendto+0x1aa/0x230 [ 141.213742][ T8681] __x64_sys_sendto+0x78/0x90 [ 141.213811][ T8681] x64_sys_call+0x2bcb/0x2e10 [ 141.213840][ T8681] do_syscall_64+0xc9/0x1c0 [ 141.213864][ T8681] ? clear_bhb_loop+0x25/0x80 [ 141.213934][ T8681] ? clear_bhb_loop+0x25/0x80 [ 141.213962][ T8681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.214065][ T8681] RIP: 0033:0x7f6f46a6d169 [ 141.214091][ T8681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.214115][ T8681] RSP: 002b:00007f6f450d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 141.214139][ T8681] RAX: ffffffffffffffda RBX: 00007f6f46c85fa0 RCX: 00007f6f46a6d169 [ 141.214154][ T8681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 141.214169][ T8681] RBP: 00007f6f450d7090 R08: 0000200000b63fe4 R09: 000000000000001c [ 141.214184][ T8681] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001 [ 141.214199][ T8681] R13: 0000000000000000 R14: 00007f6f46c85fa0 R15: 00007ffdbc59e7b8 [ 141.214226][ T8681] [ 141.300656][ T8679] __nla_validate_parse: 10 callbacks suppressed [ 141.300677][ T8679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1578'. [ 141.618264][ T8687] pim6reg: entered allmulticast mode [ 141.664202][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.691744][ T8677] pim6reg: left allmulticast mode [ 141.703278][ T8623] hsr_slave_0: entered promiscuous mode [ 141.715415][ T8623] hsr_slave_1: entered promiscuous mode [ 141.721557][ T8623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.729240][ T8623] Cannot create hsr debugfs directory [ 141.867075][ T8623] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 141.886595][ T8702] netlink: 'syz.5.1586': attribute type 1 has an invalid length. [ 141.896519][ T8623] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 141.910779][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1586'. [ 141.920066][ T8623] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 141.921970][ T8707] loop4: detected capacity change from 0 to 512 [ 141.940751][ T8623] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 141.955437][ T8707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.986427][ T8707] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.992589][ T8712] loop5: detected capacity change from 0 to 164 [ 142.033523][ T8715] loop1: detected capacity change from 0 to 512 [ 142.040113][ T8712] Unable to read rock-ridge attributes [ 142.050255][ T8715] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.067397][ T8712] Unable to read rock-ridge attributes [ 142.076571][ T8715] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 142.089835][ T8712] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 142.092982][ T8717] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.108426][ T8715] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1591: attempt to clear invalid blocks 2 len 1 [ 142.113760][ T8623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.128886][ T8712] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1590'. [ 142.132572][ T8715] EXT4-fs (loop1): Remounting filesystem read-only [ 142.150341][ T8623] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.173165][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.180299][ T8414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.191248][ T8715] EXT4-fs (loop1): 1 truncate cleaned up [ 142.197600][ T8715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.211691][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.218811][ T8414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.230614][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.267580][ T8426] nci: nci_rx_work: unknown MT 0x5 [ 142.285791][ T8727] loop4: detected capacity change from 0 to 512 [ 142.296744][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.344509][ T8727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.347696][ T8623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.366404][ T8727] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.445812][ T8740] loop1: detected capacity change from 0 to 8192 [ 142.547230][ T8623] veth0_vlan: entered promiscuous mode [ 142.566605][ T8623] veth1_vlan: entered promiscuous mode [ 142.591169][ T8623] veth0_macvtap: entered promiscuous mode [ 142.607042][ T8623] veth1_macvtap: entered promiscuous mode [ 142.628225][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.638816][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.648802][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.659314][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.669313][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.679787][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.689725][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.700190][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.780574][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.819557][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.861225][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.870733][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.905058][ T8754] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.913539][ T8754] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.921901][ T8754] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.930395][ T8754] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.977767][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.988386][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.998337][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.008885][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.018798][ T8623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.029249][ T8623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.040598][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.049317][ T8623] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.058185][ T8623] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.066943][ T8623] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.075714][ T8623] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.247306][ T8768] loop7: detected capacity change from 0 to 164 [ 143.258097][ T8768] Unable to read rock-ridge attributes [ 143.258199][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.270221][ T8768] Unable to read rock-ridge attributes [ 143.297755][ T8768] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 143.323771][ T8779] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1601'. [ 143.470106][ T8783] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 143.470106][ T8783] program syz.4.1606 not setting count and/or reply_len properly [ 143.555855][ T8794] loop4: detected capacity change from 0 to 128 [ 143.638020][ T8800] loop2: detected capacity change from 0 to 128 [ 143.668404][ T8803] loop5: detected capacity change from 0 to 512 [ 143.697038][ T8803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.711875][ T8803] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.739808][ T8419] bio_check_eod: 214 callbacks suppressed [ 143.739834][ T8419] kworker/u8:30: attempt to access beyond end of device [ 143.739834][ T8419] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 143.759380][ T8419] kworker/u8:30: attempt to access beyond end of device [ 143.759380][ T8419] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 143.773001][ T8419] kworker/u8:30: attempt to access beyond end of device [ 143.773001][ T8419] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 143.786950][ T8419] kworker/u8:30: attempt to access beyond end of device [ 143.786950][ T8419] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 143.800570][ T8419] kworker/u8:30: attempt to access beyond end of device [ 143.800570][ T8419] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 143.814638][ T8419] kworker/u8:30: attempt to access beyond end of device [ 143.814638][ T8419] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 143.828223][ T8419] kworker/u8:30: attempt to access beyond end of device [ 143.828223][ T8419] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 143.841869][ T8419] kworker/u8:30: attempt to access beyond end of device [ 143.841869][ T8419] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 143.856632][ T8419] kworker/u8:30: attempt to access beyond end of device [ 143.856632][ T8419] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 143.870235][ T8419] kworker/u8:30: attempt to access beyond end of device [ 143.870235][ T8419] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 144.294415][ T8823] loop2: detected capacity change from 0 to 164 [ 144.308871][ T8824] loop4: detected capacity change from 0 to 1764 [ 144.360732][ T8828] loop4: detected capacity change from 0 to 128 [ 144.382098][ T8823] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 144.586983][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.646460][ T8842] loop1: detected capacity change from 0 to 128 [ 144.683725][ T8842] serio: Serial port ptm0 [ 144.727759][ T8846] FAULT_INJECTION: forcing a failure. [ 144.727759][ T8846] name failslab, interval 1, probability 0, space 0, times 0 [ 144.740684][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.4.1627 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 144.740715][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.740730][ T8846] Call Trace: [ 144.740736][ T8846] [ 144.740768][ T8846] dump_stack_lvl+0xf6/0x150 [ 144.740861][ T8846] dump_stack+0x15/0x1a [ 144.740954][ T8846] should_fail_ex+0x261/0x270 [ 144.740975][ T8846] should_failslab+0x8f/0xb0 [ 144.741066][ T8846] kmem_cache_alloc_noprof+0x59/0x340 [ 144.741106][ T8846] ? getname_flags+0x81/0x3b0 [ 144.741142][ T8846] ? should_fail_ex+0xd7/0x270 [ 144.741220][ T8846] getname_flags+0x81/0x3b0 [ 144.741256][ T8846] user_path_at+0x26/0x140 [ 144.741276][ T8846] __se_sys_mount+0x25e/0x2e0 [ 144.741305][ T8846] ? fput+0x99/0xd0 [ 144.741336][ T8846] __x64_sys_mount+0x67/0x80 [ 144.741377][ T8846] x64_sys_call+0xd11/0x2e10 [ 144.741436][ T8846] do_syscall_64+0xc9/0x1c0 [ 144.741460][ T8846] ? clear_bhb_loop+0x25/0x80 [ 144.741481][ T8846] ? clear_bhb_loop+0x25/0x80 [ 144.741501][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.741530][ T8846] RIP: 0033:0x7fb2dc9ad169 [ 144.741549][ T8846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.741570][ T8846] RSP: 002b:00007fb2db017038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.741636][ T8846] RAX: ffffffffffffffda RBX: 00007fb2dcbc5fa0 RCX: 00007fb2dc9ad169 [ 144.741648][ T8846] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000480 [ 144.741659][ T8846] RBP: 00007fb2db017090 R08: 0000000000000000 R09: 0000000000000000 [ 144.741669][ T8846] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 144.741681][ T8846] R13: 0000000000000000 R14: 00007fb2dcbc5fa0 R15: 00007fff56269ae8 [ 144.741704][ T8846] [ 145.000379][ T8862] loop4: detected capacity change from 0 to 512 [ 145.041232][ T8862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.044295][ T8869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1632'. [ 145.054467][ T8862] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.087314][ T8872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1635'. [ 145.351175][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 145.351193][ T29] audit: type=1400 audit(1743399682.806:10159): avc: denied { kexec_image_load } for pid=8878 comm="syz.7.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 145.412960][ T29] audit: type=1400 audit(1743399682.866:10160): avc: denied { getopt } for pid=8880 comm="syz.7.1638" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.415981][ T8881] loop7: detected capacity change from 0 to 128 [ 145.448096][ T29] audit: type=1400 audit(1743399682.906:10161): avc: denied { mount } for pid=8880 comm="syz.7.1638" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 145.501980][ T29] audit: type=1400 audit(1743399682.956:10162): avc: denied { create } for pid=8880 comm="syz.7.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.542933][ T29] audit: type=1400 audit(1743399682.956:10163): avc: denied { write } for pid=8880 comm="syz.7.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.562487][ T29] audit: type=1400 audit(1743399682.956:10164): avc: denied { setopt } for pid=8880 comm="syz.7.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.585479][ T29] audit: type=1400 audit(1743399683.046:10165): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 145.607685][ T29] audit: type=1400 audit(1743399683.046:10166): avc: denied { search } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.629580][ T29] audit: type=1400 audit(1743399683.046:10167): avc: denied { open } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.652235][ T29] audit: type=1400 audit(1743399683.046:10168): avc: denied { getattr } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.740307][ T8884] loop7: detected capacity change from 0 to 512 [ 145.750121][ T8884] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 145.798970][ T8884] EXT4-fs (loop7): 1 truncate cleaned up [ 145.805215][ T8884] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.919424][ T8895] netlink: 'syz.5.1643': attribute type 8 has an invalid length. [ 145.925952][ T8894] netlink: 'syz.5.1643': attribute type 8 has an invalid length. [ 145.927219][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1643'. [ 145.934967][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1643'. [ 146.091120][ T8903] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1645'. [ 146.099853][ T8904] loop1: detected capacity change from 0 to 164 [ 146.121253][ T8904] Unable to read rock-ridge attributes [ 146.131754][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.142199][ T8904] Unable to read rock-ridge attributes [ 146.169829][ T8904] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 146.196772][ T8904] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1646'. [ 146.232758][ T8911] FAULT_INJECTION: forcing a failure. [ 146.232758][ T8911] name failslab, interval 1, probability 0, space 0, times 0 [ 146.245780][ T8911] CPU: 1 UID: 0 PID: 8911 Comm: syz.2.1650 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 146.245853][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.245867][ T8911] Call Trace: [ 146.245875][ T8911] [ 146.245884][ T8911] dump_stack_lvl+0xf6/0x150 [ 146.245911][ T8911] dump_stack+0x15/0x1a [ 146.245930][ T8911] should_fail_ex+0x261/0x270 [ 146.245954][ T8911] should_failslab+0x8f/0xb0 [ 146.246059][ T8911] kmem_cache_alloc_noprof+0x59/0x340 [ 146.246096][ T8911] ? security_file_alloc+0x32/0x100 [ 146.246130][ T8911] security_file_alloc+0x32/0x100 [ 146.246181][ T8911] init_file+0x5e/0x1e0 [ 146.246217][ T8911] alloc_empty_file+0x8e/0x200 [ 146.246335][ T8911] alloc_file_pseudo+0xcb/0x160 [ 146.246377][ T8911] anon_inode_getfile_fmode+0xa5/0x150 [ 146.246402][ T8911] do_signalfd4+0x16f/0x2c0 [ 146.246425][ T8911] __x64_sys_signalfd+0xc0/0xf0 [ 146.246528][ T8911] x64_sys_call+0xc05/0x2e10 [ 146.246617][ T8911] do_syscall_64+0xc9/0x1c0 [ 146.246641][ T8911] ? clear_bhb_loop+0x25/0x80 [ 146.246665][ T8911] ? clear_bhb_loop+0x25/0x80 [ 146.246690][ T8911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.246724][ T8911] RIP: 0033:0x7f6f46a6d169 [ 146.246742][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.246763][ T8911] RSP: 002b:00007f6f450d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 146.246841][ T8911] RAX: ffffffffffffffda RBX: 00007f6f46c85fa0 RCX: 00007f6f46a6d169 [ 146.246855][ T8911] RDX: 0000000000000008 RSI: 00002000000001c0 RDI: ffffffffffffffff [ 146.246866][ T8911] RBP: 00007f6f450d7090 R08: 0000000000000000 R09: 0000000000000000 [ 146.246877][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.246888][ T8911] R13: 0000000000000000 R14: 00007f6f46c85fa0 R15: 00007ffdbc59e7b8 [ 146.246905][ T8911] [ 146.541398][ T8909] loop4: detected capacity change from 0 to 8192 [ 146.652736][ T8930] loop1: detected capacity change from 0 to 512 [ 146.658130][ T8929] loop2: detected capacity change from 0 to 2048 [ 146.700534][ T8930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.724102][ T8929] loop2: p1 < > p4 < > [ 146.744988][ T8930] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.758903][ T3005] loop2: p1 < > p4 < > [ 146.806915][ T3378] udevd[3378]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 146.810623][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 146.837267][ T8938] loop2: detected capacity change from 0 to 164 [ 146.886315][ T3378] udevd[3378]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 146.898027][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 146.923300][ T8938] Unable to read rock-ridge attributes [ 146.976140][ T8938] Unable to read rock-ridge attributes [ 147.004077][ T8942] loop5: detected capacity change from 0 to 128 [ 147.011359][ T8938] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 147.019453][ T8623] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.029392][ T8942] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.045938][ T8943] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1659'. [ 147.076233][ T8942] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.155977][ T8426] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.239930][ T8960] loop5: detected capacity change from 0 to 512 [ 147.254211][ T8960] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.270828][ T8960] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 147.288926][ T8960] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1668: attempt to clear invalid blocks 2 len 1 [ 147.315790][ T8960] EXT4-fs (loop5): Remounting filesystem read-only [ 147.323563][ T8960] EXT4-fs (loop5): 1 truncate cleaned up [ 147.329663][ T8960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.367361][ T8973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1671'. [ 147.414815][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.540777][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.817162][ T8993] loop1: detected capacity change from 0 to 512 [ 147.824190][ T8993] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.834395][ T8993] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 148.107845][ T9004] loop5: detected capacity change from 0 to 164 [ 148.115457][ T9004] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 148.149468][ T9006] loop1: detected capacity change from 0 to 128 [ 148.178074][ T9010] loop7: detected capacity change from 0 to 512 [ 148.178852][ T3363] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 148.191826][ T3363] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 148.199290][ T3363] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 148.220026][ T9014] mmap: syz.5.1689 (9014) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 148.233846][ T9006] FAULT_INJECTION: forcing a failure. [ 148.233846][ T9006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.247191][ T9006] CPU: 1 UID: 0 PID: 9006 Comm: syz.1.1685 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 148.247224][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.247270][ T9006] Call Trace: [ 148.247277][ T9006] [ 148.247287][ T9006] dump_stack_lvl+0xf6/0x150 [ 148.247315][ T9006] dump_stack+0x15/0x1a [ 148.247336][ T9006] should_fail_ex+0x261/0x270 [ 148.247360][ T9006] should_fail_alloc_page+0xfd/0x110 [ 148.247394][ T9006] __alloc_frozen_pages_noprof+0x11e/0x340 [ 148.247580][ T9006] alloc_pages_mpol+0xb6/0x260 [ 148.247603][ T9006] vma_alloc_folio_noprof+0x1a2/0x310 [ 148.247626][ T9006] handle_mm_fault+0xdec/0x2b30 [ 148.247717][ T9006] ? __rcu_read_lock+0x36/0x50 [ 148.247749][ T9006] ? __pte_offset_map_lock+0x1d3/0x290 [ 148.247782][ T9006] __get_user_pages+0xf64/0x2350 [ 148.247831][ T9006] __gup_longterm_locked+0x943/0xfb0 [ 148.247909][ T9006] ? try_get_folio+0x36c/0x3c0 [ 148.247934][ T9006] ? mod_node_page_state+0x1c/0xd0 [ 148.247994][ T9006] gup_fast_fallback+0x1586/0x2030 [ 148.248096][ T9006] pin_user_pages_fast+0x64/0xa0 [ 148.248219][ T9006] iov_iter_extract_pages+0x253/0x3d0 [ 148.248250][ T9006] __blockdev_direct_IO+0xa3b/0x1ef0 [ 148.248293][ T9006] ? __pfx_fat_get_block+0x10/0x10 [ 148.248372][ T9006] ? __pfx_fat_get_block+0x10/0x10 [ 148.248397][ T9006] fat_direct_IO+0x10a/0x1d0 [ 148.248426][ T9006] generic_file_read_iter+0x227/0x330 [ 148.248469][ T9006] aio_read+0x1ec/0x300 [ 148.248528][ T9006] io_submit_one+0xade/0x1230 [ 148.248617][ T9006] __se_sys_io_submit+0xf7/0x280 [ 148.248654][ T9006] __x64_sys_io_submit+0x43/0x50 [ 148.248748][ T9006] x64_sys_call+0xa8b/0x2e10 [ 148.248851][ T9006] do_syscall_64+0xc9/0x1c0 [ 148.248876][ T9006] ? clear_bhb_loop+0x25/0x80 [ 148.248902][ T9006] ? clear_bhb_loop+0x25/0x80 [ 148.248927][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.248951][ T9006] RIP: 0033:0x7f212148d169 [ 148.248967][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.248991][ T9006] RSP: 002b:00007f211faf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 148.249046][ T9006] RAX: ffffffffffffffda RBX: 00007f21216a5fa0 RCX: 00007f212148d169 [ 148.249060][ T9006] RDX: 0000200000001d00 RSI: 0000000000000002 RDI: 00007f21221e0000 [ 148.249073][ T9006] RBP: 00007f211faf7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.249087][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.249101][ T9006] R13: 0000000000000000 R14: 00007f21216a5fa0 R15: 00007ffc75974c28 [ 148.249186][ T9006] [ 148.252535][ T3363] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 148.290193][ T9018] loop2: detected capacity change from 0 to 512 [ 148.430783][ T9010] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.473177][ T9018] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.480996][ T9010] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.485743][ T9018] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 148.559353][ T9032] loop5: detected capacity change from 0 to 512 [ 148.575009][ T9018] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 148.586107][ T9018] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 148.594278][ T9018] System zones: 0-2, 18-18, 34-35 [ 148.600092][ T9018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.605460][ T9032] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 148.629406][ T9032] EXT4-fs (loop5): orphan cleanup on readonly fs [ 148.636040][ T9032] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 148.653741][ T9032] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 148.660762][ T9032] EXT4-fs error (device loop5): ext4_orphan_get:1390: inode #16: comm syz.5.1692: casefold flag without casefold feature [ 148.676177][ T9032] EXT4-fs (loop5): Remounting filesystem read-only [ 148.694056][ T9032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.732235][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.747972][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.800409][ T9040] loop1: detected capacity change from 0 to 512 [ 148.807371][ T9044] loop5: detected capacity change from 0 to 512 [ 148.832360][ T9040] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.842292][ T9040] EXT4-fs (loop1): inodes count not valid: 23 vs 32 [ 148.842928][ T9044] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 148.868442][ T9044] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 148.883686][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1697'. [ 148.910421][ T9051] loop1: detected capacity change from 0 to 512 [ 148.933447][ T9051] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.960179][ T9051] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 149.003387][ T9051] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1698: attempt to clear invalid blocks 2 len 1 [ 149.024267][ T9058] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1699'. [ 149.034671][ T9051] EXT4-fs (loop1): Remounting filesystem read-only [ 149.052730][ T9058] loop5: detected capacity change from 0 to 512 [ 149.080170][ T9057] team0 (unregistering): Port device team_slave_0 removed [ 149.089719][ T9051] EXT4-fs (loop1): 1 truncate cleaned up [ 149.097641][ T9057] team0 (unregistering): Port device team_slave_1 removed [ 149.107075][ T9051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.189900][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.238820][ T9071] loop4: detected capacity change from 0 to 128 [ 149.258577][ T9069] loop1: detected capacity change from 0 to 128 [ 149.342603][ T8419] bio_check_eod: 327 callbacks suppressed [ 149.342617][ T8419] kworker/u8:30: attempt to access beyond end of device [ 149.342617][ T8419] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 149.348054][ T9074] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 149.348054][ T9074] program syz.5.1704 not setting count and/or reply_len properly [ 149.349566][ T8419] kworker/u8:30: attempt to access beyond end of device [ 149.349566][ T8419] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 149.393088][ T8623] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.441657][ T8419] kworker/u8:30: attempt to access beyond end of device [ 149.441657][ T8419] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 149.466992][ T8419] kworker/u8:30: attempt to access beyond end of device [ 149.466992][ T8419] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 149.492882][ T8419] kworker/u8:30: attempt to access beyond end of device [ 149.492882][ T8419] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 149.506960][ T8426] kworker/u8:35: attempt to access beyond end of device [ 149.506960][ T8426] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 149.521269][ T9073] loop5: detected capacity change from 0 to 128 [ 149.529226][ T8426] kworker/u8:35: attempt to access beyond end of device [ 149.529226][ T8426] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 149.544722][ T8419] kworker/u8:30: attempt to access beyond end of device [ 149.544722][ T8419] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 149.563168][ T8426] kworker/u8:35: attempt to access beyond end of device [ 149.563168][ T8426] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 149.576749][ T8419] kworker/u8:30: attempt to access beyond end of device [ 149.576749][ T8419] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 149.717917][ T9092] loop7: detected capacity change from 0 to 164 [ 149.734406][ T9092] Unable to read rock-ridge attributes [ 149.735217][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1713'. [ 149.741643][ T9092] Unable to read rock-ridge attributes [ 149.757684][ T9092] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 149.796704][ T9092] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1711'. [ 149.856103][ T9104] loop1: detected capacity change from 0 to 128 [ 149.893991][ T9106] loop7: detected capacity change from 0 to 128 [ 150.003394][ T9109] loop1: detected capacity change from 0 to 512 [ 150.011854][ T9109] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.035583][ T9109] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 150.045288][ T9109] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1718: attempt to clear invalid blocks 2 len 1 [ 150.100090][ T9109] EXT4-fs (loop1): Remounting filesystem read-only [ 150.108259][ T9109] EXT4-fs (loop1): 1 truncate cleaned up [ 150.116805][ T9109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.226293][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.267230][ T8434] nci: nci_rx_work: unknown MT 0x5 [ 150.551610][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 150.551634][ T29] audit: type=1400 audit(1743399688.006:10509): avc: denied { create } for pid=9128 comm="syz.4.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.577765][ T29] audit: type=1400 audit(1743399688.006:10510): avc: denied { bind } for pid=9128 comm="syz.4.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.597413][ T29] audit: type=1400 audit(1743399688.006:10511): avc: denied { listen } for pid=9128 comm="syz.4.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.617285][ T29] audit: type=1400 audit(1743399688.006:10512): avc: denied { connect } for pid=9128 comm="syz.4.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.637166][ T29] audit: type=1400 audit(1743399688.006:10513): avc: denied { write } for pid=9128 comm="syz.4.1723" path="socket:[24248]" dev="sockfs" ino=24248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.660837][ T29] audit: type=1400 audit(1743399688.006:10514): avc: denied { accept } for pid=9128 comm="syz.4.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.680696][ T29] audit: type=1400 audit(1743399688.006:10515): avc: denied { read } for pid=9128 comm="syz.4.