last executing test programs: 2m25.190540559s ago: executing program 2 (id=1757): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) 2m25.112696099s ago: executing program 2 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m25.044700189s ago: executing program 2 (id=1759): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x46) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x6, 0x40000785) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3801fe00", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff"], 0x138}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r4, &(0x7f0000000100)=ANY=[], 0x72) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) rseq(&(0x7f00000001c0), 0x3c, 0x20000, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_pgetevents(r7, 0x3, 0x4e, &(0x7f00000002c0), &(0x7f0000000500), 0x0) 2m24.782659898s ago: executing program 2 (id=1768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5dd7316e2fde1a8d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00'}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10) unshare(0x46060480) 2m24.151079194s ago: executing program 2 (id=1777): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000006000000ff0f000003"], 0x50) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0x0, &(0x7f0000000c40)={0x1, 0x1, 0x8, 0x7, 0x4, 0x3, 0x962, 0xd0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00dedefa00000000ffffffffffffff7f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x50) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async) r4 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="011f0000000000000000020000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x153) mlockall(0x2) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) (async) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) (async) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x6209c0, 0x0) mq_notify(r8, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) (async) r9 = socket(0x10, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@private0, @in6=@local}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) (async) r10 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmdt(r10) socket$nl_netfilter(0x10, 0x3, 0xc) 2m23.803717042s ago: executing program 2 (id=1783): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x768}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0xff, 0xfd, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x2}}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0xfff1}, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m23.786117283s ago: executing program 32 (id=1783): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x768}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0xff, 0xfd, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x2}}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0xfff1}, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 7.923311217s ago: executing program 5 (id=4924): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r8, 0x0, 0x9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) 7.813727906s ago: executing program 5 (id=4926): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x82) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 7.616377465s ago: executing program 5 (id=4928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='kmem_cache_free\x00', r1}, 0x18) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0xc, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000000) 7.539264385s ago: executing program 5 (id=4930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r3, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x7797, 0x3) process_vm_writev(r1, &(0x7f0000000780)=[{&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f0000000680)=""/248, 0xf8}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/106, 0x6a}, {&(0x7f0000000540)=""/106, 0x6a}], 0x5, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@bh}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x1c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000300)="ff", 0xfffd}], 0x1, 0xe7b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) semctl$SETVAL(0x0, 0x1, 0x10, &(0x7f0000000000)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) unshare(0x40000000) 7.142226303s ago: executing program 5 (id=4939): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x82) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 6.715749711s ago: executing program 5 (id=4943): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.715496371s ago: executing program 33 (id=4943): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.587049906s ago: executing program 3 (id=5022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) 1.411773466s ago: executing program 3 (id=5027): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffa, 0x7, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c000000000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x30, &(0x7f0000000600)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000000c0)="01", 0x24}]) 1.309233816s ago: executing program 4 (id=5028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 1.262024015s ago: executing program 1 (id=5029): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000eb40000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400400000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1.238280075s ago: executing program 4 (id=5030): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000eb40000000"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1.213517375s ago: executing program 4 (id=5031): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 1.192667845s ago: executing program 6 (id=5032): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_read_part_table(0x60d, &(0x7f0000002240)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") creat(&(0x7f0000000040)='./bus\x00', 0x82) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 1.187630785s ago: executing program 1 (id=5033): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 1.180388375s ago: executing program 4 (id=5034): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0xffffffffffffffff, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0xee00, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r8, 0x400, 0x1) open$dir(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x60280, 0x100) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x238, r2, 0x300, 0x9, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7758b10d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x759}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x506232f8}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fd4f8f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd78}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x223bc71d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40bb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9677}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26f28cc5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49045678}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbebad30}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacfd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8f13a02}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5aab9799}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x132f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x106a2f18}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72b564f3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ba5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f67a0b6}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc281}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc244}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d22914f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa70a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbdfa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49861899}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77b500f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70735773}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7db842f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x743dfc92}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc459}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70d45435}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x118a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f7c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x993f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75899671}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6caf3d95}]}, {0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe19b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb9ffe32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51b}]}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x10010}, 0x9cfca8dd18918e6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.137481165s ago: executing program 1 (id=5035): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x3892a3, 0x12) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) close(r3) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000108000000000000", @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a0006000000080016000200000008001000000400000800"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000400)=0x8, 0x12) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f00000003c0)=0x3, 0x4) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x50, r9, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b000000"], 0x28}}, 0x0) 924.361414ms ago: executing program 6 (id=5036): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x8, &(0x7f00000000c0)=[{0x9, 0x2, 0x9}, {0x0, 0x8, 0x1, 0x80000001}, {0xead, 0xa, 0x1, 0x5}, {0x71ea, 0x7, 0x80, 0xffffffff}, {0x5, 0x9, 0xf8, 0xb}, {0x6, 0x6, 0xf5, 0x6}, {0xc, 0xe0, 0x8a, 0x2e7}, {0x1, 0x62, 0x3, 0x5a52}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007100000095000000000000002993467fb2fb353f9d99f8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x20000000000003}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x1}) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0x40000000000004, 0xfffffffffffffffc}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) 895.453874ms ago: executing program 1 (id=5037): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0xffffffffffffffff, 0x48) setresuid(0xee00, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) open$dir(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x60280, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 859.775113ms ago: executing program 6 (id=5038): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x3892a3, 0x12) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) close(r3) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000108000000000000", @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a0006000000080016000200000008001000000400000800"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000400)=0x8, 0x12) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f00000003c0)=0x3, 0x4) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x50, r9, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b000000"], 0x28}}, 0x0) 667.484333ms ago: executing program 0 (id=5039): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r8, 0x0, 0x9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) 535.644192ms ago: executing program 6 (id=5040): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r8, 0x0, 0x9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 533.681302ms ago: executing program 0 (id=5041): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r8, 0x0, 0x9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 482.765542ms ago: executing program 3 (id=5042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x516, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) fdatasync(r1) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xe}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x2008040) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x8, 0x4}, {0x2}, {0xd, 0x5}, {0x8}, {0xa, 0x4}]}]}, {0x0, [0x61, 0x5f, 0x30]}}, &(0x7f00000006c0)=""/218, 0x51, 0xda, 0x0, 0x8001, 0x10000, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r2, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0xb6, &(0x7f0000000940)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x7, 0xa, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x30, '\x00', r6, @fallback=0x1c, r7, 0x8, &(0x7f0000000800)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x9, 0x6, 0x5a69}, 0x10, r8, r1, 0xa, 0x0, &(0x7f0000000c40)=[{0x2, 0x5, 0x5, 0x2}, {0x1, 0x30000, 0x6, 0xc}, {0x1, 0x1, 0xf, 0x6}, {0x5, 0x2, 0x2, 0xb}, {0x5, 0x4, 0xb, 0x6}, {0x3, 0x1, 0x10, 0x8}, {0x4, 0x4, 0xc, 0x3}, {0x5, 0x1, 0x5, 0xa}, {0x3, 0x5, 0x5, 0x3}, {0x2, 0x5, 0x8, 0x9}], 0x10, 0x4, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6(0xa, 0x80002, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xa50f}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x7, @local, 0x7}}, 0x7, 0x3ff, 0x5, 0x80, 0xd, 0x3, 0x5}, &(0x7f0000000080)=0x9c) openat$nci(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) 421.260761ms ago: executing program 3 (id=5043): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x9, 0xd467, 0x3, 0xfff, 0x7, 0x7, 0x4, 0x9, 0x6, 0x2, 0x81, 0x1, 0x5, 0x3, 0x6, 0x1ff, 0x7, 0x7, 0x8, 0x7, 0x6, 0x2, 0x4, 0x7, 0x46, 0x8, 0x4, 0x7fff, 0x6, 0x3, 0x2, 0x80000000, 0x2, 0x5, 0x0, 0x3, 0x7, 0xff, 0x8d, 0x7, 0x7, 0x6, 0xfffffffc, 0x101, 0x0, 0xa, 0x13, 0x101, 0x3, 0x6, 0x8001, 0x2, 0x2, 0x1, 0xe805, 0xca65, 0x7, 0xc2, 0x4, 0x4, 0x6, 0x9, 0x1, 0x6, 0xffff, 0xb, 0x10d, 