Extracting prog: 3m5.422285099s
Minimizing prog: 13m43.393710103s
Simplifying prog options: 0s
Extracting C: 34.71642616s
Simplifying C: 8m0.637821497s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
detailed listing:
executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 16, 11, 19, 7, 6, 12, 4, 4, 12, 3, 3, 17, 7, 5, 4, 7, 2, 2, 15, 9, 8, 16, 10, 16, 19, 4, 4, 3, 17]
detailed listing:
executing program 3:
r0 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r1 = socket$inet(0x2, 0x3, 0x6)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}, 0x3}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000340)="b4dc3dec0ab8ef33fc3aa2a542f55a2a74375965196fc5b9eeb0bdc802bc12789e194b326f036bdd78ecd2543369ec3dab4f7ffbf749b2d935ae204fe8df39ce0f3387c8ef910ae004352e1d3cc6ee6cacb69ce222c654a3e2bcbc29", 0x5c}], 0x1, &(0x7f0000000f80)="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", 0x1000, 0x8000}, 0x20044000)
r3 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800009500000000b7e6ab"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES16=r5], 0xb0}, 0x1, 0x7}, 0x4044055)
r6 = gettid()
timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r6}, &(0x7f00000000c0))
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0xc4d1)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00'}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x40}}, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r9 = dup(r8)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r9], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0)
executing program 0:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
fcntl$setlease(r3, 0x400, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="0000007b0096d8db86e71831db", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
add_key$fscrypt_provisioning(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000d80)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffd)
executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
prlimit64(r0, 0xc, &(0x7f00000000c0)={0x8cd, 0xfff}, &(0x7f0000000100))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
executing program 3:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_settime(0x7, 0x0)
executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x4, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)
executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1)
socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x3d)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000))
executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448c9, 0x0)
executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sysinfo(&(0x7f0000000500)=""/230)
executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x16e4, &(0x7f0000000000)={0x0, 0xcbbd, 0x80, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000))
executing program 2:
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4004, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0)
executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x0, 0x0, 0x1d2})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, 0x0, 0x0)
listen(r0, 0x10001)
socket$tipc(0x1e, 0x5, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x80, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0xa, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0xffffffff, 0xe661, 0x8000, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0xffffffff, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xd, 0x312, 0x7a, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x6, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x8f2, 0x8002, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x7, 0x2003, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x10, 0x0, 