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.780061][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1724'. [ 151.148287][ T9135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1725'. [ 151.197265][ T9141] loop7: detected capacity change from 0 to 164 [ 151.232297][ T9141] Unable to read rock-ridge attributes [ 151.266847][ T9141] Unable to read rock-ridge attributes [ 151.278295][ T9146] loop5: detected capacity change from 0 to 512 [ 151.302064][ T9148] loop2: detected capacity change from 0 to 128 [ 151.322458][ T9149] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1727'. [ 151.333185][ T9141] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 151.344526][ T9146] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.356676][ T9146] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 151.390281][ T9146] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1729: attempt to clear invalid blocks 2 len 1 [ 151.405146][ T9146] EXT4-fs (loop5): Remounting filesystem read-only [ 151.411910][ T9146] EXT4-fs (loop5): 1 truncate cleaned up [ 151.418554][ T9146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.472141][ T29] audit: type=1400 audit(1743399688.926:10516): avc: denied { allowed } for pid=9122 comm="syz.1.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 151.492070][ T29] audit: type=1400 audit(1743399688.926:10517): avc: denied { create } for pid=9122 comm="syz.1.1722" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 151.513509][ T29] audit: type=1400 audit(1743399688.926:10518): avc: denied { map } for pid=9122 comm="syz.1.1722" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 151.665813][ T9161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1735'. [ 151.690304][ T9164] loop1: detected capacity change from 0 to 128 [ 151.756346][ T9172] loop5: detected capacity change from 0 to 1024 [ 151.776103][ T9172] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.805158][ T9172] 9pnet_fd: Insufficient options for proto=fd [ 151.828256][ T9177] loop2: detected capacity change from 0 to 128 [ 151.848478][ T9177] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.867095][ T9179] loop5: detected capacity change from 0 to 164 [ 151.874139][ T9177] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.888250][ T9179] Unable to read rock-ridge attributes [ 151.902131][ T9179] Unable to read rock-ridge attributes [ 151.909225][ T9179] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 151.952013][ T9181] loop1: detected capacity change from 0 to 512 [ 151.965546][ T9181] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.983254][ T9181] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 152.011749][ T9181] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1743: attempt to clear invalid blocks 2 len 1 [ 152.030149][ T9181] EXT4-fs (loop1): Remounting filesystem read-only [ 152.044562][ T9192] loop5: detected capacity change from 0 to 128 [ 152.051902][ T9181] EXT4-fs (loop1): 1 truncate cleaned up [ 152.197236][ T9203] loop5: detected capacity change from 0 to 512 [ 152.205777][ T9203] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.228669][ T9203] EXT4-fs (loop5): 1 truncate cleaned up [ 152.452167][ T9216] loop4: detected capacity change from 0 to 164 [ 152.473248][ T9216] Unable to read rock-ridge attributes [ 152.479204][ T9216] Unable to read rock-ridge attributes [ 152.485329][ T9216] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 152.502708][ T9216] __nla_validate_parse: 1 callbacks suppressed [ 152.502725][ T9216] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1755'. [ 152.565941][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1757'. [ 152.613528][ T9225] loop7: detected capacity change from 0 to 512 [ 152.641440][ T9225] EXT4-fs: Ignoring removed oldalloc option [ 152.650746][ T9225] ext2: Bad value for 'auto_da_alloc' [ 152.656591][ T9227] loop4: detected capacity change from 0 to 512 [ 152.671686][ T9227] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.697000][ T9227] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 152.710682][ T9230] loop7: detected capacity change from 0 to 128 [ 152.717051][ T9227] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1760: attempt to clear invalid blocks 2 len 1 [ 152.743378][ T9227] EXT4-fs (loop4): Remounting filesystem read-only [ 152.753103][ T9227] EXT4-fs (loop4): 1 truncate cleaned up [ 153.004400][ T9241] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 153.004400][ T9241] program syz.7.1763 not setting count and/or reply_len properly [ 153.131933][ T9238] loop7: detected capacity change from 0 to 128 [ 153.909737][ T9263] loop1: detected capacity change from 0 to 128 [ 153.982546][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1772'. [ 154.015477][ T9270] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 154.015477][ T9270] program syz.7.1771 not setting count and/or reply_len properly [ 154.170998][ T9274] loop5: detected capacity change from 0 to 512 [ 154.205784][ T9274] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.234178][ T9277] FAULT_INJECTION: forcing a failure. [ 154.234178][ T9277] name failslab, interval 1, probability 0, space 0, times 0 [ 154.246951][ T9277] CPU: 1 UID: 0 PID: 9277 Comm: syz.1.1776 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 154.246981][ T9277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.246993][ T9277] Call Trace: [ 154.247005][ T9277] [ 154.247074][ T9277] dump_stack_lvl+0xf6/0x150 [ 154.247129][ T9277] dump_stack+0x15/0x1a [ 154.247150][ T9277] should_fail_ex+0x261/0x270 [ 154.247175][ T9277] should_failslab+0x8f/0xb0 [ 154.247286][ T9277] kmem_cache_alloc_noprof+0x59/0x340 [ 154.247318][ T9277] ? audit_log_start+0x37f/0x6e0 [ 154.247367][ T9277] audit_log_start+0x37f/0x6e0 [ 154.247388][ T9277] ? kstrtouint+0x7b/0xc0 [ 154.247428][ T9277] audit_seccomp+0x4b/0x130 [ 154.247451][ T9277] __seccomp_filter+0x694/0x10e0 [ 154.247524][ T9277] ? vfs_write+0x669/0x950 [ 154.247583][ T9277] ? putname+0xe1/0x100 [ 154.247623][ T9277] __secure_computing+0x7e/0x160 [ 154.247658][ T9277] syscall_trace_enter+0xcf/0x1f0 [ 154.247689][ T9277] ? fpregs_assert_state_consistent+0x83/0xa0 [ 154.247738][ T9277] do_syscall_64+0xaa/0x1c0 [ 154.247763][ T9277] ? clear_bhb_loop+0x25/0x80 [ 154.247788][ T9277] ? clear_bhb_loop+0x25/0x80 [ 154.247808][ T9277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.247833][ T9277] RIP: 0033:0x7f212148d169 [ 154.247927][ T9277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.247944][ T9277] RSP: 002b:00007f211faf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 154.247965][ T9277] RAX: ffffffffffffffda RBX: 00007f21216a5fa0 RCX: 00007f212148d169 [ 154.247979][ T9277] RDX: 0000000000000083 RSI: 0000200000000480 RDI: 0000000000000000 [ 154.248053][ T9277] RBP: 00007f211faf7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.248065][ T9277] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 154.248076][ T9277] R13: 0000000000000000 R14: 00007f21216a5fa0 R15: 00007ffc75974c28 [ 154.248093][ T9277] [ 154.448688][ T9265] loop7: detected capacity change from 0 to 128 [ 154.463700][ T9274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.485925][ T9274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.508639][ T9274] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1775'. [ 154.527602][ T9283] loop1: detected capacity change from 0 to 8192 [ 154.541268][ T9277] bio_check_eod: 998 callbacks suppressed [ 154.541286][ T9277] syz.1.1776: attempt to access beyond end of device [ 154.541286][ T9277] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 154.560729][ T9277] Buffer I/O error on dev loop1, logical block 57847, async page read [ 154.598851][ T9285] loop1: detected capacity change from 0 to 512 [ 154.605776][ T9285] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 154.616978][ T9285] EXT4-fs (loop1): 1 truncate cleaned up [ 154.831375][ T9292] loop4: detected capacity change from 0 to 8192 [ 154.968201][ T9299] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 154.968201][ T9299] program syz.7.1781 not setting count and/or reply_len properly [ 155.001172][ T9300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1782'. [ 155.066915][ T3363] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 155.074409][ T3363] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 155.081824][ T3363] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 155.089850][ T9304] loop7: detected capacity change from 0 to 128 [ 155.109273][ T3363] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 155.138343][ T9302] loop5: detected capacity change from 0 to 512 [ 155.154117][ T9302] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.163226][ T9302] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 155.192986][ T9302] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 155.202846][ T9302] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 155.211083][ T9302] System zones: 0-2, 18-18, 34-35 [ 155.269797][ T9312] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1785'. [ 155.336955][ T9318] netlink: 'syz.4.1787': attribute type 21 has an invalid length. [ 155.345272][ T9318] netlink: 'syz.4.1787': attribute type 1 has an invalid length. [ 155.353076][ T9318] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1787'. [ 155.406907][ T9323] loop5: detected capacity change from 0 to 128 [ 155.459228][ T9324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1788'. [ 155.554166][ T8419] kworker/u8:30: attempt to access beyond end of device [ 155.554166][ T8419] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 155.568147][ T8419] kworker/u8:30: attempt to access beyond end of device [ 155.568147][ T8419] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 155.582436][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 155.582449][ T29] audit: type=1400 audit(1743399693.046:10846): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 155.583017][ T8419] kworker/u8:30: attempt to access beyond end of device [ 155.583017][ T8419] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 155.588683][ T29] audit: type=1400 audit(1743399693.046:10847): avc: denied { search } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.613451][ T8419] kworker/u8:30: attempt to access beyond end of device [ 155.613451][ T8419] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 155.624267][ T29] audit: type=1400 audit(1743399693.046:10848): avc: denied { open } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 155.649036][ T8419] kworker/u8:30: attempt to access beyond end of device [ 155.649036][ T8419] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 155.659271][ T29] audit: type=1400 audit(1743399693.046:10849): avc: denied { getattr } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 155.683902][ T8419] kworker/u8:30: attempt to access beyond end of device [ 155.683902][ T8419] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 155.736153][ T29] audit: type=1400 audit(1743399693.196:10850): avc: denied { create } for pid=9328 comm="syz.1.