0x0, 0x0, 0x5, 0x200, 0x0, 0x7, 0x9, 0x8, 0x1, 0x9, 0x2, 0x440a, 0x9d9f, 0xc22, 0x6, 0x1, 0x0, 0x2, 0x7, 0x6, 0x703e, 0x0, 0xee7, 0x81, 0x800, 0x71, 0x1, 0x0, 0xd, 0x0, 0x1, 0x5, 0x8, 0x1, 0x0, 0x10, 0x400, 0x1, 0x1, 0x456c, 0x7, 0x8e, 0x275f, 0x81, 0x9, 0x1000, 0x0, 0x5, 0x65aa, 0x3b5, 0x8, 0x8, 0x7fffffff, 0x2, 0x5, 0x19, 0x9, 0xbb5, 0x10000, 0xffffffff, 0x4, 0x6, 0x1, 0x3ff, 0xffff, 0xa6, 0x5, 0x1, 0x0, 0x5, 0x1, 0x2462, 0x6, 0x7fff, 0x200, 0xcf, 0xc3, 0x8, 0xf, 0x10001, 0x9, 0xec, 0x3, 0x3d05, 0x7, 0xb, 0x3, 0x3, 0xb8, 0x5093, 0x5241, 0x5, 0x6, 0x1, 0xffff5cb0, 0x200, 0x1000, 0x6, 0x3, 0x1ff, 0x1, 0x3, 0xcef3, 0x8, 0x93, 0x2, 0x9, 0x6c000000, 0x9, 0x1b, 0x4, 0x7fffffff, 0xe, 0x3ff, 0x6, 0x8, 0xd6, 0x7, 0x8001, 0x3, 0x7, 0xd, 0xae8, 0x57c, 0x40, 0x2, 0x4c4, 0x3, 0x3, 0x3, 0xffffffff, 0x80000000, 0xffffffff, 0x6, 0x8, 0x8001, 0xc, 0x20, 0x2, 0xa, 0xffff6f2a, 0x9, 0x10000, 0x7eda, 0x9, 0x6, 0x7, 0xc14, 0x10, 0x75ba516, 0xe, 0x92f, 0x7, 0x2, 0x1, 0xb798, 0x4, 0xff, 0x7, 0x3, 0x40, 0x4, 0x3, 0x1, 0x4, 0xd7, 0x10000, 0x6, 0x4, 0xffff, 0x4, 0x0, 0x0, 0x2, 0x6, 0xffffffc0, 0x0, 0x4, 0xffff, 0x4, 0x5, 0x7c, 0x9, 0xc51c, 0x8, 0x3, 0x4, 0x81, 0xe]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x6, 0x5, 0x5e1d, 0x8}, 0x3ff, 0x8, 0x99}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000ff0000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 392.756441ms ago: executing program 3 (id=5044): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 377.597121ms ago: executing program 3 (id=5045): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0xffffffffffffffff, 0x48) setresuid(0xee00, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) open$dir(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x60280, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 370.529791ms ago: executing program 6 (id=5046): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000eb40000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400400000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 363.013741ms ago: executing program 0 (id=5047): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x3892a3, 0x12) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) close(r3) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000100001080000000000000000", @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a0006000000080016000200000008001000000400000800"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000400)=0x8, 0x12) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f00000003c0)=0x3, 0x4) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x50, r9, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b000000"], 0x28}}, 0x0) 325.358031ms ago: executing program 4 (id=5048): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000600)="0a1b", 0x2}, {&(0x7f0000000140)="9f", 0x1}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b80)={{{@in=@local, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3969}}, 0xe8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 302.234621ms ago: executing program 6 (id=5049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) rt_sigaction(0x40, &(0x7f0000000500)={0x0, 0x4000000, 0x0}, 0x0, 0x8, &(0x7f0000001540)) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), 0x0) syz_clone3(&(0x7f00000009c0)={0x105104000, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execve(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0x1, 0x4, 0x25dfdbfe, {}, [@CGW_CS_XOR={0x8, 0x5, {0x6, 0xfffffffffffffffe, 0xff, 0xd}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x8, 0x2, 0x0, 0x0, "7fa5bf073cff73aa"}, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 266.542481ms ago: executing program 4 (id=5050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x6db6e559) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 212.65014ms ago: executing program 0 (id=5051): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x747, 0x0, @perf_config_ext={0x0, 0x25}, 0x0, 0x3, 0xffff, 0x7, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6}]}) sendmsg$inet_sctp(r1, &(0x7f0000000b40)={&(0x7f0000000900)=@in={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4020) socket$netlink(0x10, 0x3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) setregid(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x48000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@delalloc}, {@nodioread_nolock}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") socket$netlink(0x10, 0x3, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000840)={[{@numtail}, {@uni_xlate}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x7}}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@fat=@quiet}, {@shortname_win95}, {@utf8}, {@nonumtail}, {@shortname_mixed}, {@numtail}, {@shortname_win95}], [{@uid_lt={'uid<', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsfloor}, {@euid_eq}, {@seclabel}, {@smackfshat={'smackfshat', 0x3d, '$$:!-T[\x7f\'{.-'}}, {@flag='rw'}]}, 0x0, 0x2a4, &(0x7f0000000580)="$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") 107.269009ms ago: executing program 0 (id=5052): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffa, 0x7, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c000000000000000000000085"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x30, &(0x7f0000000600)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000000c0)="01", 0x24}]) 39.00393ms ago: executing program 1 (id=5053): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 17.172289ms ago: executing program 1 (id=5054): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x9, 0xd467, 0x3, 0xfff, 0x7, 0x7, 0x4, 0x9, 0x6, 0x2, 0x81, 0x1, 0x5, 0x3, 0x6, 0x1ff, 0x7, 0x7, 0x8, 0x7, 0x6, 0x2, 0x4, 0x7, 0x46, 0x8, 0x4, 0x7fff, 0x6, 0x3, 0x2, 0x80000000, 0x2, 0x5, 0x0, 0x3, 0x7, 0xff, 0x8d, 0x7, 0x7, 0x6, 0xfffffffc, 0x101, 0x0, 0xa, 0x13, 0x101, 0x3, 0x6, 0x8001, 0x2, 0x2, 0x1, 0xe805, 0xca65, 0x7, 0xc2, 0x4, 0x4, 0x6, 0x9, 0x1, 0x6, 0xffff, 0xb, 0x10d, 0x0, 0x0, 0x5, 0x200, 0x0, 0x7, 0x9, 0x8, 0x1, 0x9, 0x2, 0x440a, 0x9d9f, 0xc22, 0x6, 0x1, 0x0, 0x2, 0x7, 0x6, 0x703e, 0x0, 0xee7, 0x81, 0x800, 0x71, 0x1, 0x0, 0xd, 0x0, 0x1, 0x5, 0x8, 0x1, 0x0, 0x10, 0x400, 0x1, 0x1, 0x456c, 0x7, 0x8e, 0x275f, 0x81, 0x9, 0x1000, 0x0, 0x5, 0x65aa, 0x3b5, 0x8, 0x8, 0x7fffffff, 0x2, 0x5, 0x19, 0x9, 0xbb5, 0x10000, 0xffffffff, 0x4, 0x6, 0x1, 0x3ff, 0xffff, 0xa6, 0x5, 0x1, 0x0, 0x5, 0x1, 0x2462, 0x6, 0x7fff, 0x200, 0xcf, 0xc3, 0x8, 0xf, 0x10001, 0x9, 0xec, 0x3, 0x3d05, 0x7, 0xb, 0x3, 0x3, 0xb8, 0x5093, 0x5241, 0x5, 0x6, 0x1, 0xffff5cb0, 0x200, 0x1000, 0x6, 0x3, 0x1ff, 0x1, 0x3, 0xcef3, 0x8, 0x93, 0x2, 0x9, 0x6c000000, 0x9, 0x1b, 0x4, 0x7fffffff, 0xe, 0x3ff, 0x6, 0x8, 0xd6, 0x7, 0x8001, 0x3, 0x7, 0xd, 0xae8, 0x57c, 0x40, 0x2, 0x4c4, 0x3, 0x3, 0x3, 0xffffffff, 0x80000000, 0xffffffff, 0x6, 0x8, 0x8001, 0xc, 0x20, 0x2, 0xa, 0xffff6f2a, 0x9, 0x10000, 0x7eda, 0x9, 0x6, 0x7, 0xc14, 0x10, 0x75ba516, 0xe, 0x92f, 0x7, 0x2, 0x1, 0xb798, 0x4, 0xff, 0x7, 0x3, 0x40, 0x4, 0x3, 0x1, 0x4, 0xd7, 0x10000, 0x6, 0x4, 0xffff, 0x4, 0x0, 0x0, 0x2, 0x6, 0xffffffc0, 0x0, 0x4, 0xffff, 0x4, 0x5, 0x7c, 0x9, 0xc51c, 0x8, 0x3, 0x4, 0x81, 0xe]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x6, 0x5, 0x5e1d, 0x8}, 0x3ff, 0x8, 0x99}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000ff0000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=5055): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) kernel console output (not intermixed with test programs): loop1: detected capacity change from 0 to 128 [ 230.909765][T11784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.934760][T16192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4529'. [ 230.985241][T16195] team0: Device gtp0 is of different type [ 231.037737][T16210] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 231.088152][ T29] kauditd_printk_skb: 797 callbacks suppressed [ 231.088165][ T29] audit: type=1326 audit(1737186896.770:21799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.1.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 231.118068][ T29] audit: type=1326 audit(1737186896.770:21800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.1.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 231.142045][ T29] audit: type=1326 audit(1737186896.770:21801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.1.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 231.165819][ T29] audit: type=1326 audit(1737186896.770:21802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.1.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 231.189746][ T29] audit: type=1326 audit(1737186896.770:21803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.1.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 231.239837][T16215] loop1: detected capacity change from 0 to 8192 [ 231.246777][ T29] audit: type=1326 audit(1737186896.770:21804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.1.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 231.270489][ T29] audit: type=1326 audit(1737186896.770:21805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.1.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 231.294015][ T29] audit: type=1326 audit(1737186896.770:21806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.1.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 231.317806][ T29] audit: type=1326 audit(1737186896.770:21807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.1.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 231.341285][ T29] audit: type=1326 audit(1737186896.770:21808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.1.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 231.392968][T16221] loop0: detected capacity change from 0 to 8192 [ 231.428372][T16226] 9pnet_fd: Insufficient options for proto=fd [ 231.438168][T16228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4542'. [ 231.537597][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4544'. [ 231.616093][T16240] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4545'. [ 231.663821][T16242] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4546'. [ 231.830462][T16250] loop3: detected capacity change from 0 to 512 [ 231.842763][T16242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.857360][T16242] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.870757][T16242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.889799][T16250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.902541][T16250] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.022660][T11784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.073411][T16265] loop3: detected capacity change from 0 to 512 [ 232.093020][T16265] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.4555: corrupted xattr block 255: invalid header [ 232.123203][T16265] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 232.146706][T16265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.153389][T16263] loop1: detected capacity change from 0 to 8192 [ 232.176013][T16265] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.4555: corrupted xattr block 255: invalid header [ 232.216275][T16265] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 232.228675][T16265] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.249807][T16274] loop4: detected capacity change from 0 to 8192 [ 232.251939][T16263] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.280474][T16263] syzkaller0: entered allmulticast mode [ 232.296743][T16263] syzkaller0 (unregistering): left allmulticast mode [ 232.366170][T16284] tipc: Started in network mode [ 232.371122][T16284] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 232.383434][T16284] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 232.391745][T16284] tipc: Enabled bearer , priority 10 [ 232.453578][T16296] syz.3.4566[16296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.453733][T16296] syz.3.4566[16296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.465816][T16296] syz.3.4566[16296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.829435][T16316] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4572'. [ 232.877154][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4571'. [ 233.124656][T16327] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 233.153325][T16337] loop5: detected capacity change from 0 to 512 [ 233.161867][T16336] tipc: Enabling of bearer rejected, already enabled [ 233.188908][T16337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.204733][T16337] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.215479][T16346] FAULT_INJECTION: forcing a failure. [ 233.215479][T16346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.228656][T16346] CPU: 0 UID: 0 PID: 16346 Comm: syz.1.4584 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 233.239484][T16346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 233.249546][T16346] Call Trace: [ 233.252828][T16346] [ 233.255761][T16346] dump_stack_lvl+0xf2/0x150 [ 233.260359][T16346] dump_stack+0x15/0x1a [ 233.264519][T16346] should_fail_ex+0x223/0x230 [ 233.269244][T16346] should_fail+0xb/0x10 [ 233.273410][T16346] should_fail_usercopy+0x1a/0x20 [ 233.278549][T16346] strncpy_from_user+0x25/0x210 [ 233.283481][T16346] ? __fget_files+0x17c/0x1c0 [ 233.288205][T16346] __se_sys_add_key+0x81/0x320 [ 233.293039][T16346] ? fput+0x1c4/0x200 [ 233.297033][T16346] __x64_sys_add_key+0x67/0x80 [ 233.301868][T16346] x64_sys_call+0x2964/0x2dc0 [ 233.306696][T16346] do_syscall_64+0xc9/0x1c0 [ 233.311195][T16346] ? clear_bhb_loop+0x55/0xb0 [ 233.315925][T16346] ? clear_bhb_loop+0x55/0xb0 [ 233.320594][T16346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.326490][T16346] RIP: 0033:0x7fccde4d5d29 [ 233.330894][T16346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.350520][T16346] RSP: 002b:00007fccdcb47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 233.358993][T16346] RAX: ffffffffffffffda RBX: 00007fccde6c5fa0 RCX: 00007fccde4d5d29 [ 233.367034][T16346] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 233.375060][T16346] RBP: 00007fccdcb47090 R08: ffffffffffffffff R09: 0000000000000000 [ 233.383026][T16346] R10: 00000000000052ba R11: 0000000000000246 R12: 0000000000000001 [ 233.390990][T16346] R13: 0000000000000001 R14: 00007fccde6c5fa0 R15: 00007ffc75aa27a8 [ 233.399080][T16346] [ 233.449346][T12853] tipc: Node number set to 1 [ 233.492830][T16353] loop4: detected capacity change from 0 to 8192 [ 233.517032][T16359] loop3: detected capacity change from 0 to 1024 [ 233.566309][T16359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.583875][ T8401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.637694][T16374] lo speed is unknown, defaulting to 1000 [ 233.668847][T16374] lo speed is unknown, defaulting to 1000 [ 233.693087][T16379] 9pnet_fd: Insufficient options for proto=fd [ 233.705499][T16381] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 233.774349][T16383] loop1: detected capacity change from 0 to 2048 [ 233.782431][T16386] loop5: detected capacity change from 0 to 256 [ 233.843776][T11784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.854297][T16383] loop1: p1 < > p4 [ 233.866658][T16389] syz.5.4598: attempt to access beyond end of device [ 233.866658][T16389] loop5: rw=0, sector=272, nr_sectors = 4 limit=256 [ 233.885192][T16383] loop1: p4 size 8388608 extends beyond EOD, truncated [ 233.903393][T16388] loop0: detected capacity change from 0 to 8192 [ 233.942704][T16389] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 233.950926][T16389] FAT-fs (loop5): Filesystem has been set read-only [ 233.967365][T16388] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 233.974542][T16388] FAT-fs (loop0): Filesystem has been set read-only [ 233.998781][T16388] x_tables: duplicate entry at hook 2 [ 234.014160][T16389] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 234.019121][T16400] FAULT_INJECTION: forcing a failure. [ 234.019121][T16400] name failslab, interval 1, probability 0, space 0, times 0 [ 234.023557][T16398] loop3: detected capacity change from 0 to 1024 [ 234.034987][T16400] CPU: 1 UID: 0 PID: 16400 Comm: syz.1.4601 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 234.052230][T16400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 234.062478][T16400] Call Trace: [ 234.065761][T16400] [ 234.068708][T16400] dump_stack_lvl+0xf2/0x150 [ 234.073331][T16400] dump_stack+0x15/0x1a [ 234.077520][T16400] should_fail_ex+0x223/0x230 [ 234.082207][T16400] should_failslab+0x8f/0xb0 [ 234.086851][T16400] kmem_cache_alloc_noprof+0x52/0x320 [ 234.092237][T16400] ? dst_alloc+0xc0/0x100 [ 234.096602][T16400] dst_alloc+0xc0/0x100 [ 234.100830][T16400] ? ip_vs_sh_schedule+0xd2/0x5a0 [ 234.105961][T16400] ip_route_output_key_hash_rcu+0xb90/0x12d0 [ 234.112016][T16400] ip_route_output_flow+0x76/0x120 [ 234.117158][T16400] ip_mc_find_dev+0xb4/0x150 [ 234.121758][T16400] ip_mc_leave_group+0x7a/0x350 [ 234.126611][T16400] ip_mcast_join_leave+0x155/0x190 [ 234.131812][T16400] do_ip_setsockopt+0x1a26/0x2340 [ 234.136839][T16400] ip_setsockopt+0x63/0x100 [ 234.141343][T16400] dccp_setsockopt+0xe1/0xc40 [ 234.146083][T16400] sock_common_setsockopt+0x64/0x80 [ 234.151361][T16400] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 234.157258][T16400] __sys_setsockopt+0x187/0x200 [ 234.162139][T16400] __x64_sys_setsockopt+0x66/0x80 [ 234.167211][T16400] x64_sys_call+0x282e/0x2dc0 [ 234.171934][T16400] do_syscall_64+0xc9/0x1c0 [ 234.176461][T16400] ? clear_bhb_loop+0x55/0xb0 [ 234.181194][T16400] ? clear_bhb_loop+0x55/0xb0 [ 234.185864][T16400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.191814][T16400] RIP: 0033:0x7fccde4d5d29 [ 234.196274][T16400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.215884][T16400] RSP: 002b:00007fccdcb47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 234.224386][T16400] RAX: ffffffffffffffda RBX: 00007fccde6c5fa0 RCX: 00007fccde4d5d29 [ 234.232381][T16400] RDX: 000000000000002d RSI: 0000000000000000 RDI: 0000000000000003 [ 234.240363][T16400] RBP: 00007fccdcb47090 R08: 0000000000000088 R09: 0000000000000000 [ 234.248347][T16400] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.256335][T16400] R13: 0000000000000000 R14: 00007fccde6c5fa0 R15: 00007ffc75aa27a8 [ 234.264328][T16400] [ 234.297629][T16398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.391086][T16416] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4608'. [ 234.411576][T16416] infiniband sz1: set down [ 234.447056][ T3609] lo speed is unknown, defaulting to 1000 [ 234.452861][ T3609] lo speed is unknown, defaulting to 1000 [ 234.486703][T16416] infiniband sz1: set active [ 234.491828][T16416] infiniband sz1: set active [ 234.492432][T11784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.498422][T16416] infiniband sz1: set active [ 234.530232][T16416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.540682][T16416] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.552320][T16416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.568072][ T3609] lo speed is unknown, defaulting to 1000 [ 234.570293][T16423] loop4: detected capacity change from 0 to 512 [ 234.573836][ T9] lo speed is unknown, defaulting to 1000 [ 234.586074][ T1035] lo speed is unknown, defaulting to 1000 [ 234.594014][T16418] lo speed is unknown, defaulting to 1000 [ 234.606616][T16421] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 234.613878][ T1035] lo speed is unknown, defaulting to 1000 [ 234.621059][T16425] syz.1.4612[16425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.621111][T16425] syz.1.4612[16425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.632919][T16425] syz.1.4612[16425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.642645][T16418] lo speed is unknown, defaulting to 1000 [ 234.692796][T16423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.700314][T16430] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4613'. [ 234.706400][T16423] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.753378][T16432] FAULT_INJECTION: forcing a failure. [ 234.753378][T16432] name failslab, interval 1, probability 0, space 0, times 0 [ 234.766226][T16432] CPU: 0 UID: 0 PID: 16432 Comm: syz.5.4614 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 234.777064][T16432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 234.787176][T16432] Call Trace: [ 234.790522][T16432] [ 234.793501][T16432] dump_stack_lvl+0xf2/0x150 [ 234.798177][T16432] dump_stack+0x15/0x1a [ 234.802455][T16432] should_fail_ex+0x223/0x230 [ 234.807238][T16432] should_failslab+0x8f/0xb0 [ 234.811834][T16432] kmem_cache_alloc_node_noprof+0x59/0x320 [ 234.817633][T16432] ? __alloc_skb+0x10b/0x310 [ 234.822212][T16432] __alloc_skb+0x10b/0x310 [ 234.826633][T16432] netlink_alloc_large_skb+0xad/0xe0 [ 234.831910][T16432] netlink_sendmsg+0x3b4/0x6e0 [ 234.836671][T16432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.842043][T16432] __sock_sendmsg+0x140/0x180 [ 234.846723][T16432] ____sys_sendmsg+0x312/0x410 [ 234.851514][T16432] __sys_sendmsg+0x19d/0x230 [ 234.856107][T16432] __x64_sys_sendmsg+0x46/0x50 [ 234.860865][T16432] x64_sys_call+0x2734/0x2dc0 [ 234.865538][T16432] do_syscall_64+0xc9/0x1c0 [ 234.870034][T16432] ? clear_bhb_loop+0x55/0xb0 [ 234.874773][T16432] ? clear_bhb_loop+0x55/0xb0 [ 234.879449][T16432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.885490][T16432] RIP: 0033:0x7f09832a5d29 [ 234.889987][T16432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.909637][T16432] RSP: 002b:00007f0981911038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.918107][T16432] RAX: ffffffffffffffda RBX: 00007f0983495fa0 RCX: 00007f09832a5d29 [ 234.926110][T16432] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 234.934117][T16432] RBP: 00007f0981911090 R08: 0000000000000000 R09: 0000000000000000 [ 234.942079][T16432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.950048][T16432] R13: 0000000000000000 R14: 00007f0983495fa0 R15: 00007ffe47854f78 [ 234.958082][T16432] [ 235.022512][T16443] loop0: detected capacity change from 0 to 512 [ 235.095838][T10959] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.120586][T16443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.138769][T16460] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4622'. [ 235.178518][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.185968][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.193508][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.207522][T16443] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.263328][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.270879][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.278374][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.287097][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.294587][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.302116][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.309691][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.317090][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.324534][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.327903][T16463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.331945][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.345988][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.357993][T16463] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.365977][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.373582][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.381139][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.388615][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.396058][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.403482][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.411016][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.418604][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.426043][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.433670][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.441335][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.448868][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.456391][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.463784][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.471221][T12961] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 235.477199][T16472] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4626'. [ 235.487842][T12961] hid-generic 0000:0000:0000.0064: hidraw0: HID v0.00 Device [syz0] on syz1 [ 235.491115][T11581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.506680][T16463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.590859][T16479] lo speed is unknown, defaulting to 1000 [ 235.615285][T16488] loop5: detected capacity change from 0 to 512 [ 235.649651][T16488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.662584][T16488] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.692817][T16479] lo speed is unknown, defaulting to 1000 [ 235.854333][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.861847][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.869314][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.890163][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.897619][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.905096][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.912559][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.920283][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.927720][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.935178][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.942607][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.950088][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.957499][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.964890][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.972434][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.980047][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.980421][T16516] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4640'. [ 235.987552][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 235.999548][ T8401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.003758][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 236.020225][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 236.027667][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 236.035062][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 236.042498][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 236.049994][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 236.057472][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 236.064868][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 236.072307][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 236.079795][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 236.087329][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 236.094717][T12961] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 236.103570][T12961] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz0] on syz1 [ 236.114454][T16527] loop5: detected capacity change from 0 to 512 [ 236.149136][T16527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.166337][T16527] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.193126][T16523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.193514][T16533] SELinux: Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped). [ 