0x1, 0xb, 0x800, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x9, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x802, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x950bfaf, 0x1000, 0x8001, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x2, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x3, 0xbb31, 0x3, 0x9, 0x5, 0x1, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10083, 0x5, 0x8, 0x30b1d693, 0x80, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff343e, 0x104]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x1e, 0x5, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
syz_read_part_table(0x104a, &(0x7f0000001080)="$eJzsz7EJAjEAheEXPc8DLc7ddB4zjwPYOooT2DmAmKCVrYjwfU0C7yeQ8GPXpCSL5Lb7uA/JOsk9m1atpoyv6X3JlCwv29T0OP0sNTk+szLPGXJOzZh9aXl7+XD69u8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4B88AgAA//8oswgx")
executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
socket$packet(0x11, 0xa, 0x300)
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x141480, 0x2a)
fchown(r0, 0x0, 0x0)
executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x2808000, &(0x7f0000000500)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@fat=@flush}, {@shortname_winnt}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@shortname_mixed}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@check_normal}]}, 0x1, 0x2b8, &(0x7f0000000940)="$eJzs3b1qZGUYB/D/fCUTEWYKKxE8oIVV2OwVbJAIi+lkCm1U3CxIZljIwEBWMW5lL1hZeAeC3oEXYOMdWFhYKHZuIR6ZmTOZTHISDYzZJfx+TZ457/u8H+e8SSBwnnzwyujwwaPxwyef/pxut5HmvdzL00b6aWbh8wAAt8nTsswf5dy/9W1nI0nZqz41b2B5AMD/4Dq//wGA2+Gdd997e3d/f++7ougmoy8mg0aSUWMymLfvPszHGeYgd9LLX0l5ah6/eH9/L+2iWPwxYLKVQTJ6/8fq8+5vySx/J730L+a/dX9/b6eYy+ujk8lgOvP0aycvNJLdsjEf6G56eSkpO6kGWebfrcnPYCNvvPZ1tf6/D7KdXn76KI8yzIPZEMv8z3aK4s3yqz8/me9gkDROJoPNWb+lsnVjDwUAAAAAAAAAAAAAAAAAAAAAgFtvuzjVP1s/Z1ENcHu7vn1WH6hVUx+oqvBzMquvszGrr3OnKIpFGZ/JoJN5fjsvt9N+ppsHAAAAAAAAAAAAAAAAAACA58T4+PHhh8PhwdFK8EN5/kpNUL3Rn+pK+0xTe7Xp6nFqgsNvk+tn/ZcgrWppw8aFKRYbWsdcm9fpvFU3aZqX3cP2MPPFf3n9hb26ng1+/+uVD3dxuqaH5IpxWhkfd+vHOXMyt6rBjsazB7R12aFdDcqaW9e6pPPv4411nLFvNtd3fqpguuPO6c1c7dOdTnXmSmd8/DjN9X2nnNNY+88eAAAAAAAAAAAAAAAAAABg1fKl3/xyofHJM1kSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANy45f//Pw3SP3/lfHBSJV/VZxFsHo1rpu2XN7xPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbrd/AgAA//+DAlay")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000a80)='encrypted\x00', &(0x7f0000000ac0)='quota')
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x70bd2c, 0x6, {0x7, r2}}, 0x18}}, 0x80)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xb95, 0x1ff, 0x80000000, 0x18000, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0xe, @value=r0, @void, @value=r3}, 0x50)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
executing program 3:
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000040), 0x2008000, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @var={0x7, 0x0, 0x0, 0xe, 0x21}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x3d}, 0x28)
executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x4048040)
sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)
executing program 4:
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, 0x0)
connect$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r3, 0x1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896)