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.759820][ T29] audit: type=1400 audit(1743399693.196:10851): avc: denied { mount } for pid=9328 comm="syz.1.1792" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 155.786121][ T8419] kworker/u8:30: attempt to access beyond end of device [ 155.786121][ T8419] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 155.801961][ T8419] kworker/u8:30: attempt to access beyond end of device [ 155.801961][ T8419] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 155.827331][ T8419] kworker/u8:30: attempt to access beyond end of device [ 155.827331][ T8419] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 155.855133][ T29] audit: type=1400 audit(1743399693.306:10852): avc: denied { execmem } for pid=9332 comm="syz.7.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 155.875659][ T29] audit: type=1400 audit(1743399693.336:10853): avc: denied { create } for pid=9328 comm="syz.1.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 155.897087][ T29] audit: type=1400 audit(1743399693.356:10854): avc: denied { bind } for pid=9328 comm="syz.1.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 155.916678][ T29] audit: type=1400 audit(1743399693.356:10855): avc: denied { name_bind } for pid=9328 comm="syz.1.1792" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 156.025719][ T9336] FAULT_INJECTION: forcing a failure. [ 156.025719][ T9336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.035987][ T9346] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1797'. [ 156.038861][ T9336] CPU: 0 UID: 0 PID: 9336 Comm: syz.7.1794 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 156.038900][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.038916][ T9336] Call Trace: [ 156.038924][ T9336] [ 156.038932][ T9336] dump_stack_lvl+0xf6/0x150 [ 156.038992][ T9336] dump_stack+0x15/0x1a [ 156.039017][ T9336] should_fail_ex+0x261/0x270 [ 156.039100][ T9336] should_fail+0xb/0x10 [ 156.039122][ T9336] should_fail_usercopy+0x1a/0x20 [ 156.039151][ T9336] strncpy_from_user+0x25/0x230 [ 156.039323][ T9336] ? kstrtouint_from_user+0xbf/0x100 [ 156.039349][ T9336] path_setxattrat+0xef/0x320 [ 156.039407][ T9336] __x64_sys_lsetxattr+0x71/0x90 [ 156.039445][ T9336] x64_sys_call+0x2014/0x2e10 [ 156.039473][ T9336] do_syscall_64+0xc9/0x1c0 [ 156.039541][ T9336] ? clear_bhb_loop+0x25/0x80 [ 156.039567][ T9336] ? clear_bhb_loop+0x25/0x80 [ 156.039613][ T9336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.039646][ T9336] RIP: 0033:0x7f07e8bad169 [ 156.039666][ T9336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.039688][ T9336] RSP: 002b:00007f07e71f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 156.039712][ T9336] RAX: ffffffffffffffda RBX: 00007f07e8dc6080 RCX: 00007f07e8bad169 [ 156.039727][ T9336] RDX: 0000200000000540 RSI: 0000200000000440 RDI: 0000200000000280 [ 156.039742][ T9336] RBP: 00007f07e71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.039755][ T9336] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 156.039841][ T9336] R13: 0000000000000000 R14: 00007f07e8dc6080 R15: 00007ffc0f319c08 [ 156.039864][ T9336] [ 156.241779][ T9352] loop5: detected capacity change from 0 to 512 [ 156.257310][ T9354] FAULT_INJECTION: forcing a failure. [ 156.257310][ T9354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.270476][ T9354] CPU: 0 UID: 0 PID: 9354 Comm: syz.2.1799 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 156.270509][ T9354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.270524][ T9354] Call Trace: [ 156.270530][ T9354] [ 156.270538][ T9354] dump_stack_lvl+0xf6/0x150 [ 156.270576][ T9354] dump_stack+0x15/0x1a [ 156.270595][ T9354] should_fail_ex+0x261/0x270 [ 156.270627][ T9354] should_fail+0xb/0x10 [ 156.270646][ T9354] should_fail_usercopy+0x1a/0x20 [ 156.270736][ T9354] _copy_to_user+0x20/0xa0 [ 156.270761][ T9354] simple_read_from_buffer+0xb2/0x130 [ 156.270792][ T9354] proc_fail_nth_read+0x103/0x140 [ 156.270825][ T9354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.271066][ T9354] vfs_read+0x1b2/0x710 [ 156.271091][ T9354] ? __rcu_read_unlock+0x4e/0x70 [ 156.271124][ T9354] ? __fget_files+0x186/0x1c0 [ 156.271207][ T9354] ksys_read+0xeb/0x1b0 [ 156.271294][ T9354] __x64_sys_read+0x42/0x50 [ 156.271418][ T9354] x64_sys_call+0x2a3b/0x2e10 [ 156.271444][ T9354] do_syscall_64+0xc9/0x1c0 [ 156.271467][ T9354] ? clear_bhb_loop+0x25/0x80 [ 156.271498][ T9354] ? clear_bhb_loop+0x25/0x80 [ 156.271591][ T9354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.271622][ T9354] RIP: 0033:0x7f6f46a6bb7c [ 156.271640][ T9354] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 156.271718][ T9354] RSP: 002b:00007f6f450d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.271738][ T9354] RAX: ffffffffffffffda RBX: 00007f6f46c85fa0 RCX: 00007f6f46a6bb7c [ 156.271750][ T9354] RDX: 000000000000000f RSI: 00007f6f450d70a0 RDI: 0000000000000006 [ 156.271761][ T9354] RBP: 00007f6f450d7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.271771][ T9354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.271782][ T9354] R13: 0000000000000000 R14: 00007f6f46c85fa0 R15: 00007ffdbc59e7b8 [ 156.271815][ T9354] [ 156.272185][ T9352] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 156.354700][ T9357] loop4: detected capacity change from 0 to 1024 [ 156.371590][ T9352] EXT4-fs (loop5): 1 truncate cleaned up [ 156.427335][ T9360] loop2: detected capacity change from 0 to 512 [ 156.538929][ T9360] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.580246][ T9360] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 156.591392][ T9357] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1801'. [ 156.604794][ T9360] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1802: attempt to clear invalid blocks 2 len 1 [ 156.617902][ T9360] EXT4-fs (loop2): Remounting filesystem read-only [ 156.638785][ T9360] EXT4-fs (loop2): 1 truncate cleaned up [ 156.750020][ T9370] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 156.750020][ T9370] program syz.1.1804 not setting count and/or reply_len properly [ 156.869975][ T9367] loop1: detected capacity change from 0 to 128 [ 157.185803][ T9381] FAULT_INJECTION: forcing a failure. [ 157.185803][ T9381] name failslab, interval 1, probability 0, space 0, times 0 [ 157.198577][ T9381] CPU: 1 UID: 0 PID: 9381 Comm: syz.2.1807 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 157.198611][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.198626][ T9381] Call Trace: [ 157.198635][ T9381] [ 157.198643][ T9381] dump_stack_lvl+0xf6/0x150 [ 157.198669][ T9381] dump_stack+0x15/0x1a [ 157.198684][ T9381] should_fail_ex+0x261/0x270 [ 157.198774][ T9381] should_failslab+0x8f/0xb0 [ 157.198799][ T9381] kmem_cache_alloc_noprof+0x59/0x340 [ 157.198830][ T9381] ? fasync_helper+0x44/0xc0 [ 157.198854][ T9381] fasync_helper+0x44/0xc0 [ 157.198876][ T9381] pipe_fasync+0xd1/0x160 [ 157.198958][ T9381] do_fcntl+0xc2f/0xe20 [ 157.198980][ T9381] __se_sys_fcntl+0xbd/0x1b0 [ 157.199015][ T9381] __x64_sys_fcntl+0x43/0x50 [ 157.199076][ T9381] x64_sys_call+0x1ecc/0x2e10 [ 157.199163][ T9381] do_syscall_64+0xc9/0x1c0 [ 157.199188][ T9381] ? clear_bhb_loop+0x25/0x80 [ 157.199265][ T9381] ? clear_bhb_loop+0x25/0x80 [ 157.199365][ T9381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.199467][ T9381] RIP: 0033:0x7f6f46a6d169 [ 157.199484][ T9381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.199506][ T9381] RSP: 002b:00007f6f45095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 157.199530][ T9381] RAX: ffffffffffffffda RBX: 00007f6f46c86160 RCX: 00007f6f46a6d169 [ 157.199544][ T9381] RDX: 0000000000007c00 RSI: 0000000000000004 RDI: 0000000000000004 [ 157.199558][ T9381] RBP: 00007f6f45095090 R08: 0000000000000000 R09: 0000000000000000 [ 157.199576][ T9381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.199586][ T9381] R13: 0000000000000000 R14: 00007f6f46c86160 R15: 00007ffdbc59e7b8 [ 157.199605][ T9381] [ 157.417993][ T9387] dvmrp5: entered allmulticast mode [ 157.440844][ T9387] dvmrp5: left allmulticast mode [ 157.573163][ T9394] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 157.573163][ T9394] program syz.2.1809 not setting count and/or reply_len properly [ 157.594034][ T9398] loop5: detected capacity change from 0 to 512 [ 157.638077][ T9409] loop7: detected capacity change from 0 to 2048 [ 157.649946][ T9412] __nla_validate_parse: 1 callbacks suppressed [ 157.649961][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1816'. [ 157.666027][ T9398] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.707575][ T9394] loop2: detected capacity change from 0 to 128 [ 157.869872][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1820'. [ 157.901703][ T9437] loop7: detected capacity change from 0 to 164 [ 157.910950][ T9437] Unable to read rock-ridge attributes [ 157.917815][ T9437] Unable to read rock-ridge attributes [ 157.925720][ T9437] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 157.936214][ T9437] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1823'. [ 157.988644][ T9441] loop7: detected capacity change from 0 to 164 [ 158.020986][ T9441] Unable to read rock-ridge attributes [ 158.038088][ T9441] Unable to read rock-ridge attributes [ 158.044303][ T9444] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1826'. [ 158.055064][ T9441] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 158.080903][ T9441] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1824'. [ 158.281281][ T9459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9459 comm=syz.1.1833 [ 158.293847][ T9459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9459 comm=syz.1.1833 [ 158.332561][ T9461] loop7: detected capacity change from 0 to 164 [ 158.333439][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'. [ 158.352169][ T9461] Unable to read rock-ridge attributes [ 158.453890][ T9461] Unable to read rock-ridge attributes [ 158.461934][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1838'. [ 158.475082][ T9461] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 158.493112][ T9476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1837'. [ 158.505986][ T9461] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1834'. [ 158.598452][ T9485] loop2: detected capacity change from 0 to 1024 [ 158.609593][ T10] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 158.617239][ T10] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 158.624767][ T10] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 158.647024][ T9489] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 158.647024][ T9489] program syz.1.1841 not setting count and/or reply_len properly [ 158.648966][ T10] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 158.719488][ T9485] : renamed from bond0 [ 158.727150][ T9486] loop7: detected capacity change from 0 to 512 [ 158.740430][ T9486] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.749704][ T9486] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 158.793623][ T9486] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 158.816251][ T9486] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 158.823087][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1848'. [ 158.826489][ T9486] System zones: 0-2, 18-18, 34-35 [ 158.866502][ T10] Process accounting resumed [ 158.968779][ T9514] loop7: detected capacity change from 0 to 164 [ 159.002657][ T9515] loop4: detected capacity change from 0 to 2048 [ 159.022956][ T9514] Unable to read rock-ridge attributes [ 159.032082][ T9514] Unable to read rock-ridge attributes [ 159.042147][ T9514] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 159.082643][ T9519] loop5: detected capacity change from 0 to 2048 [ 159.156967][ T9535] loop7: detected capacity change from 0 to 128 [ 159.163966][ T9535] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.176537][ T9535] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 159.215699][ T3455] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 159.223239][ T3455] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 159.230653][ T3455] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 159.238261][ T8419] nci: nci_rx_work: unknown MT 0x5 [ 159.255786][ T8419] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 159.257668][ T3455] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 159.286586][ T9541] loop4: detected capacity change from 0 to 512 [ 159.287421][ T9544] loop7: detected capacity change from 0 to 128 [ 159.301102][ T9541] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.310318][ T9541] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 159.347510][ T9541] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 159.378919][ T9541] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 159.390118][ T9541] System zones: 0-2, 18-18, 34-35 [ 159.521647][ T9562] loop4: detected capacity change from 0 to 164 [ 159.530956][ T9562] Unable to read rock-ridge attributes [ 159.538438][ T9562] Unable to read rock-ridge attributes [ 159.553967][ T9562] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 159.608312][ T9550] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 159.608312][ T9550] program syz.1.1864 not setting count and/or reply_len properly [ 159.680667][ T9570] loop4: detected capacity change from 0 to 8192 [ 159.693537][ T9558] loop1: detected capacity change from 0 to 128 [ 159.750818][ T9573] loop7: detected capacity change from 0 to 512 [ 159.765707][ T9575] loop5: detected capacity change from 0 to 128 [ 159.799400][ T9573] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.929530][ T8414] bio_check_eod: 215 callbacks suppressed [ 159.929547][ T8414] kworker/u8:26: attempt to access beyond end of device [ 159.929547][ T8414] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 159.949906][ T8414] kworker/u8:26: attempt to access beyond end of device [ 159.949906][ T8414] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 159.963523][ T8414] kworker/u8:26: attempt to access beyond end of device [ 159.963523][ T8414] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 159.977621][ T8414] kworker/u8:26: attempt to access beyond end of device [ 159.977621][ T8414] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 159.991303][ T8414] kworker/u8:26: attempt to access beyond end of device [ 159.991303][ T8414] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 160.004835][ T8414] kworker/u8:26: attempt to access beyond end of device [ 160.004835][ T8414] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 160.012494][ T9581] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 160.012494][ T9581] program syz.4.1874 not setting count and/or reply_len properly [ 160.022098][ T8414] kworker/u8:26: attempt to access beyond end of device [ 160.022098][ T8414] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 160.048802][ T8414] kworker/u8:26: attempt to access beyond end of device [ 160.048802][ T8414] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 160.062274][ T8414] kworker/u8:26: attempt to access beyond end of device [ 160.062274][ T8414] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 160.075821][ T8414] kworker/u8:26: attempt to access beyond end of device [ 160.075821][ T8414] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 160.137096][ T9587] loop2: detected capacity change from 0 to 128 [ 160.228128][ T3380] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 160.235696][ T3380] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 160.243212][ T3380] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 160.267305][ T3380] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 160.286936][ T9597] loop1: detected capacity change from 0 to 164 [ 160.296237][ T9597] Unable to read rock-ridge attributes [ 160.304504][ T9597] Unable to read rock-ridge attributes [ 160.321548][ T9593] loop5: detected capacity change from 0 to 512 [ 160.325506][ T9597] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 160.338733][ T9593] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.347893][ T9593] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 160.377712][ T9593] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 160.389819][ T9593] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 160.400198][ T9593] System zones: 0-2, 18-18, 34-35 [ 160.458917][ T9608] loop1: detected capacity change from 0 to 128 [ 160.477439][ T9606] loop5: detected capacity change from 0 to 8192 [ 160.583329][ T29] kauditd_printk_skb: 752 callbacks suppressed [ 160.583345][ T29] audit: type=1400 audit(1743399698.046:11608): avc: denied { shutdown } for pid=9600 comm="syz.2.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 160.618333][ T29] audit: type=1400 audit(1743399698.066:11609): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 160.640542][ T29] audit: type=1400 audit(1743399698.066:11610): avc: denied { search } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.662257][ T29] audit: type=1400 audit(1743399698.066:11611): avc: denied { open } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.685028][ T29] audit: type=1400 audit(1743399698.066:11612): avc: denied { getattr } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.712242][ T29] audit: type=1400 audit(1743399698.106:11613): avc: denied { create } for pid=9613 comm="syz.7.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 160.731834][ T29] audit: type=1400 audit(1743399698.106:11614): avc: denied { setopt } for pid=9613 comm="syz.7.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 160.751469][ T29] audit: type=1400 audit(1743399698.106:11615): avc: denied { read } for pid=9613 comm="syz.7.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.778041][ T29] audit: type=1326 audit(1743399698.216:11616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.5.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8945d169 code=0x7ffc0000 [ 160.801763][ T29] audit: type=1326 audit(1743399698.216:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.5.