236.210984][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 236.210998][ T29] audit: type=1400 audit(1737186901.870:22243): avc: denied { create } for pid=16532 comm="syz.4.4647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 236.236847][ T29] audit: type=1400 audit(1737186901.890:22244): avc: denied { relabelto } for pid=16532 comm="syz.4.4647" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:xen_device_t:s0" [ 236.264044][ T29] audit: type=1400 audit(1737186901.890:22245): avc: denied { associate } for pid=16532 comm="syz.4.4647" name="ptmx" dev="devtmpfs" ino=92 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:xen_device_t:s0" [ 236.295090][ T29] audit: type=1400 audit(1737186901.970:22246): avc: denied { ioctl } for pid=16532 comm="syz.4.4647" path="socket:[47218]" dev="sockfs" ino=47218 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 236.305962][T16523] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.366307][T16523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.437469][ T8401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.473248][T16551] loop0: detected capacity change from 0 to 512 [ 236.488211][T16549] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4650'. [ 236.509149][T16555] lo speed is unknown, defaulting to 1000 [ 236.538866][T16555] lo speed is unknown, defaulting to 1000 [ 236.546695][T16551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.574419][T16551] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.591144][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.598612][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.606106][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.613677][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.621158][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.628658][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.636142][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.643624][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.644118][ T29] audit: type=1326 audit(1737186902.270:22247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 236.651072][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.674603][ T29] audit: type=1326 audit(1737186902.270:22248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 236.674630][ T29] audit: type=1326 audit(1737186902.270:22249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 236.682119][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.705524][ T29] audit: type=1326 audit(1737186902.270:22250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 236.729173][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.736446][ T29] audit: type=1326 audit(1737186902.270:22251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 236.760026][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.767361][ T29] audit: type=1326 audit(1737186902.270:22252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16564 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 236.790963][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.829472][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.836936][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.844630][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.852094][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.859537][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.867039][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.872775][T16571] loop1: detected capacity change from 0 to 256 [ 236.874617][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.888271][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.895761][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.903272][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.910678][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.918110][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.925501][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.932919][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.940420][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.947978][T12961] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 236.956502][T12961] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz0] on syz1 [ 237.003789][T16579] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4661'. [ 237.016634][T16571] syz.1.4658: attempt to access beyond end of device [ 237.016634][T16571] loop1: rw=0, sector=272, nr_sectors = 4 limit=256 [ 237.035897][T16571] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 237.038715][T11581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.044169][T16571] FAT-fs (loop1): Filesystem has been set read-only [ 237.060600][T16571] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 237.096343][T16583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.105323][T16583] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.115509][T16583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.156404][T16587] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 237.197967][T16593] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4666'. [ 237.249978][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.257429][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.264893][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.272782][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.280219][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.287680][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.295150][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.302711][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.310381][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.317831][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.325274][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.332962][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.340521][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.347947][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.355449][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.362995][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.370418][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.378055][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.385561][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.392978][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.400403][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.407946][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.415418][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.422926][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.430338][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.437789][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.445252][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.452694][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.460400][T12961] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 237.468430][T12961] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz0] on syz1 [ 237.544789][T16626] loop5: detected capacity change from 0 to 8192 [ 237.561525][T16615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.573316][T16615] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.583996][T16615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.747224][T16646] 9pnet_fd: Insufficient options for proto=fd [ 237.764437][T16648] SELinux: syz.4.4690 (16648) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 237.789277][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.796849][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.804250][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.812441][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.819897][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.827463][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.834938][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.842468][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.849947][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.857402][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.864897][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.872427][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.873478][T16654] __nla_validate_parse: 1 callbacks suppressed [ 237.873491][T16654] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4691'. [ 237.879859][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.902497][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.929386][T16659] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4695'. [ 237.942574][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.950068][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.957686][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.965079][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.972559][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.979995][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.987421][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 237.994903][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 238.002392][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 238.009843][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 238.017279][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 238.024761][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 238.024786][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 238.039546][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 238.046988][ T3378] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 238.055745][ T3378] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz0] on syz1 [ 238.114533][T16662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.136868][T16662] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.147081][T16662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.163071][T16668] infiniband sz1: set active [ 238.173102][T16668] infiniband sz1: set active [ 238.209154][ T3378] lo speed is unknown, defaulting to 1000 [ 238.214957][ T1035] lo speed is unknown, defaulting to 1000 [ 238.289888][T16679] loop3: detected capacity change from 0 to 256 [ 238.377488][T16684] syz.3.4702: attempt to access beyond end of device [ 238.377488][T16684] loop3: rw=0, sector=272, nr_sectors = 4 limit=256 [ 238.396328][T16684] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 238.404463][T16684] FAT-fs (loop3): Filesystem has been set read-only [ 238.430222][T16687] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4706'. [ 238.440246][T16684] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 238.453151][T16690] SELinux: syz.0.4705 (16690) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 238.569910][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.577594][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.584999][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.594750][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.602224][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.609694][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.617198][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.624709][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.632157][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.639580][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.647048][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.654426][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.661909][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.669323][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.676994][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.684394][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.691827][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.699364][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.706782][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.714174][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.721679][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.729100][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.736526][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.736628][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.736653][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.736677][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.736739][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.736762][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.736786][ T3378] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 238.759630][ T3378] hid-generic 0000:0000:0000.0069: hidraw0: HID v0.00 Device [syz0] on syz1 [ 238.857043][T16714] loop1: detected capacity change from 0 to 512 [ 238.871478][T16714] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.016721][T16724] SELinux: syz.4.4717 (16724) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 