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000001b40)='./file0\x00', 0x208108dc, &(0x7f0000002a80)=ANY=[], 0x1, 0x1503, &(0x7f0000000580)="$eJzs3Au4T9XWMPAx5pyLbSf928lls8Yci3/amCRJLgm5JEmSJLklJCRJQmKTWxKSkHuSe0guO3Zyv99yT5Ij7SQJyS3M79Hp/Zz3dN7T936n7/M+Z4/f88zHHNZ/jP9Ye+xnr7X+z7P3952HVmtQvXI9ZoZ/Cf71n1QASACAAQBwAwAEAFAqqVTSlePZNKb+a28i/lyPzrjWHYhrSeafucn8MzeZf+Ym88/cZP6Zm8w/c5P5Z24yfyEys20z894oK/Mu+fw/M5Pr/7+RjGLjvt5Q7OYu/40UmX/mJvP/N5f1nx+W+WduMv/MTeafucn8//1V+ifHZP6Zm8xfiMzsWn/+LOvarmv9/SeEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQInM4568yAPAf+2vdlxBCCCGEEEIIIf48Puu17kAIIYQQQgghhBD/7yEo0GAggCyQFRIgGyTCdZAdrocccAPE4EZIgpsgJ9wMuSA35IG8kAz5ID+EQGCBIYICUBDicAsUglshBQpDESgKDopBcbgNSsDtUBLugFJwJ5SGu6AMlIVyUB7uhgpwD1SESlAZ7oUqUBWqQXW4D2rA/VATHoBa8CDUhoegDjwMdeERqAePQn14DBrA49AQnoBG0BiaQFNo9n+V/zJ0h1egB/SEVOgFveFV6AN9oR/0hwHwGgyE12EQvAGDYQgMhTdhGLwFw+FtGAEjYRS8A6NhDIyFcTAeJsBEeBcmwXswGd6HKTAVpsF0mAEzYRZ8ALNhDsyFD2EefATzYQEshEWQBh/DYlgC6fAJLIVPYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG3wG22EH7IRdsBv2wF74HPbBF7AfvoQD8NV/M//s3+V3QUBAhQoNGsyCWTABEzAREzE7ZsccmANjGMMkTMKcmBNzYS7Mg3kwGZMxP+ZHQkJGxgJYAOMYx0JYCFMwBYtgEXTosDgWxxJ4O5bEklgKS2FpLI1lsCyWxfJYHitgBayIFbEyVsYqWAWrYTW8D+/D+7Em1sRaWAtrY22sg3WwLtbFelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBdtgO22N77IAdsCN2xE7YCTtjZ+yCXbErvowv4yv4CvbEKqoX9sbe2Af7YD/sj/3xNRyIr+Pr+AYOxiE4FN/EN/EtHI5ncASOxFE4CiuoMTgWxyGrCTgRJ+IknISTcTJOwak4FafjDJyJs3AWzsY5OAc/xHn4EX6EC3ABLsI0TMPFuATTMR2X4llchstxBa7EVbgaV+FaXIdrcQNuxA24GTfjVtyKn+FnuAN34C7chXtwD36On+MX+AUOxgN4AA/iQTyEh/AwHsYMzMAjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXN4Di/gBbyILyZ/W39P4fWDQV1hlFFZVBaVoBJUokpU2VV2lUPlUDEVU0kqSeVUOVUulUvlUXlUskpW+VV+RYoUq0gVUAUSAEAVUoVUikpRRVQR5ZRTxVVxVUKVUCVVSVVK3alKq7tUGVVWtXTlVXlVQbVyFVUlVVlVVlVUVVVNVVfVVQ1VQ9VUNVUtVUvVVrVVHfWwqqt6YT98VF2ZTAM1BBuqodhINVZNVFP1Fj6pmqvh2EK1VK3U02okjsA2qrlrp55V7dVY7KCeV+PwBdVJTcDO6iXVRXVV3dTLqrtq4XqonmoK9lK91XTso/qqfqq/mo1V1ZWJVVNvqMFqiBqq3lSL8C01XL2tRqiRapR6R41WY9RYNU6NVxPURPWumqTeU5PV+2qKmqqmqelqhpqpZqkP1Gw1R81VH6p56iM1Xy1QC9UilaY+VovVEpWuPlFL1adqmVquVqiVapVardaotWqdWq82qI1qk9qstqitapv6TG1XO9ROtUvtVnvUXvW52qe+UPvVl+qA+kodVH9Rh9TX6rD6RmWob9UR9Z06qr5Xx9QP6rj6UZ1QJ9Up9ZM6rX5WZ9RZdU6dVxfUL+qiuqQuK69Ao1Zaa6MDnUVn1Qk6m07U1+ns+nqdQ9+gY/pGnaRv0jn1zTqXzq3z6Lw6WefT+XWoSVvNOtIFdEEd17foQvpWnaIL6yK6qHa6mC6ub9Ml9O26pL5Dl9J36tL6Ll1Gl9XldHl9t66g79EVdSVdWd+rq+iqupquru/TNfT9uqZ+QNfSD+ra+iFdRz+s6+pHdD39qK6vH9MN9OO6oX5CN9KNdRPdVDfTT+rm+indQrfUrfTTurV+RrfRbXU7/axur5/THfTzuqN+QXfSL+rO+iXdRXfV3fQlfVl73UP31Km6l+6tX9V9dDr00/31AP2aHqhf14P0G3qwHqKH6jf1MP2WHq7f1iP0SD1Kv6NH6zF6rB6nx+sJeqJ+V0/S7+nJ+n09RU/V0/R0PUPP1P1+qzT37/J7/XbV/dv89/5B/qBf332r3qY/09v1Dr1T79K79R69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WGTpDH9FH9FF9VB/Tx/RxfVyf0Cf1ef2TPq1/1mf0WX1Wn9cX9AV98bevARg0ymhjTGCymKwmwWQzieY6k91cb3KYG0zM3GiSzE0mp7nZ5DK5TR6T1ySbfCa/CQ0Za9hEpoApaOLmFlPI3GpSTGFTxBQ1zhQzxc1t/3L+H/XXzDQzzU1z08K0MK1MK9PatDZtTBvTzrQz7U1708F0MB1NR9PJdDKdTWfTxXQx3Uw30910Nz1MD5NqUk1v86rpY/qafqa/GWBeMwPNQDPIDDKDzWAz1Aw1w8wwM9wMNyPMCDPKjDKjzWgz1ow14814M9FMNJPMJDPZTDZTzBQzzUwzM8wMM8vMMrPNbDPXzDXzzDwz38w3C81Ck2bSzGKz2KSbdLPULDXLzHKz3Kw0K81qs9qsNWvNerPebDQbzWaz2Swz28w2s91sNzvNTrPb7DZ7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWGTYTLMEXPEHDVHzTFzrNdxc9ycMCfMKXPKnDanzRlzxpwz58wFc8FcNBfNZXP5ym1foAIVmMAEWYIsQUKQECQGiUH2IHuQI8gRxIJYkBQkBTmDm4NcQe4gT5A3SA7yBfmDMKDABhxEQYGgYBAPbgkKBbcGKUHhoEhQNHBBsaB4cFtQIrg9KBncEZQK7gxKB3cFZYKyQbmgfHB3UCG4J6gYVAoqB/cGVYKqQbWgenBfUCO4P6gZPBDUCh4MagcPBXWCh4O6wSNBveDRoH7wWNAgeDxoGDwRNAoaB02CpkGzP7W+92dyP+V6hD3D1LBX2Dt8NewT9g37hf3DAeFr4cDw9XBQ+EY4OBwSDg3fDIeFb4XDw7fDEeHIcFT4Tjg6HKMBIBwfTggnhu+Gk8L3wsnh++GUcGo4LZwezghnhrPCD8LZ4ZxwbvhhOC/8KJwfLggXhovCtPDjcHG4JEwPPwmXhp+Gy8Ll4YpwZbgqXH3+RoBwXbg+3BBuDDeFm8Mt4dZwW/hZuD3cEe4Md4W7wz3h3vDzcF/4Rbg//DI8EH4VHgz/Eh4Kvw4Ph9+EGeG34ZHwu/Bo+H14LPwhPB7+GJ4IT4anwp/C0+HP4ZnwbHguPB9eCH8JL4aXwsuhv3Jzf+XyToYMZaEslEAJlEiJlJ2yUw7KQTGKURIlUU7KSbkoF+WhPJRMyZSf8tMVTEwFqADFKU6FqBClUAoVoSLkyFFxKk4lqASVpJJUikpRaSpNZagMlaNydDfdTffQPVSJKtG9dC9VpapUnapTDapBNakm1aJaVJtqUx2qQ3WpLtWjelSf6lMDakANqSE1okbUhJpQM2pGzak5taAW1IpaUWtqTW2oDbWjdtSe2lMH6kAdqSN1ok7UmTpTF+pC3agbdafu1IN6UCqlUm/qTX2oD/WjfjSABtBAGkiDaBANpsE0lIbSMBpGw2k4jaCRNIreodE0hsbSOBpPE2giTaRJNIkm02SaQlNoGk2jGTSDZtEsmk2zaS7NpXk0j+bTfFpICymN0mgxLaZ0SqeltJSW0TJaQStoFa2iNbSG1tE62kAbaBNtoi20hbbRNtpO22kn7aTdtJv20l7aR/toP+2nA3SADtJBOkSH6DAdpgzKoCN0hI7SUTpGx+g4HacTdIJO0Sk6TafpDJ2hc3SOLtAvdJEu0WXylGAVJNrrbHZ7vc1hb7AJNpv92ziPzWuTbT6b34Y2l839n2Ky1qbYwraILWqdLWaL29t+F5exZW05W97ebSvYe2zF38U17P22pn3A1rIP2ur2vt/irL/Gte1Dto593Na1T9h6trGtb5vaBvZx29A+YRvZxraJbWpb22dsG9vWtrPP2vb2ud/Fi+0Su86utxvsRrvPfmHP2fP2qP3eXrC/2B62px1gX7MD7et2kH3DDrZDfhePsu/Y0XaMHWvH2fF2wu/iaXa6nWFn2ln2AzvbzvldnGY/tvNsup1vF9iFdtGv8ZWe0u0ndqn91C6zy+0Ku9KusqvtGrv2f/e60m62W+xWu9d+brfbHXan3WV32z2/xlfOY7/90h6wX9kj9jt7yH5tD9tjNsN++2t85fyO2R/scfujPWFP2lP2J3va/mzP2LO/nv+Vc//JXrKXrbfAyIo1Gw44C2flBM7GiXwdZ+frOQffwDG+kZP4Js7JN3Muzs15OC8ncz7OzyETW2aOuAAX5DjfwoX4Vk7hwlyEi7LjYlycb+MSfDuX5Du4FN/JpfkuLsNluRyX57u5At/DFbkSV+Z7uQpX5Wpcne/jGnw/1+QHuBY/yLX5Ia7DD3NdfoTr8aNcnx/jBvw4N+QnuBE35ibclJvxk9ycn+IW3JJb8dPcmp/hNtyW2/Gz3J6f4w78PHfkF7gTv8id+SXuwl25G7/M3fkV7sE9OZV7cW9+lftwX+7H/XkAv8YD+XUexG/wYB7CQ/lNHsZv8XB+m0fwSB7F7/BoHsNjeRyP5wk8kd/ls2lt81y515vCU3kaT+cZPJNn8Qc8m+fwXP6Q5/FHPJ8X8EJexGn8MS/mJZzOn/BS/pSX8XJewSt5Fa/mNbyW1/F63sAbeRNv5i28lbfxZ7ydd/BO3sW7eQ/v5c95H3/B+/lLPsBf8UH+Cx/ir/kwf8MZ/C0f4e/4KH/Px/gHPs4/8gk+yaf4Jz7NP/MZPsvn+Dxf4F/4Il/iy+wZIoxUpCMTBVGWKGuUEGWLEqProuzR9VGO6IYoFt0YJUU3RTmjm6NcUe4oT5Q3So7yRfmjMKLIRhxFUYGoYBSPbokKRbdGKVHhqEhUNHJRsah4dFtUIro9KhndEZWK7oxKR3dFZaKy0eMPlo/ujipE90QVo0pR5ejeqEpUNaoWVY/ui2pE90c1oweiWtGDUcnooahO9HBUN3okqhc9GtWPHosaRI9HDaMnokZR46hJ1DRqFj0ZNY+eilpELaNW0dNR6+iZqE3UNmoXPRu1j577w+OpUa+od/Rq9Grk/QN6YXxRPC3+cXxxfEk8Pf5JfGn80/iy+PL4ivjK+Kr46via+Nr4uvj6+Ib4xvim+Ob4lvjWuPfVs4JDp5x2xgUui8vqElw2l+iuc9nd9S6Hu8HF3I0uyd3kcrqbXS6X2+VxeV2yy+fyu9CRs45d5Aq4gi7ubnGF3K0uxRV2RVxR51wxV9w1dc1cM9fcPeVauJaulXvaPe2ecc+4tq6te9a1d8+5Du5519G94Dq5F92L7iXXxXV13dzLrrt7xfVwPV2qS3W9XW/Xx/Vx/Vw/N8ANcAPdQDfIDXKD3WA31A11w9wwN9wNdyPcCDfKjXKj3Wg31o114914N9FNdJPcJDfZTXZT3BQ3zU1zM9wMN8vNcrPdbDfXzXXzUua5+W6+W+gWujSX5ha7xS7dpbulbqlb5pa5FW6FW+VWuTVujVvn1rkNboPb5Da5LW6L2+a2ue1uu9vpdrrdbrfb6/a6fW6f2+/2uwPugDvoDrpD7pA77L5xGe5bd8R95466790x94M77n50J9xJd8r95E67n90Zd9adc+fdBfeLu+guucvOu4mxd2OTYu/FJsfej02JTY1Ni02PzYjNjM2KfRCbHZsTmxv7MDYv9lFsfmxBbGFsUSwt9nFscWxJLD32SWxp7NPYstjy2IrYytiq2OqY9/m2R76AL+jj/hZfyN/qU3xhX8QX9c4X88X9bb6Ev92X9Hf4Uv5OX9rf5cv4sr6cf8I38o19E9/UN/NP+ub+Kd/Ct/St/NO+tX/Gt/FtfTv/rG/vn/Md/PO+o3/Bd/Iv+s7+Jd/Fd/Xd/Mu+u3/F9/A9farv5Xv7V30f39f38/39AP+aH+hf94P8G36wH+KH+jf9MP+WH+7f9iP8SD/Kv+NH+zF+rB/nx/sJfqJ/10/y7/nJ/n0/xU/10/x0P8PP9LP8B362n+Pn+g/9PP+Rn+8X+IV+kU/zH/vFfolP95/4pf5Tv8wv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nf+a3+x1+p9/ld/s9fq//3O/zX/j9/kt/wH/lD/q/+EP+a3/Yf+Mz/Lf+iP/OH/Xf+2P+B3/c/+hP+JP+lP/Jn/Y/+zP+rD/nz/sL/hd/0V/yl+V31oQQQggh/o/oPzje6x/8n/ptXdEbAK7fkTfj72tuyvXXfV+V3DoGAM/27Pzof6wqVVJTU3977TINQcEFABC7mp8FrsbLoRU8A+2gJZT4h/31VV0v8B/Uj98JkHi18q8S4e/r3/5f1H/y6VGLS0fnkv5J/QUAKQWv5mSDq/HV+iX/i/q5m/9B/9m+ngjQ4m9yssPV+Gr94vAUPAft/tMrhRBCCCGEEEKIv+qrynX8o+fnK8/nyeZqTla4Gv/R87kQQgghhBBCCCGuvRe6dmv7ZLt2LTvK5l/YVPyf0YZsZPOnba71TyYhhBBCCCHEn+3qTf+17kQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhMi8/n/8ObFrfY5CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHEtfa/AgAA//9OvTcs")
executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
executing program 2:
r0 = socket(0x840000000002, 0x3, 0x9)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000000300))
executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0xa)
executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="796100000000000000007e0000001f00", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x4000054)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
detailed listing:
executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