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8945d169 code=0x7ffc0000 [ 160.892554][ T9625] loop4: detected capacity change from 0 to 128 [ 160.929421][ T8419] nci: nci_rx_work: unknown MT 0x5 [ 161.083283][ T3379] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 161.090751][ T3379] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 161.098258][ T3379] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 161.107348][ T3379] hid-generic 0000:0004:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 161.161148][ T9637] loop5: detected capacity change from 0 to 512 [ 161.175670][ T9637] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.184803][ T9637] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 161.206001][ T9637] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 161.217436][ T9637] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 161.226601][ T9637] System zones: 0-2, 18-18, 34-35 [ 161.232310][ T9637] EXT4-fs mount: 37 callbacks suppressed [ 161.232396][ T9637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.257195][ T9648] loop7: detected capacity change from 0 to 512 [ 161.264155][ T9648] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.270724][ T9650] loop4: detected capacity change from 0 to 2048 [ 161.291208][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.306003][ T9648] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 161.314896][ T9648] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.1898: attempt to clear invalid blocks 2 len 1 [ 161.328574][ T9648] EXT4-fs (loop7): Remounting filesystem read-only [ 161.343544][ T9650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.353737][ T9648] EXT4-fs (loop7): 1 truncate cleaned up [ 161.359104][ T9650] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.372021][ T9648] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.396719][ T9650] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1899: corrupted xattr block 128: bad e_name length [ 161.452204][ T9650] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 161.467556][ T9650] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1899: corrupted xattr block 128: bad e_name length [ 161.490544][ T9650] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 161.492028][ T8623] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.500913][ T9650] EXT4-fs error (device loop4): ext4_xattr_block_find:1869: inode #15: comm syz.4.1899: corrupted xattr block 128: bad e_name length [ 161.527466][ T9659] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 161.527466][ T9659] program syz.2.1902 not setting count and/or reply_len properly [ 161.918610][ T9667] netlink: 'syz.7.1903': attribute type 1 has an invalid length. [ 162.052063][ T9674] loop1: detected capacity change from 0 to 512 [ 162.058983][ T9674] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.069987][ T9674] EXT4-fs (loop1): 1 truncate cleaned up [ 162.076047][ T9674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.259931][ T9679] FAULT_INJECTION: forcing a failure. [ 162.259931][ T9679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.273278][ T9679] CPU: 0 UID: 0 PID: 9679 Comm: syz.5.1907 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 162.273305][ T9679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.273317][ T9679] Call Trace: [ 162.273324][ T9679] [ 162.273331][ T9679] dump_stack_lvl+0xf6/0x150 [ 162.273419][ T9679] dump_stack+0x15/0x1a [ 162.273434][ T9679] should_fail_ex+0x261/0x270 [ 162.273454][ T9679] should_fail+0xb/0x10 [ 162.273469][ T9679] should_fail_usercopy+0x1a/0x20 [ 162.273554][ T9679] _copy_from_user+0x1c/0xa0 [ 162.273586][ T9679] __sys_bpf+0x16a/0x800 [ 162.273617][ T9679] __x64_sys_bpf+0x43/0x50 [ 162.273711][ T9679] x64_sys_call+0x23da/0x2e10 [ 162.273789][ T9679] do_syscall_64+0xc9/0x1c0 [ 162.273808][ T9679] ? clear_bhb_loop+0x25/0x80 [ 162.273828][ T9679] ? clear_bhb_loop+0x25/0x80 [ 162.273851][ T9679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.273871][ T9679] RIP: 0033:0x7efe8945d169 [ 162.273959][ T9679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.273991][ T9679] RSP: 002b:00007efe87ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.274014][ T9679] RAX: ffffffffffffffda RBX: 00007efe89675fa0 RCX: 00007efe8945d169 [ 162.274028][ T9679] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000002 [ 162.274042][ T9679] RBP: 00007efe87ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.274056][ T9679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.274070][ T9679] R13: 0000000000000000 R14: 00007efe89675fa0 R15: 00007ffda7387608 [ 162.274092][ T9679] [ 162.535747][ T9685] FAULT_INJECTION: forcing a failure. [ 162.535747][ T9685] name failslab, interval 1, probability 0, space 0, times 0 [ 162.548571][ T9685] CPU: 0 UID: 0 PID: 9685 Comm: syz.7.1910 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 162.548680][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.548696][ T9685] Call Trace: [ 162.548704][ T9685] [ 162.548713][ T9685] dump_stack_lvl+0xf6/0x150 [ 162.548742][ T9685] dump_stack+0x15/0x1a [ 162.548759][ T9685] should_fail_ex+0x261/0x270 [ 162.548806][ T9685] should_failslab+0x8f/0xb0 [ 162.548836][ T9685] __kmalloc_cache_noprof+0x55/0x320 [ 162.548867][ T9685] ? snd_timer_user_open+0x55/0x120 [ 162.548926][ T9685] snd_timer_user_open+0x55/0x120 [ 162.549034][ T9685] ? __pfx_snd_timer_user_open+0x10/0x10 [ 162.549071][ T9685] snd_open+0x225/0x290 [ 162.549146][ T9685] chrdev_open+0x2fc/0x380 [ 162.549213][ T9685] ? __pfx_chrdev_open+0x10/0x10 [ 162.549242][ T9685] do_dentry_open+0x621/0xa20 [ 162.549282][ T9685] vfs_open+0x38/0x1e0 [ 162.549310][ T9685] path_openat+0x1b1c/0x2000 [ 162.549400][ T9685] ? _parse_integer_limit+0x167/0x180 [ 162.549446][ T9685] do_filp_open+0x115/0x240 [ 162.549475][ T9685] do_sys_openat2+0xaa/0x110 [ 162.549509][ T9685] __x64_sys_openat+0xf8/0x120 [ 162.549594][ T9685] x64_sys_call+0x1ac/0x2e10 [ 162.549621][ T9685] do_syscall_64+0xc9/0x1c0 [ 162.549645][ T9685] ? clear_bhb_loop+0x25/0x80 [ 162.549671][ T9685] ? clear_bhb_loop+0x25/0x80 [ 162.549743][ T9685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.549768][ T9685] RIP: 0033:0x7f07e8bad169 [ 162.549786][ T9685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.549808][ T9685] RSP: 002b:00007f07e7217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.549829][ T9685] RAX: ffffffffffffffda RBX: 00007f07e8dc5fa0 RCX: 00007f07e8bad169 [ 162.549886][ T9685] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 162.549897][ T9685] RBP: 00007f07e7217090 R08: 0000000000000000 R09: 0000000000000000 [ 162.549909][ T9685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.549922][ T9685] R13: 0000000000000000 R14: 00007f07e8dc5fa0 R15: 00007ffc0f319c08 [ 162.549944][ T9685] [ 162.816029][ T3455] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 162.823570][ T3455] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 162.830971][ T3455] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 162.849711][ T3455] hid-generic 0000:0004:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 162.896578][ T9690] loop2: detected capacity change from 0 to 512 [ 162.903641][ T9690] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.912701][ T9690] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 162.921860][ T9690] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 162.937174][ T9690] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 162.955075][ T9690] System zones: 0-2, 18-18, 34-35 [ 162.960774][ T9690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.963504][ T8419] nci: nci_rx_work: unknown MT 0x5 [ 163.000270][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.030406][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.066550][ T9710] __nla_validate_parse: 5 callbacks suppressed [ 163.066568][ T9710] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1918'. [ 163.066926][ T9711] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 163.066926][ T9711] program syz.5.1916 not setting count and/or reply_len properly [ 163.171509][ T9719] loop5: detected capacity change from 0 to 128 [ 163.234351][ T9715] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 163.234351][ T9715] program syz.2.1919 not setting count and/or reply_len properly [ 163.301725][ T9729] loop1: detected capacity change from 0 to 128 [ 163.322180][ T9721] loop2: detected capacity change from 0 to 128 [ 163.543495][ T9415] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 192: padding at end of block bitmap is not set [ 163.816004][ T9748] loop7: detected capacity change from 0 to 128 [ 163.828893][ T9748] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.841776][ T9748] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.864602][ T9750] loop5: detected capacity change from 0 to 512 [ 163.882175][ T9750] EXT4-fs (loop5): 1 orphan inode deleted [ 163.889567][ T8414] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.889647][ T9750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.911409][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 163.924944][ T9750] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.019562][ T9763] loop2: detected capacity change from 0 to 128 [ 164.039200][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.132082][ T8419] nci: nci_rx_work: unknown MT 0x5 [ 164.183858][ T9776] loop2: detected capacity change from 0 to 164 [ 164.200507][ T9776] Unable to read rock-ridge attributes [ 164.212003][ T9776] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1939'. [ 164.230188][ T9778] netlink: '+|[@': attribute type 13 has an invalid length. [ 164.276952][ T9786] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1942'. [ 164.289661][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.423686][ T9800] loop5: detected capacity change from 0 to 1024 [ 164.448523][ T9801] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 164.448523][ T9801] program syz.4.1946 not setting count and/or reply_len properly [ 164.457556][ T9800] EXT4-fs: Ignoring removed orlov option [ 164.471227][ T9800] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.497154][ T9800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.544039][ T9814] loop1: detected capacity