239.059702][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.067321][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.074721][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.082977][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.090468][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.097960][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.105530][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.113066][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.120508][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.127900][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.135319][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.142753][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.150205][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.157596][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.165147][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.172642][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.180107][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.187696][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.195233][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.202889][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.210332][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.217750][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.225123][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.232563][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.239944][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.247418][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.254875][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.262367][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.269780][ T35] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 239.278018][ T35] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 239.326747][T16749] loop4: detected capacity change from 0 to 512 [ 239.341623][T16749] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.454161][T16763] syz.0.4732[16763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.454312][T16763] syz.0.4732[16763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.466205][T16763] syz.0.4732[16763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.495963][T16768] loop0: detected capacity change from 0 to 256 [ 239.583789][T16776] syz.0.4733: attempt to access beyond end of device [ 239.583789][T16776] loop0: rw=0, sector=272, nr_sectors = 4 limit=256 [ 239.587355][T16775] loop5: detected capacity change from 0 to 512 [ 239.609509][T16776] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 239.613972][T16775] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.4736: corrupted in-inode xattr: invalid ea_ino [ 239.617804][T16776] FAT-fs (loop0): Filesystem has been set read-only [ 239.634145][T16775] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.4736: couldn't read orphan inode 15 (err -117) [ 239.652061][T16775] FAULT_INJECTION: forcing a failure. [ 239.652061][T16775] name failslab, interval 1, probability 0, space 0, times 0 [ 239.664769][T16775] CPU: 0 UID: 0 PID: 16775 Comm: syz.5.4736 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 239.670977][T16776] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 239.675528][T16775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.675544][T16775] Call Trace: [ 239.675551][T16775] [ 239.699849][T16775] dump_stack_lvl+0xf2/0x150 [ 239.704478][T16775] dump_stack+0x15/0x1a [ 239.708643][T16775] should_fail_ex+0x223/0x230 [ 239.713305][T16775] should_failslab+0x8f/0xb0 [ 239.717930][T16775] __kmalloc_noprof+0xab/0x3f0 [ 239.722801][T16775] ? process_vm_rw+0x2ca/0x890 [ 239.727622][T16775] ? iovec_from_user+0x17e/0x210 [ 239.732685][T16775] process_vm_rw+0x2ca/0x890 [ 239.737270][T16775] ? kstrtouint_from_user+0xb0/0xe0 [ 239.742526][T16775] ? ksys_write+0x176/0x1b0 [ 239.747015][T16775] __x64_sys_process_vm_writev+0x7a/0x90 [ 239.752638][T16775] x64_sys_call+0x2c48/0x2dc0 [ 239.757316][T16775] do_syscall_64+0xc9/0x1c0 [ 239.761811][T16775] ? clear_bhb_loop+0x55/0xb0 [ 239.766485][T16775] ? clear_bhb_loop+0x55/0xb0 [ 239.771255][T16775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.777136][T16775] RIP: 0033:0x7f09832a5d29 [ 239.781556][T16775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.801164][T16775] RSP: 002b:00007f0981911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 239.809748][T16775] RAX: ffffffffffffffda RBX: 00007f0983495fa0 RCX: 00007f09832a5d29 [ 239.817757][T16775] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 000000000000051a [ 239.825853][T16775] RBP: 00007f0981911090 R08: 000000000000023a R09: 0000000000000000 [ 239.833820][T16775] R10: 0000000020121000 R11: 0000000000000246 R12: 0000000000000001 [ 239.841782][T16775] R13: 0000000000000000 R14: 00007f0983495fa0 R15: 00007ffe47854f78 [ 239.849753][T16775] [ 239.881621][T16790] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 239.896747][T16782] Falling back ldisc for ttyS3. [ 239.939575][T16802] syz.1.4743[16802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.939634][T16802] syz.1.4743[16802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.951626][T16802] syz.1.4743[16802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.978974][T16805] loop1: detected capacity change from 0 to 512 [ 240.007476][T16805] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.088003][T16822] SELinux: syz.1.4748 (16822) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 240.089457][T16820] loop5: detected capacity change from 0 to 2048 [ 240.121737][T16825] FAULT_INJECTION: forcing a failure. [ 240.121737][T16825] name failslab, interval 1, probability 0, space 0, times 0 [ 240.134496][T16825] CPU: 1 UID: 0 PID: 16825 Comm: syz.1.4749 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 240.145376][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.155418][T16825] Call Trace: [ 240.158699][T16825] [ 240.161615][T16825] dump_stack_lvl+0xf2/0x150 [ 240.166216][T16825] dump_stack+0x15/0x1a [ 240.170396][T16825] should_fail_ex+0x223/0x230 [ 240.175060][T16825] ? __pfx_cgroup_show_path+0x10/0x10 [ 240.180462][T16825] ? cgroup_show_path+0x6a/0x240 [ 240.185486][T16825] should_failslab+0x8f/0xb0 [ 240.190151][T16825] __kmalloc_cache_noprof+0x4e/0x320 [ 240.195423][T16825] ? __pfx_cgroup_show_path+0x10/0x10 [ 240.200797][T16825] cgroup_show_path+0x6a/0x240 [ 240.205554][T16825] ? kernfs_sop_show_path+0x99/0xe0 [ 240.210760][T16825] ? __pfx_cgroup_show_path+0x10/0x10 [ 240.216127][T16825] kernfs_sop_show_path+0xa8/0xe0 [ 240.221177][T16825] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 240.227024][T16825] show_path+0x57/0x80 [ 240.231162][T16825] show_mountinfo+0xd9/0x6a0 [ 240.235740][T16825] m_show+0x3b/0x50 [ 240.239542][T16825] traverse+0x155/0x3c0 [ 240.243764][T16825] seq_lseek+0xa8/0x160 [ 240.247916][T16825] __x64_sys_lseek+0xe7/0x160 [ 240.252609][T16825] x64_sys_call+0x2a7c/0x2dc0 [ 240.257314][T16825] do_syscall_64+0xc9/0x1c0 [ 240.261896][T16825] ? clear_bhb_loop+0x55/0xb0 [ 240.266633][T16825] ? clear_bhb_loop+0x55/0xb0 [ 240.271316][T16825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.277273][T16825] RIP: 0033:0x7fccde4d5d29 [ 240.281824][T16825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.301489][T16825] RSP: 002b:00007fccdcb47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 240.309982][T16825] RAX: ffffffffffffffda RBX: 00007fccde6c5fa0 RCX: 00007fccde4d5d29 [ 240.317962][T16825] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 0000000000000003 [ 240.325927][T16825] RBP: 00007fccdcb47090 R08: 0000000000000000 R09: 0000000000000000 [ 240.333888][T16825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.341850][T16825] R13: 0000000000000000 R14: 00007fccde6c5fa0 R15: 00007ffc75aa27a8 [ 240.349816][T16825] [ 240.353604][T16820] loop5: p1 < > p4 [ 240.358003][T16820] loop5: p4 size 8388608 extends beyond EOD, truncated [ 240.395607][T16832] loop0: detected capacity change from 0 to 512 [ 240.402534][T16834] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 240.412164][T16828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.435061][T16828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.447834][T16832] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.504292][T16852] syz.5.4755[16852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.504375][T16852] syz.5.4755[16852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.517888][T16852] syz.5.4755[16852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.549934][T16858] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4759'. [ 240.555314][T16857] loop4: detected capacity change from 0 to 256 [ 240.594694][T16862] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 240.602988][T16862] tipc: Enabled bearer , priority 10 [ 240.625272][T16858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.634198][T16865] FAULT_INJECTION: forcing a failure. [ 240.634198][T16865] name failslab, interval 1, probability 0, space 0, times 0 [ 240.637427][T16858] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.646910][T16865] CPU: 1 UID: 0 PID: 16865 Comm: syz.5.4764 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 240.646954][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.646964][T16865] Call Trace: [ 240.646969][T16865] [ 240.646976][T16865] dump_stack_lvl+0xf2/0x150 [ 240.664288][T16865] dump_stack+0x15/0x1a [ 240.677604][T16865] should_fail_ex+0x223/0x230 [ 240.677631][T16865] should_failslab+0x8f/0xb0 [ 240.683925][T16867] syz.4.4761: attempt to access beyond end of device [ 240.683925][T16867] loop4: rw=0, sector=272, nr_sectors = 4 limit=256 [ 240.685185][T16865] kmem_cache_alloc_node_noprof+0x59/0x320 [ 240.690136][T16867] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 240.694116][T16865] ? __alloc_skb+0x10b/0x310 [ 240.698762][T16867] FAT-fs (loop4): Filesystem has been set read-only [ 240.711802][T16865] __alloc_skb+0x10b/0x310 [ 240.711829][T16865] ? audit_log_start+0x34c/0x6b0 [ 240.719608][T16867] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 240.725653][T16865] audit_log_start+0x368/0x6b0 [ 240.759175][T16865] audit_seccomp+0x4b/0x130 [ 240.763678][T16865] __seccomp_filter+0x6fa/0x1180 [ 240.768617][T16865] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 240.774271][T16865] ? vfs_write+0x596/0x920 [ 240.778695][T16865] __secure_computing+0x9f/0x1c0 [ 240.783653][T16865] syscall_trace_enter+0xd1/0x1f0 [ 240.788689][T16865] ? fpregs_assert_state_consistent+0x83/0xa0 [ 240.794803][T16865] do_syscall_64+0xaa/0x1c0 [ 240.799315][T16865] ? clear_bhb_loop+0x55/0xb0 [ 240.804018][T16865] ? clear_bhb_loop+0x55/0xb0 [ 240.808709][T16865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.814592][T16865] RIP: 0033:0x7f09832a5d29 [ 240.819023][T16865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.838632][T16865] RSP: 002b:00007f0981911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 240.847052][T16865] RAX: ffffffffffffffda RBX: 00007f0983495fa0 RCX: 00007f09832a5d29 [ 240.855012][T16865] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 0000000000000003 [ 240.863025][T16865] RBP: 00007f0981911090 R08: 0000000000000000 R09: 0000000000000000 [ 240.870994][T16865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.878954][T16865] R13: 0000000000000000 R14: 00007f0983495fa0 R15: 00007ffe47854f78 [ 240.886964][T16865] [ 240.892543][T16858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.945786][T16875] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 240.946814][T16873] loop0: detected capacity change from 0 to 1024 [ 240.987710][T16879] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4768'. [ 240.999630][T16879] infiniband sz1: set down [ 241.120792][ T3373] lo speed is unknown, defaulting to 1000 [ 241.133510][T16887] infiniband sz1: set active [ 241.143451][T16887] infiniband sz1: set active [ 241.166366][T16887] infiniband sz1: set active [ 241.192485][T16887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.195530][T16908] syz.5.4774[16908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.200852][T16887] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.228511][T16908] syz.5.4774[16908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.228567][T16908] syz.5.4774[16908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.253026][T16887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.268750][ T3373] lo speed is unknown, defaulting to 1000 [ 241.269954][T16912] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4777'. [ 241.274508][ T1035] lo speed is unknown, defaulting to 1000 [ 241.289255][T16899] lo speed is unknown, defaulting to 1000 [ 241.297267][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.304724][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.312376][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.329833][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.337745][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.345242][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.352648][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.360090][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.367701][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.375198][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.381280][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 241.381324][ T29] audit: type=1107 audit(1737186907.060:22518): pid=16913 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 241.382604][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.409764][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.417176][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.424649][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.435080][ T29] audit: type=1326 audit(1737186907.110:22519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.1.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 241.446798][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.465043][ T29] audit: type=1326 audit(1737186907.150:22520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.1.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 241.471164][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.471188][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.494789][ T29] audit: type=1326 audit(1737186907.150:22521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.1.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 241.502517][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.509766][ T29] audit: type=1326 audit(1737186907.150:22522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.1.