program crashed: possible deadlock in kernfs_iop_getattr
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE
detailed listing:
executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}})

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CHANGE_FD
detailed listing:
executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
detailed listing:
executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
detailed listing:
executing program 0:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000380)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
detailed listing:
executing program 0:
r0 = syz_open_dev$loop(0x0, 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
detailed listing:
executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40000, 0x2d)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
detailed listing:
executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
program crashed: possible deadlock in kernfs_iop_getattr
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
program crashed: possible deadlock in kernfs_iop_getattr
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
program crashed: possible deadlock in kernfs_iop_getattr
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
program crashed: possible deadlock in kernfs_iop_getattr
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
program crashed: possible deadlock in kernfs_iop_getattr
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
program crashed: possible deadlock in kernfs_iop_getattr
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
program crashed: possible deadlock in kernfs_iop_getattr
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
program crashed: possible deadlock in kernfs_iop_getattr
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
detailed listing:
executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

program crashed: possible deadlock in kernfs_iop_getattr
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
detailed listing:
executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

program crashed: possible deadlock in kernfs_iop_getattr
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$loop-openat$sysfs-ioctl$LOOP_CONFIGURE-ioctl$LOOP_CHANGE_FD
detailed listing:
executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

program crashed: possible deadlock in kernfs_iop_getattr
validation run: crashed=true
reproducing took 28m56.298584058s
repro crashed as (corrupted=false):
loop7: partition table beyond EOD, truncated
loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=���}Xp��	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
======================================================
WARNING: possible circular locking dependency detected
6.16.0-rc6-syzkaller-gaaef6f251176 #0 Not tainted
------------------------------------------------------
syz.0.16/6727 is trying to acquire lock:
ffff0000c18a3220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0xa0/0x40c fs/kernfs/inode.c:191

but task is already holding lock:
ffff0000ca0a6228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue include/linux/blk-mq.h:934 [inline]
ffff0000ca0a6228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: loop_change_fd drivers/block/loop.c:585 [inline]
ffff0000ca0a6228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1364/0x1b8c drivers/block/loop.c:1516

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #3 (&q->q_usage_counter(io)#24){++++}-{0:0}:
       blk_alloc_queue+0x48c/0x54c block/blk-core.c:461
       blk_mq_alloc_queue block/blk-mq.c:4396 [inline]
       __blk_mq_alloc_disk+0x12c/0x310 block/blk-mq.c:4443
       loop_add+0x32c/0x88c drivers/block/loop.c:2013
       loop_init+0x168/0x1a0 drivers/block/loop.c:2248
       do_one_initcall+0x250/0x990 init/main.c:1274
       do_initcall_level+0x154/0x214 init/main.c:1336
       do_initcalls+0x84/0xf4 init/main.c:1352
       do_basic_setup+0x8c/0xa0 init/main.c:1371
       kernel_init_freeable+0x2dc/0x444 init/main.c:1584
       kernel_init+0x24/0x1dc init/main.c:1474
       ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:843

-> #2 (fs_reclaim){+.+.}-{0:0}:
       __fs_reclaim_acquire mm/page_alloc.c:4045 [inline]
       fs_reclaim_acquire+0x8c/0x118 mm/page_alloc.c:4059
       might_alloc include/linux/sched/mm.h:318 [inline]
       slab_pre_alloc_hook mm/slub.c:4099 [inline]
       slab_alloc_node mm/slub.c:4177 [inline]
       kmem_cache_alloc_noprof+0x58/0x3e8 mm/slub.c:4204
       __kernfs_iattrs+0x9c/0x25c fs/kernfs/inode.c:37
       kernfs_iattrs fs/kernfs/inode.c:60 [inline]
       __kernfs_setattr fs/kernfs/inode.c:73 [inline]
       kernfs_iop_setattr+0xdc/0x374 fs/kernfs/inode.c:127
       notify_change+0x9a4/0xc50 fs/attr.c:552
       do_truncate+0x198/0x210 fs/open.c:68
       handle_truncate fs/namei.c:3517 [inline]
       do_open fs/namei.c:3900 [inline]
       path_openat+0x25a0/0x2c40 fs/namei.c:4055
       do_filp_open+0x18c/0x36c fs/namei.c:4082
       do_sys_openat2+0x11c/0x1b4 fs/open.c:1437
       do_sys_open fs/open.c:1452 [inline]
       __do_sys_openat fs/open.c:1468 [inline]
       __se_sys_openat fs/open.c:1463 [inline]
       __arm64_sys_openat+0x120/0x158 fs/open.c:1463
       __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
       invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
       el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
       do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
       el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879
       el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
       el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596