change from 0 to 164 [ 164.551318][ T9814] Unable to read rock-ridge attributes [ 164.563178][ T9814] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1952'. [ 164.576275][ T9801] loop4: detected capacity change from 0 to 128 [ 164.597375][ T9817] FAULT_INJECTION: forcing a failure. [ 164.597375][ T9817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.610656][ T9817] CPU: 1 UID: 0 PID: 9817 Comm: syz.1.1953 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 164.610688][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.610704][ T9817] Call Trace: [ 164.610713][ T9817] [ 164.610722][ T9817] dump_stack_lvl+0xf6/0x150 [ 164.610756][ T9817] dump_stack+0x15/0x1a [ 164.610789][ T9817] should_fail_ex+0x261/0x270 [ 164.610808][ T9817] should_fail+0xb/0x10 [ 164.610826][ T9817] should_fail_usercopy+0x1a/0x20 [ 164.610914][ T9817] _copy_to_user+0x20/0xa0 [ 164.610944][ T9817] pagemap_read+0x3e1/0x680 [ 164.610977][ T9817] ? __pfx_pagemap_read+0x10/0x10 [ 164.611085][ T9817] vfs_read+0x1b2/0x710 [ 164.611106][ T9817] ? __rcu_read_unlock+0x4e/0x70 [ 164.611132][ T9817] ? __fget_files+0x186/0x1c0 [ 164.611222][ T9817] __x64_sys_pread64+0xfb/0x150 [ 164.611248][ T9817] x64_sys_call+0x26ad/0x2e10 [ 164.611300][ T9817] do_syscall_64+0xc9/0x1c0 [ 164.611363][ T9817] ? clear_bhb_loop+0x25/0x80 [ 164.611386][ T9817] ? clear_bhb_loop+0x25/0x80 [ 164.611427][ T9817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.611454][ T9817] RIP: 0033:0x7f212148d169 [ 164.611468][ T9817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.611483][ T9817] RSP: 002b:00007f211faf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 164.611498][ T9817] RAX: ffffffffffffffda RBX: 00007f21216a5fa0 RCX: 00007f212148d169 [ 164.611511][ T9817] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 164.611521][ T9817] RBP: 00007f211faf7090 R08: 0000000000000000 R09: 0000000000000000 [ 164.611531][ T9817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.611541][ T9817] R13: 0000000000000000 R14: 00007f21216a5fa0 R15: 00007ffc75974c28 [ 164.611556][ T9817] [ 164.922441][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.996202][ T9826] FAULT_INJECTION: forcing a failure. [ 164.996202][ T9826] name failslab, interval 1, probability 0, space 0, times 0 [ 165.008886][ T9826] CPU: 0 UID: 0 PID: 9826 Comm: syz.1.1954 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 165.008927][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.008938][ T9826] Call Trace: [ 165.008945][ T9826] [ 165.008951][ T9826] dump_stack_lvl+0xf6/0x150 [ 165.008975][ T9826] dump_stack+0x15/0x1a [ 165.008995][ T9826] should_fail_ex+0x261/0x270 [ 165.009019][ T9826] should_failslab+0x8f/0xb0 [ 165.009069][ T9826] kmem_cache_alloc_noprof+0x59/0x340 [ 165.009098][ T9826] ? security_inode_alloc+0x37/0x100 [ 165.009198][ T9826] security_inode_alloc+0x37/0x100 [ 165.009220][ T9826] inode_init_always_gfp+0x4a2/0x4f0 [ 165.009251][ T9826] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 165.009273][ T9826] alloc_inode+0x86/0x170 [ 165.009381][ T9826] ? __pfx_mqueue_fill_super+0x10/0x10 [ 165.009407][ T9826] new_inode+0x1e/0xe0 [ 165.009439][ T9826] ? __pfx_mqueue_fill_super+0x10/0x10 [ 165.009499][ T9826] mqueue_fill_super+0x74/0x1b0 [ 165.009560][ T9826] ? __pfx_mqueue_fill_super+0x10/0x10 [ 165.009587][ T9826] get_tree_nodev+0x7d/0xf0 [ 165.009614][ T9826] mqueue_get_tree+0x6b/0x90 [ 165.009638][ T9826] vfs_get_tree+0x56/0x1e0 [ 165.009663][ T9826] fc_mount+0x16/0x70 [ 165.009685][ T9826] mq_init_ns+0x253/0x300 [ 165.009717][ T9826] copy_ipcs+0x218/0x3b0 [ 165.009741][ T9826] create_new_namespaces+0x135/0x430 [ 165.009761][ T9826] ? security_capable+0x81/0x90 [ 165.009785][ T9826] unshare_nsproxy_namespaces+0xe6/0x120 [ 165.009812][ T9826] ksys_unshare+0x3d3/0x700 [ 165.009872][ T9826] __x64_sys_unshare+0x1f/0x30 [ 165.009906][ T9826] x64_sys_call+0x2c93/0x2e10 [ 165.009927][ T9826] do_syscall_64+0xc9/0x1c0 [ 165.009976][ T9826] ? clear_bhb_loop+0x25/0x80 [ 165.010000][ T9826] ? clear_bhb_loop+0x25/0x80 [ 165.010092][ T9826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.010114][ T9826] RIP: 0033:0x7f212148d169 [ 165.010131][ T9826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.010152][ T9826] RSP: 002b:00007f211fab5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 165.010173][ T9826] RAX: ffffffffffffffda RBX: 00007f21216a6160 RCX: 00007f212148d169 [ 165.010186][ T9826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 165.010200][ T9826] RBP: 00007f211fab5090 R08: 0000000000000000 R09: 0000000000000000 [ 165.010213][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.010299][ T9826] R13: 0000000000000000 R14: 00007f21216a6160 R15: 00007ffc75974c28 [ 165.010319][ T9826] [ 165.280135][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1956'. [ 165.442440][ T9840] loop5: detected capacity change from 0 to 512 [ 165.476404][ T9840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.500480][ T9840] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.524486][ T9842] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 165.524486][ T9842] program syz.2.1962 not setting count and/or reply_len properly [ 165.606933][ T29] kauditd_printk_skb: 753 callbacks suppressed [ 165.606949][ T29] audit: type=1400 audit(1743399703.066:12370): avc: denied { prog_run } for pid=9854 comm="syz.7.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 165.637082][ T9850] loop2: detected capacity change from 0 to 128 [ 165.645924][ T29] audit: type=1400 audit(1743399703.106:12371): avc: denied { execmem } for pid=9839 comm="syz.5.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 165.736729][ T29] audit: type=1400 audit(1743399703.126:12372): avc: denied { mounton } for pid=9841 comm="syz.2.1962" path="/429/file0" dev="tmpfs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 165.759584][ T29] audit: type=1400 audit(1743399703.126:12373): avc: denied { mount } for pid=9841 comm="syz.2.1962" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 165.781768][ T29] audit: type=1400 audit(1743399703.176:12374): avc: denied { read } for pid=9854 comm="syz.7.1964" dev="nsfs" ino=4026542711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 165.803191][ T29] audit: type=1400 audit(1743399703.176:12375): avc: denied { open } for pid=9854 comm="syz.7.1964" path="net:[4026542711]" dev="nsfs" ino=4026542711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 165.826532][ T29] audit: type=1400 audit(1743399703.176:12376): avc: denied { create } for pid=9854 comm="syz.7.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.846646][ T29] audit: type=1400 audit(1743399703.186:12377): avc: denied { create } for pid=9854 comm="syz.7.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.942903][ T29] audit: type=1400 audit(1743399703.396:12378): avc: denied { ioctl } for pid=9854 comm="syz.7.1964" path="socket:[26806]" dev="sockfs" ino=26806 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.974514][ T29] audit: type=1400 audit(1743399703.406:12379): avc: denied { sys_module } for pid=9854 comm="syz.7.1964" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 166.156693][ T3379] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 166.164222][ T3379] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 166.171626][ T3379] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 166.194520][ T3379] hid-generic 0000:0004:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 166.332220][ T9875] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 166.332220][ T9875] program syz.1.1969 not setting count and/or reply_len properly [ 166.378574][ T3294] ================================================================== [ 166.386713][ T3294] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 166.393446][ T3294] [ 166.395781][ T3294] write to 0xffff88811590ec10 of 8 bytes by task 3005 on cpu 1: [ 166.403430][ T3294] __dentry_kill+0x13e/0x4c0 [ 166.408054][ T3294] dput+0x5c/0xd0 [ 166.411719][ T3294] step_into+0x226/0x860 [ 166.415996][ T3294] walk_component+0x178/0x240 [ 166.420706][ T3294] path_lookupat+0x103/0x2a0 [ 166.425344][ T3294] filename_lookup+0x2dd/0x340 [ 166.430144][ T3294] do_readlinkat+0x8b/0x210 [ 166.434671][ T3294] __x64_sys_readlink+0x47/0x60 [ 166.439551][ T3294] x64_sys_call+0x2a81/0x2e10 [ 166.444245][ T3294] do_syscall_64+0xc9/0x1c0 [ 166.448759][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.454662][ T3294] [ 166.456986][ T3294] read to 0xffff88811590ec10 of 8 bytes by task 3294 on cpu 0: [ 166.464532][ T3294] fast_dput+0x65/0x2c0 [ 166.468710][ T3294] dput+0x24/0xd0 [ 166.472355][ T3294] do_unlinkat+0x226/0x4b0 [ 166.476784][ T3294] __x64_sys_unlink+0x2e/0x40 [ 166.481480][ T3294] x64_sys_call+0x2358/0x2e10 [ 166.486168][ T3294] do_syscall_64+0xc9/0x1c0 [ 166.490677][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.496584][ T3294] [ 166.498909][ T3294] value changed: 0xffff88823789d5b8 -> 0x0000000000000000 [ 166.506018][ T3294] [ 166.508341][ T3294] Reported by Kernel Concurrency Sanitizer on: [ 166.514495][ T3294] CPU: 0 UID: 0 PID: 3294 Comm: udevd Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 166.526132][ T3294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.536193][ T3294] ================================================================== [ 166.548735][ T9875] loop1: detected capacity change from 0 to 128 [ 166.576417][ T9883] loop7: detected capacity change from 0 to 512 [ 166.609535][ T9883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.624352][ T3900] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.634260][ T9883] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.030471][ T8623] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.