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 241.533320][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.540685][ T29] audit: type=1326 audit(1737186907.150:22523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.1.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 241.540709][ T29] audit: type=1326 audit(1737186907.150:22524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.1.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 241.540730][ T29] audit: type=1326 audit(1737186907.150:22525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.1.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 241.564313][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.571663][ T29] audit: type=1326 audit(1737186907.150:22526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.1.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 241.595357][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.618872][ T29] audit: type=1326 audit(1737186907.150:22527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.1.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 241.704354][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.711772][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.719212][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.726620][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.734086][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.741487][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.748887][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.756299][T12853] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 241.763710][ T35] tipc: Node number set to 3144705770 [ 241.769663][T12853] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 241.787354][T16901] lo speed is unknown, defaulting to 1000 [ 241.805667][T16921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.813810][T16921] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.824563][T16921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.827151][T16932] loop3: detected capacity change from 0 to 512 [ 241.849932][T16928] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 241.857499][ T1035] lo speed is unknown, defaulting to 1000 [ 241.882008][T16932] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.891763][T16942] loop4: detected capacity change from 0 to 512 [ 241.893463][T16935] tipc: Enabling of bearer rejected, already enabled [ 241.938522][T16942] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.954252][T16948] loop0: detected capacity change from 0 to 512 [ 241.996604][T16948] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.004172][T16952] syz.3.4790[16952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.038863][T16954] loop3: detected capacity change from 0 to 256 [ 242.078554][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.085991][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.093627][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.101166][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.108936][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.117301][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.124958][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.132667][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.140249][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.144562][T16960] syz.3.4791: attempt to access beyond end of device [ 242.144562][T16960] loop3: rw=0, sector=272, nr_sectors = 4 limit=256 [ 242.147758][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.163035][T16960] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 242.168779][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.176689][T16960] FAT-fs (loop3): Filesystem has been set read-only [ 242.190900][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.194728][T16960] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 242.198378][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.198404][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.221743][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.229238][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.236662][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.244251][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.251686][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.259278][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.266699][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.271256][T16969] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4795'. [ 242.274376][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.290685][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.298157][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.305580][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.312962][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.320337][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.327829][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.335251][T16901] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 242.343296][T16901] hid-generic 0000:0000:0000.006C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 242.383153][T16962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.392283][T16962] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.405384][T16962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.464206][T16990] FAULT_INJECTION: forcing a failure. [ 242.464206][T16990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.477341][T16990] CPU: 0 UID: 0 PID: 16990 Comm: syz.1.4802 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 242.480320][T16996] loop4: detected capacity change from 0 to 512 [ 242.488202][T16990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 242.488217][T16990] Call Trace: [ 242.507867][T16990] [ 242.510862][T16990] dump_stack_lvl+0xf2/0x150 [ 242.515595][T16990] dump_stack+0x15/0x1a [ 242.519760][T16990] should_fail_ex+0x223/0x230 [ 242.524445][T16990] should_fail+0xb/0x10 [ 242.528625][T16990] should_fail_usercopy+0x1a/0x20 [ 242.533644][T16990] _copy_from_user+0x1e/0xb0 [ 242.538309][T16990] copy_msghdr_from_user+0x54/0x2a0 [ 242.543556][T16990] ? __fget_files+0x17c/0x1c0 [ 242.548283][T16990] __sys_recvmsg+0x140/0x260 [ 242.552873][T16990] __x64_sys_recvmsg+0x46/0x50 [ 242.557701][T16990] x64_sys_call+0xc64/0x2dc0 [ 242.562354][T16990] do_syscall_64+0xc9/0x1c0 [ 242.566847][T16990] ? clear_bhb_loop+0x55/0xb0 [ 242.571514][T16990] ? clear_bhb_loop+0x55/0xb0 [ 242.576271][T16990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.582225][T16990] RIP: 0033:0x7fccde4d5d29 [ 242.586631][T16990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.606275][T16990] RSP: 002b:00007fccdcb47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 242.614680][T16990] RAX: ffffffffffffffda RBX: 00007fccde6c5fa0 RCX: 00007fccde4d5d29 [ 242.622643][T16990] RDX: 00000000000040fd RSI: 0000000020000b00 RDI: 0000000000000003 [ 242.630875][T16990] RBP: 00007fccdcb47090 R08: 0000000000000000 R09: 0000000000000000 [ 242.638904][T16990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.646879][T16990] R13: 0000000000000000 R14: 00007fccde6c5fa0 R15: 00007ffc75aa27a8 [ 242.654925][T16990] [ 242.680107][T16996] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.737542][T17005] SELinux: syz.0.4807 (17005) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 242.741985][T17007] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 242.796701][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.804202][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.811630][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.819460][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.826878][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.834359][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.841951][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.849420][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.856840][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.864349][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.871922][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.879374][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.886786][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.894234][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.901888][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.902118][T17030] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4814'. [ 242.909339][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.925893][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.933824][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.941351][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.949037][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.956565][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.963943][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.971487][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.979076][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.986508][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 242.993895][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 243.001317][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 243.008765][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 243.016373][T16901] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 243.024521][T16901] hid-generic 0000:0000:0000.006D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 243.136564][T17032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.144876][T17032] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.160313][T17032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.246713][T17046] tipc: Enabling of bearer rejected, already enabled [ 243.255127][T17051] loop4: detected capacity change from 0 to 512 [ 243.295099][T17055] loop3: detected capacity change from 0 to 2048 [ 243.295449][T17061] loop5: detected capacity change from 0 to 256 [ 243.316718][T17055] loop3: p1 < > p4 [ 243.318758][T17051] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.321651][T17055] loop3: p4 size 8388608 extends beyond EOD, truncated [ 243.352659][T17061] syz.5.4825: attempt to access beyond end of device [ 243.352659][T17061] loop5: rw=0, sector=272, nr_sectors = 4 limit=256 [ 243.393036][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.400531][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.402463][T17061] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 243.408045][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.416051][T17061] FAT-fs (loop5): Filesystem has been set read-only [ 243.431955][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.439468][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.446890][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.454362][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.461861][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.465570][T17061] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 243.469255][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.469293][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.469318][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.469337][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.469356][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.469376][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.472056][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.529610][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.537025][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.544405][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.551786][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.559199][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.566603][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.573978][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.581383][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.588759][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.596123][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.603537][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.611007][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.618388][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.625776][T16901] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 243.633898][T16901] hid-generic 0000:0000:0000.006E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 243.677148][T17077] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4830'. [ 243.727602][T17077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.736089][T17077] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.747647][T17077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.765011][T17082] tipc: Started in network mode [ 243.770013][T17082] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 243.779016][T17082] tipc: Enabling of bearer rejected, failed to enable media [ 243.799858][T17086] SELinux: syz.3.4835 (17086) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 243.863288][T17098] loop1: detected capacity change from 0 to 2048 [ 243.926877][T17098] loop1: p1 < > p4 [ 243.931058][T17098] loop1: p4 size 8388608 extends beyond EOD, truncated [ 243.979159][T17113] loop0: detected capacity change from 0 to 8192 [ 243.985782][T17117] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4846'. [ 243.997746][T17117] infiniband sz1: set down [ 244.061870][ T1035] lo speed is unknown, defaulting to 1000 [ 244.062336][T17120] infiniband sz1: set active [ 244.072749][T17120] infiniband sz1: set active [ 244.077593][T17120] infiniband sz1: set