-> #1 (iattr_mutex){+.+.}-{4:4}:
       __mutex_lock_common+0x1d0/0x2190 kernel/locking/mutex.c:602
       __mutex_lock kernel/locking/mutex.c:747 [inline]
       mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:799
       __kernfs_iattrs+0x3c/0x25c fs/kernfs/inode.c:32
       kernfs_iattrs fs/kernfs/inode.c:60 [inline]
       __kernfs_setattr fs/kernfs/inode.c:73 [inline]
       kernfs_iop_setattr+0xdc/0x374 fs/kernfs/inode.c:127
       notify_change+0x9a4/0xc50 fs/attr.c:552
       do_truncate+0x198/0x210 fs/open.c:68
       handle_truncate fs/namei.c:3517 [inline]
       do_open fs/namei.c:3900 [inline]
       path_openat+0x25a0/0x2c40 fs/namei.c:4055
       do_filp_open+0x18c/0x36c fs/namei.c:4082
       do_sys_openat2+0x11c/0x1b4 fs/open.c:1437
       do_sys_open fs/open.c:1452 [inline]
       __do_sys_openat fs/open.c:1468 [inline]
       __se_sys_openat fs/open.c:1463 [inline]
       __arm64_sys_openat+0x120/0x158 fs/open.c:1463
       __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
       invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
       el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
       do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
       el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879
       el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
       el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596

-> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
       check_prev_add kernel/locking/lockdep.c:3168 [inline]
       check_prevs_add kernel/locking/lockdep.c:3287 [inline]
       validate_chain kernel/locking/lockdep.c:3911 [inline]
       __lock_acquire+0x1774/0x30a4 kernel/locking/lockdep.c:5240
       lock_acquire+0x14c/0x2e0 kernel/locking/lockdep.c:5871
       down_read+0x58/0x2f8 kernel/locking/rwsem.c:1524
       kernfs_iop_getattr+0xa0/0x40c fs/kernfs/inode.c:191
       vfs_getattr_nosec+0x254/0x38c fs/stat.c:213
       vfs_getattr+0x60/0x84 fs/stat.c:262
       loop_query_min_dio_size drivers/block/loop.c:456 [inline]
       loop_assign_backing_file+0x1d8/0x390 drivers/block/loop.c:509
       loop_change_fd drivers/block/loop.c:587 [inline]
       lo_ioctl+0x13b8/0x1b8c drivers/block/loop.c:1516
       blkdev_ioctl+0x610/0xac0 block/ioctl.c:704
       vfs_ioctl fs/ioctl.c:51 [inline]
       __do_sys_ioctl fs/ioctl.c:907 [inline]
       __se_sys_ioctl fs/ioctl.c:893 [inline]
       __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:893
       __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
       invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
       el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
       do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
       el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879
       el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
       el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596

other info that might help us debug this:

Chain exists of:
  &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&q->q_usage_counter(io)#24);
                               lock(fs_reclaim);
                               lock(&q->q_usage_counter(io)#24);
  rlock(&root->kernfs_iattr_rwsem);

 *** DEADLOCK ***

3 locks held by syz.0.16/6727:
 #0: ffff0000ca1be400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable drivers/block/loop.c:118 [inline]
 #0: ffff0000ca1be400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_change_fd drivers/block/loop.c:552 [inline]
 #0: ffff0000ca1be400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xdfc/0x1b8c drivers/block/loop.c:1516
 #1: ffff0000ca0a6228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue include/linux/blk-mq.h:934 [inline]
 #1: ffff0000ca0a6228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: loop_change_fd drivers/block/loop.c:585 [inline]
 #1: ffff0000ca0a6228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1364/0x1b8c drivers/block/loop.c:1516
 #2: ffff0000ca0a6260 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue include/linux/blk-mq.h:934 [inline]
 #2: ffff0000ca0a6260 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: loop_change_fd drivers/block/loop.c:585 [inline]
 #2: ffff0000ca0a6260 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: lo_ioctl+0x1364/0x1b8c drivers/block/loop.c:1516

stack backtrace:
CPU: 0 UID: 0 PID: 6727 Comm: syz.0.16 Not tainted 6.16.0-rc6-syzkaller-gaaef6f251176 #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call trace:
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C)
 __dump_stack+0x30/0x40 lib/dump_stack.c:94
 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120
 dump_stack+0x1c/0x28 lib/dump_stack.c:129
 print_circular_bug+0x324/0x32c kernel/locking/lockdep.c:2046
 check_noncircular+0x154/0x174 kernel/locking/lockdep.c:2178
 check_prev_add kernel/locking/lockdep.c:3168 [inline]
 check_prevs_add kernel/locking/lockdep.c:3287 [inline]
 validate_chain kernel/locking/lockdep.c:3911 [inline]
 __lock_acquire+0x1774/0x30a4 kernel/locking/lockdep.c:5240
 lock_acquire+0x14c/0x2e0 kernel/locking/lockdep.c:5871
 down_read+0x58/0x2f8 kernel/locking/rwsem.c:1524
 kernfs_iop_getattr+0xa0/0x40c fs/kernfs/inode.c:191
 vfs_getattr_nosec+0x254/0x38c fs/stat.c:213
 vfs_getattr+0x60/0x84 fs/stat.c:262
 loop_query_min_dio_size drivers/block/loop.c:456 [inline]
 loop_assign_backing_file+0x1d8/0x390 drivers/block/loop.c:509
 loop_change_fd drivers/block/loop.c:587 [inline]
 lo_ioctl+0x13b8/0x1b8c drivers/block/loop.c:1516
 blkdev_ioctl+0x610/0xac0 block/ioctl.c:704
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl fs/ioctl.c:893 [inline]
 __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:893
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
ldm_validate_partition_table(): Disk read failed.
Dev loop7: unable to read RDB block 0
 loop7: unable to read partition table
loop7: partition table beyond EOD, truncated
loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=���}Xp��	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)

final repro crashed as (corrupted=false):
loop7: partition table beyond EOD, truncated
loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=���}Xp��	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
======================================================
WARNING: possible circular locking dependency detected
6.16.0-rc6-syzkaller-gaaef6f251176 #0 Not tainted
------------------------------------------------------
syz.0.16/6727 is trying to acquire lock:
ffff0000c18a3220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0xa0/0x40c fs/kernfs/inode.c:191

but task is already holding lock:
ffff0000ca0a6228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue include/linux/blk-mq.h:934 [inline]
ffff0000ca0a6228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: loop_change_fd drivers/block/loop.c:585 [inline]
ffff0000ca0a6228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1364/0x1b8c drivers/block/loop.c:1516

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #3 (&q->q_usage_counter(io)#24){++++}-{0:0}:
       blk_alloc_queue+0x48c/0x54c block/blk-core.c:461
       blk_mq_alloc_queue block/blk-mq.c:4396 [inline]
       __blk_mq_alloc_disk+0x12c/0x310 block/blk-mq.c:4443
       loop_add+0x32c/0x88c drivers/block/loop.c:2013
       loop_init+0x168/0x1a0 drivers/block/loop.c:2248
       do_one_initcall+0x250/0x990 init/main.c:1274
       do_initcall_level+0x154/0x214 init/main.c:1336
       do_initcalls+0x84/0xf4 init/main.c:1352
       do_basic_setup+0x8c/0xa0 init/main.c:1371
       kernel_init_freeable+0x2dc/0x444 init/main.c:1584
       kernel_init+0x24/0x1dc init/main.c:1474
       ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:843

-> #2 (fs_reclaim){+.+.}-{0:0}:
       __fs_reclaim_acquire mm/page_alloc.c:4045 [inline]
       fs_reclaim_acquire+0x8c/0x118 mm/page_alloc.c:4059
       might_alloc include/linux/sched/mm.h:318 [inline]
       slab_pre_alloc_hook mm/slub.c:4099 [inline]
       slab_alloc_node mm/slub.c:4177 [inline]
       kmem_cache_alloc_noprof+0x58/0x3e8 mm/slub.c:4204
       __kernfs_iattrs+0x9c/0x25c fs/kernfs/inode.c:37
       kernfs_iattrs fs/kernfs/inode.c:60 [inline]
       __kernfs_setattr fs/kernfs/inode.c:73 [inline]
       kernfs_iop_setattr+0xdc/0x374 fs/kernfs/inode.c:127
       notify_change+0x9a4/0xc50 fs/attr.c:552
       do_truncate+0x198/0x210 fs/open.c:68
       handle_truncate fs/namei.c:3517 [inline]
       do_open fs/namei.c:3900 [inline]
       path_openat+0x25a0/0x2c40 fs/namei.c:4055
       do_filp_open+0x18c/0x36c fs/namei.c:4082
       do_sys_openat2+0x11c/0x1b4 fs/open.c:1437
       do_sys_open fs/open.c:1452 [inline]
       __do_sys_openat fs/open.c:1468 [inline]
       __se_sys_openat fs/open.c:1463 [inline]
       __arm64_sys_openat+0x120/0x158 fs/open.c:1463
       __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
       invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
       el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
       do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
       el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879
       el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
       el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596