active [ 244.101561][T17120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.114483][T17120] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.128095][T17120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.143696][ T3609] lo speed is unknown, defaulting to 1000 [ 244.149573][ T3376] lo speed is unknown, defaulting to 1000 [ 244.149599][T12961] lo speed is unknown, defaulting to 1000 [ 244.149616][T12853] lo speed is unknown, defaulting to 1000 [ 244.199764][T17126] tipc: Enabling of bearer rejected, already enabled [ 244.291854][T17130] FAULT_INJECTION: forcing a failure. [ 244.291854][T17130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.305134][T17130] CPU: 1 UID: 0 PID: 17130 Comm: syz.5.4850 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 244.315907][T17130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 244.326059][T17130] Call Trace: [ 244.329345][T17130] [ 244.332279][T17130] dump_stack_lvl+0xf2/0x150 [ 244.336889][T17130] dump_stack+0x15/0x1a [ 244.341171][T17130] should_fail_ex+0x223/0x230 [ 244.345873][T17130] should_fail+0xb/0x10 [ 244.350037][T17130] should_fail_usercopy+0x1a/0x20 [ 244.355073][T17130] _copy_from_user+0x1e/0xb0 [ 244.359669][T17130] __io_register_rsrc_update+0x569/0xa30 [ 244.365446][T17130] io_register_files_update+0xd2/0x100 [ 244.370913][T17130] __se_sys_io_uring_register+0xaf0/0x21f0 [ 244.376724][T17130] ? __rcu_read_unlock+0x4e/0x70 [ 244.381767][T17130] ? bpf_trace_run2+0x123/0x1d0 [ 244.386647][T17130] ? __bpf_trace_sys_enter+0x10/0x30 [ 244.391946][T17130] ? trace_sys_enter+0xcd/0x110 [ 244.396817][T17130] __x64_sys_io_uring_register+0x55/0x70 [ 244.402465][T17130] x64_sys_call+0x2c52/0x2dc0 [ 244.407211][T17130] do_syscall_64+0xc9/0x1c0 [ 244.411730][T17130] ? clear_bhb_loop+0x55/0xb0 [ 244.416469][T17130] ? clear_bhb_loop+0x55/0xb0 [ 244.421199][T17130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.427201][T17130] RIP: 0033:0x7f09832a5d29 [ 244.431629][T17130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.451276][T17130] RSP: 002b:00007f0981911038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 244.459784][T17130] RAX: ffffffffffffffda RBX: 00007f0983495fa0 RCX: 00007f09832a5d29 [ 244.467773][T17130] RDX: 0000000020001480 RSI: 0000000000000006 RDI: 0000000000000005 [ 244.475755][T17130] RBP: 00007f0981911090 R08: 0000000000000000 R09: 0000000000000000 [ 244.483836][T17130] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 244.491826][T17130] R13: 0000000000000000 R14: 00007f0983495fa0 R15: 00007ffe47854f78 [ 244.499872][T17130] [ 244.515265][T17134] SELinux: syz.4.4852 (17134) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 244.672091][T17144] loop5: detected capacity change from 0 to 512 [ 244.685083][T17147] loop1: detected capacity change from 0 to 1024 [ 244.716762][T17144] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.723541][T17155] tipc: Enabling of bearer rejected, already enabled [ 244.790779][T17161] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4859'. [ 244.868415][T17161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.878393][T17161] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.888307][T17161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.905562][T17164] veth1_to_bridge: entered allmulticast mode [ 244.953173][T17179] FAULT_INJECTION: forcing a failure. [ 244.953173][T17179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.966429][T17179] CPU: 1 UID: 0 PID: 17179 Comm: syz.3.4869 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 244.977194][T17179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 244.987288][T17179] Call Trace: [ 244.990634][T17179] [ 244.993554][T17179] dump_stack_lvl+0xf2/0x150 [ 244.998160][T17179] dump_stack+0x15/0x1a [ 245.002321][T17179] should_fail_ex+0x223/0x230 [ 245.007002][T17179] should_fail+0xb/0x10 [ 245.011188][T17179] should_fail_usercopy+0x1a/0x20 [ 245.016305][T17179] _copy_from_user+0x1e/0xb0 [ 245.020964][T17179] move_addr_to_kernel+0x82/0x120 [ 245.026006][T17179] __sys_sendto+0x12e/0x230 [ 245.030523][T17179] __x64_sys_sendto+0x78/0x90 [ 245.035197][T17179] x64_sys_call+0x29fa/0x2dc0 [ 245.039868][T17179] do_syscall_64+0xc9/0x1c0 [ 245.044434][T17179] ? clear_bhb_loop+0x55/0xb0 [ 245.049104][T17179] ? clear_bhb_loop+0x55/0xb0 [ 245.053782][T17179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.059680][T17179] RIP: 0033:0x7f8dd9d85d29 [ 245.064099][T17179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.083701][T17179] RSP: 002b:00007f8dd83f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 245.092108][T17179] RAX: ffffffffffffffda RBX: 00007f8dd9f75fa0 RCX: 00007f8dd9d85d29 [ 245.100114][T17179] RDX: 0000000000034000 RSI: 0000000020000180 RDI: 0000000000000003 [ 245.108137][T17179] RBP: 00007f8dd83f1090 R08: 0000000020000480 R09: 000000000000001c [ 245.116192][T17179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.124249][T17179] R13: 0000000000000000 R14: 00007f8dd9f75fa0 R15: 00007fff03f5f898 [ 245.132220][T17179] [ 245.239437][T17191] loop4: detected capacity change from 0 to 1024 [ 245.303810][T17196] loop4: detected capacity change from 0 to 512 [ 245.318938][T17196] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.337455][T17200] tipc: Enabling of bearer rejected, already enabled [ 245.363388][T17203] loop5: detected capacity change from 0 to 512 [ 245.379844][T17203] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.418345][T17208] loop4: detected capacity change from 0 to 256 [ 245.462948][T17212] loop5: detected capacity change from 0 to 2048 [ 245.488085][T17210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.496008][T17210] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.503260][T17212] loop5: p1 < > p4 [ 245.508612][T17210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.509029][T17212] loop5: p4 size 8388608 extends beyond EOD, truncated [ 245.567528][T17216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4880'. [ 245.663620][T17226] bpf_get_probe_write_proto: 14 callbacks suppressed [ 245.663631][T17226] syz.1.4883[17226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.670453][T17226] syz.1.4883[17226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.682246][T17226] syz.1.4883[17226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.718452][T17230] tipc: Enabling of bearer rejected, failed to enable media [ 245.720083][T17229] loop0: detected capacity change from 0 to 1024 [ 245.753868][T17232] loop1: detected capacity change from 0 to 512 [ 245.779680][T17232] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.821890][T17243] loop0: detected capacity change from 0 to 512 [ 245.848391][T17243] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.952532][T17249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.960872][T17249] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.970456][T17249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.989066][T17251] af_packet: tpacket_rcv: packet too big, clamped from 3959 to 3958. macoff=82 [ 246.060533][T17259] SELinux: syz.3.4894 (17259) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 246.397411][T17269] tipc: Enabling of bearer rejected, already enabled [ 246.425175][T17273] syz.5.4897[17273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.425293][T17273] syz.5.4897[17273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.436941][T17273] syz.5.4897[17273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.449221][T17278] loop4: detected capacity change from 0 to 512 [ 246.479060][T17278] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.492112][T17282] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 246.634599][T17285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.647241][T17285] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.660377][T17285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.720923][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 246.720936][ T29] audit: type=1400 audit(1737186912.400:22700): avc: denied { append } for pid=17291 comm="syz.5.4904" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.729295][T17293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.759454][T17292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.761582][T17293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.768309][T17292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.822926][T17300] loop5: detected capacity change from 0 to 512 [ 246.834713][ T29] audit: type=1400 audit(1737186912.510:22701): avc: denied { getopt } for pid=17301 comm="syz.1.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 246.861410][ T29] audit: type=1400 audit(1737186912.540:22702): avc: denied { setopt } for pid=17301 comm="syz.1.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 246.884872][T17300] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.911653][ T29] audit: type=1400 audit(1737186912.590:22703): avc: denied { write } for pid=17301 comm="syz.1.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 246.964027][ T29] audit: type=1326 audit(1737186912.640:22704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.3.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd9d85d29 code=0x7ffc0000 [ 246.987724][ T29] audit: type=1326 audit(1737186912.640:22705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.3.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8dd9d85d29 code=0x7ffc0000 [ 247.011493][ T29] audit: type=1326 audit(1737186912.640:22706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.3.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd9d85d29 code=0x7ffc0000 [ 247.035312][ T29] audit: type=1326 audit(1737186912.640:22707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.3.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8dd9d85d29 code=0x7ffc0000 [ 247.059092][ T29] audit: type=1326 audit(1737186912.640:22708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.3.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd9d85d29 code=0x7ffc0000 [ 247.082667][ T29] audit: type=1326 audit(1737186912.640:22709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.3.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8dd9d85d29 code=0x7ffc0000 [ 247.131975][T17315] loop5: detected capacity change from 0 to 2048 [ 247.173628][T17319] syz.0.4910[17319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.173680][T17319] syz.0.4910[17319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.185288][T17319] syz.0.4910[17319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.197038][T17315] loop5: p1 < > p4 [ 247.212945][T17315] loop5: p4 size 8388608 extends beyond EOD, truncated [ 247.250168][T17317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.259029][T17317] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.267507][T17322] loop0: detected capacity change from 0 to 1024 [ 247.274283][T17317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.552641][T17348] loop5: detected capacity change from 0 to 512 [ 247.557165][T17346] loop4: detected capacity change from 0 to 2048 [ 247.578185][T17348] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.589154][T17346] loop4: p1 < > p4 [ 247.593492][T17346] loop4: p4 size 8388608 extends beyond EOD, truncated [ 247.699212][T17356] infiniband sz1: set down [ 247.728365][T17354] loop5: detected capacity change from 0 to 2048 [ 247.767594][T17354] loop5: p1 < > p4 [ 247.776915][T17354] loop5: p4 size 8388608 extends beyond EOD, truncated [ 247.805997][ T9] lo speed is unknown, defaulting to 1000 [ 247.813846][T17357] infiniband sz1: set active [ 247.828471][T17357] infiniband sz1: set active [ 247.844518][T17357] infiniband sz1: set active [ 247.856352][T17357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.864974][T17357] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.874987][T17357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.883513][T17360] loop4: detected capacity change from 0 to 1024 [ 247.896962][ T3374] lo speed is unknown, defaulting to 1000 [ 247.902797][ T9] lo speed is unknown, defaulting to 1000 [ 247.916275][ T8] lo speed is unknown, defaulting to 1000 [ 247.923564][ T1035] lo speed is unknown, defaulting to 1000 [ 247.951039][T17365] loop5: detected capacity change from 0 to 1024 [ 247.958092][T17365] EXT4-fs: Ignoring removed orlov option [ 247.963923][T17365] EXT4-fs: Ignoring removed bh option [ 247.969371][T17365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.046410][T17365] loop5: detected capacity change from 1024 to 64 [ 248.114620][T17380] lo speed is unknown, defaulting to 1000 [ 248.152750][T17380] lo speed is unknown, defaulting to 1000 [ 248.258575][T17386] loop0: detected capacity change from 0 to 512 [ 248.274763][ T8401] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 248.304229][ T8401] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 248.310163][T17386] EXT4-fs (loop0): 1 orphan inode deleted [ 248.318172][ T8401] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 248.337106][ T8401] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 248.337152][ T7978] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:14: Failed to release dquot type 1 [ 248.350655][ T8401] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 248.364913][T17392] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 248.375615][ T8401] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 248.396765][T17386] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.398676][ T8401] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 248.422482][ T8401] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 248.456512][ T8401] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 