-> #1 (iattr_mutex){+.+.}-{4:4}:
       __mutex_lock_common+0x1d0/0x2190 kernel/locking/mutex.c:602
       __mutex_lock kernel/locking/mutex.c:747 [inline]
       mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:799
       __kernfs_iattrs+0x3c/0x25c fs/kernfs/inode.c:32
       kernfs_iattrs fs/kernfs/inode.c:60 [inline]
       __kernfs_setattr fs/kernfs/inode.c:73 [inline]
       kernfs_iop_setattr+0xdc/0x374 fs/kernfs/inode.c:127
       notify_change+0x9a4/0xc50 fs/attr.c:552
       do_truncate+0x198/0x210 fs/open.c:68
       handle_truncate fs/namei.c:3517 [inline]
       do_open fs/namei.c:3900 [inline]
       path_openat+0x25a0/0x2c40 fs/namei.c:4055
       do_filp_open+0x18c/0x36c fs/namei.c:4082
       do_sys_openat2+0x11c/0x1b4 fs/open.c:1437
       do_sys_open fs/open.c:1452 [inline]
       __do_sys_openat fs/open.c:1468 [inline]
       __se_sys_openat fs/open.c:1463 [inline]
       __arm64_sys_openat+0x120/0x158 fs/open.c:1463
       __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
       invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
       el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
       do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
       el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879
       el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
       el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596

-> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
       check_prev_add kernel/locking/lockdep.c:3168 [inline]
       check_prevs_add kernel/locking/lockdep.c:3287 [inline]
       validate_chain kernel/locking/lockdep.c:3911 [inline]
       __lock_acquire+0x1774/0x30a4 kernel/locking/lockdep.c:5240
       lock_acquire+0x14c/0x2e0 kernel/locking/lockdep.c:5871
       down_read+0x58/0x2f8 kernel/locking/rwsem.c:1524
       kernfs_iop_getattr+0xa0/0x40c fs/kernfs/inode.c:191
       vfs_getattr_nosec+0x254/0x38c fs/stat.c:213
       vfs_getattr+0x60/0x84 fs/stat.c:262
       loop_query_min_dio_size drivers/block/loop.c:456 [inline]
       loop_assign_backing_file+0x1d8/0x390 drivers/block/loop.c:509
       loop_change_fd drivers/block/loop.c:587 [inline]
       lo_ioctl+0x13b8/0x1b8c drivers/block/loop.c:1516
       blkdev_ioctl+0x610/0xac0 block/ioctl.c:704
       vfs_ioctl fs/ioctl.c:51 [inline]
       __do_sys_ioctl fs/ioctl.c:907 [inline]
       __se_sys_ioctl fs/ioctl.c:893 [inline]
       __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:893
       __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
       invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
       el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
       do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
       el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879
       el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
       el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596

other info that might help us debug this:

Chain exists of:
  &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&q->q_usage_counter(io)#24);
                               lock(fs_reclaim);
                               lock(&q->q_usage_counter(io)#24);
  rlock(&root->kernfs_iattr_rwsem);

 *** DEADLOCK ***

3 locks held by syz.0.16/6727:
 #0: ffff0000ca1be400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable drivers/block/loop.c:118 [inline]
 #0: ffff0000ca1be400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_change_fd drivers/block/loop.c:552 [inline]
 #0: ffff0000ca1be400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xdfc/0x1b8c drivers/block/loop.c:1516
 #1: ffff0000ca0a6228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue include/linux/blk-mq.h:934 [inline]
 #1: ffff0000ca0a6228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: loop_change_fd drivers/block/loop.c:585 [inline]
 #1: ffff0000ca0a6228 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1364/0x1b8c drivers/block/loop.c:1516
 #2: ffff0000ca0a6260 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue include/linux/blk-mq.h:934 [inline]
 #2: ffff0000ca0a6260 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: loop_change_fd drivers/block/loop.c:585 [inline]
 #2: ffff0000ca0a6260 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: lo_ioctl+0x1364/0x1b8c drivers/block/loop.c:1516

stack backtrace:
CPU: 0 UID: 0 PID: 6727 Comm: syz.0.16 Not tainted 6.16.0-rc6-syzkaller-gaaef6f251176 #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call trace:
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C)
 __dump_stack+0x30/0x40 lib/dump_stack.c:94
 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120
 dump_stack+0x1c/0x28 lib/dump_stack.c:129
 print_circular_bug+0x324/0x32c kernel/locking/lockdep.c:2046
 check_noncircular+0x154/0x174 kernel/locking/lockdep.c:2178
 check_prev_add kernel/locking/lockdep.c:3168 [inline]
 check_prevs_add kernel/locking/lockdep.c:3287 [inline]
 validate_chain kernel/locking/lockdep.c:3911 [inline]
 __lock_acquire+0x1774/0x30a4 kernel/locking/lockdep.c:5240
 lock_acquire+0x14c/0x2e0 kernel/locking/lockdep.c:5871
 down_read+0x58/0x2f8 kernel/locking/rwsem.c:1524
 kernfs_iop_getattr+0xa0/0x40c fs/kernfs/inode.c:191
 vfs_getattr_nosec+0x254/0x38c fs/stat.c:213
 vfs_getattr+0x60/0x84 fs/stat.c:262
 loop_query_min_dio_size drivers/block/loop.c:456 [inline]
 loop_assign_backing_file+0x1d8/0x390 drivers/block/loop.c:509
 loop_change_fd drivers/block/loop.c:587 [inline]
 lo_ioctl+0x13b8/0x1b8c drivers/block/loop.c:1516
 blkdev_ioctl+0x610/0xac0 block/ioctl.c:704
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl fs/ioctl.c:893 [inline]
 __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:893
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
ldm_validate_partition_table(): Disk read failed.
Dev loop7: unable to read RDB block 0
 loop7: unable to read partition table
loop7: partition table beyond EOD, truncated
loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=���}Xp��	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)