248.485914][ T8401] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 248.495464][T17386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4936'. [ 248.522714][T17392] SELinux: policydb table sizes (0,538976256) do not match mine (5,6) [ 248.531490][T17392] SELinux: failed to load policy [ 248.553570][T17373] kmmpd-loop5: attempt to access beyond end of device [ 248.553570][T17373] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 248.567206][T17373] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 248.599487][T17386] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 248.613418][T12853] IPVS: starting estimator thread 0... [ 248.708079][T17400] loop3: detected capacity change from 0 to 8192 [ 248.736778][T17398] IPVS: using max 2880 ests per chain, 144000 per kthread [ 248.852157][T17404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.863090][T17404] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.881098][T17404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.900785][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 248.908376][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 248.915943][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 248.956890][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 248.964341][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 248.971829][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 248.979382][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 248.986806][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 248.994220][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.001641][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.009069][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.016493][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.023901][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.031419][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.046286][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.053794][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.061236][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.068740][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.076227][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.083665][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.091144][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.098812][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.106310][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.113816][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.121266][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.128781][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.136301][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.143711][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.151233][T12853] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 249.156153][T17428] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4950'. [ 249.176020][T12853] hid-generic 0000:0000:0000.006F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 249.200279][ T7993] bridge_slave_1: left allmulticast mode [ 249.205953][ T7993] bridge_slave_1: left promiscuous mode [ 249.211655][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.219985][ T7993] bridge_slave_0: left allmulticast mode [ 249.225658][ T7993] bridge_slave_0: left promiscuous mode [ 249.231357][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.287558][T12853] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 249.292837][T17438] loop1: detected capacity change from 0 to 512 [ 249.345317][T17438] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.459957][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.467492][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.474912][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.487084][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.494564][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.501997][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.509405][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.516822][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.524364][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.531806][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.539309][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.546775][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.554156][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.561697][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.572338][ T7993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.593148][ T7993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.619864][ T7993] bond0 (unregistering): Released all slaves [ 249.634700][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.642278][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.649748][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.657177][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.664721][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.672250][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.679685][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.687106][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.694579][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.702106][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.709523][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.716999][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.724440][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.731930][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.739403][T12853] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 249.748922][T12853] hid-generic 0000:0000:0000.0070: hidraw0: HID v0.00 Device [syz0] on syz1 [ 249.771803][T17405] lo speed is unknown, defaulting to 1000 [ 249.785585][T17451] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 249.813342][T17405] lo speed is unknown, defaulting to 1000 [ 249.819582][T17454] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4958'. [ 249.839079][ T7993] tipc: Disabling bearer [ 249.844479][ T7993] tipc: Left network mode [ 249.929251][T17463] loop3: detected capacity change from 0 to 8192 [ 249.930890][T17466] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4963'. [ 249.935754][T17461] loop0: detected capacity change from 0 to 256 [ 249.993607][T17454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.002227][T17454] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.013115][T17454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.013491][T17467] syz.0.4962: attempt to access beyond end of device [ 250.013491][T17467] loop0: rw=0, sector=272, nr_sectors = 4 limit=256 [ 250.045355][T17467] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 250.053645][T17467] FAT-fs (loop0): Filesystem has been set read-only [ 250.066330][T17467] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 250.074938][ T7993] hsr_slave_0: left promiscuous mode [ 250.081501][ T7993] hsr_slave_1: left promiscuous mode [ 250.112813][ T7993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.125508][ T7993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.169062][T17478] loop1: detected capacity change from 0 to 256 [ 250.181108][ T7993] team0 (unregistering): Port device team_slave_1 removed [ 250.200591][ T7993] team0 (unregistering): Port device team_slave_0 removed [ 250.248691][T17482] loop4: detected capacity change from 0 to 1024 [ 250.252716][T17483] syz.1.4966: attempt to access beyond end of device [ 250.252716][T17483] loop1: rw=0, sector=272, nr_sectors = 4 limit=256 [ 250.255593][T17482] EXT4-fs: Ignoring removed i_version option [ 250.275158][T17482] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 250.285872][T17483] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 250.294016][T17483] FAT-fs (loop1): Filesystem has been set read-only [ 250.301495][T17483] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 250.304682][T17405] chnl_net:caif_netlink_parms(): no params data found [ 250.310418][T17482] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.4968: Failed to acquire dquot type 0 [ 250.334733][T17482] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 250.349476][T17482] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.4968: corrupted inode contents [ 250.362022][T17482] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #13: comm syz.4.4968: mark_inode_dirty error [ 250.376596][T17482] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.4968: corrupted inode contents [ 250.389137][T17482] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.4968: mark_inode_dirty error [ 250.406152][T17482] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.4968: corrupted inode contents [ 250.418449][T17482] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 250.431432][T17482] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.4968: corrupted inode contents [ 250.443584][T17482] EXT4-fs error (device loop4): ext4_truncate:4240: inode #13: comm syz.4.4968: mark_inode_dirty error [ 250.454926][T17482] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 250.455261][T17405] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.465792][T17482] EXT4-fs (loop4): 1 truncate cleaned up [ 250.471047][T17405] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.477052][T17482] EXT4-fs mount: 54 callbacks suppressed [ 250.477064][T17482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.489517][T17405] bridge_slave_0: entered allmulticast mode [ 250.508961][T17405] bridge_slave_0: entered promiscuous mode [ 250.515848][T17482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.516865][T17405] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.532075][T17405] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.539273][T17405] bridge_slave_1: entered allmulticast mode [ 250.546081][T17405] bridge_slave_1: entered promiscuous mode [ 250.567145][T17405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.580072][T17405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.604716][T17405] team0: Port device team_slave_0 added [ 250.611710][T17405] team0: Port device team_slave_1 added [ 250.631970][T17405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.639040][T17405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.665053][T17405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.676962][T17405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.683940][T17405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.709970][T17405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.763629][T17405] hsr_slave_0: entered promiscuous mode [ 250.774229][T17405] hsr_slave_1: entered promiscuous mode [ 250.782874][T17405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.792494][T17492] syz.0.4969[17492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.792825][T17492] syz.0.4969[17492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.806750][T17405] Cannot create hsr debugfs directory [ 250.838531][T17492] syz.0.4969[17492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.881790][T17495] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 250.941535][T17405] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 250.951318][T17405] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 250.963149][T17405] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 250.972302][T17405] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 251.010829][T17405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.032616][T17405] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.051874][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.059049][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.067317][T17507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4974'. [ 251.095066][T17513] syz.0.4975[17513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.095252][T17513] syz.0.4975[17513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.096401][T17507] infiniband sz1: set down [ 251.108775][T17513] syz.0.4975[17513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.121414][T17512] SELinux: syz.4.4976 (17512) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 251.202672][T17519] loop3: detected capacity change from 0 to 512 [ 251.229815][T17519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.246319][T17519] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.293000][T17405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.303554][T17405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.317900][ T35] lo speed is unknown, defaulting to 1000 [ 251.324322][T17515] infiniband sz1: set active [ 251.329322][T17515] infiniband sz1: set active [ 251.332610][T17529] loop0: detected capacity change from 0 to 1024 [ 251.334116][T17515] infiniband sz1: set active [ 251.340949][T17529] ext4: Unknown parameter 'smackfsdef' [ 251.353484][T17515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.364019][T17515] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.374359][T17515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.393226][T17527] lo speed is unknown, defaulting to 1000 [ 251.399744][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.406962][ T7993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.425029][ T35] lo speed is unknown, defaulting to 1000 [ 251.430937][T12961] lo speed is unknown, defaulting to 1000 [ 251.436797][T16901] lo speed is unknown, defaulting to 1000 [ 251.440895][T11784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.442606][ T3358] lo speed is unknown, defaulting to 1000 [ 251.474842][T17532] syz.1.4981[17532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.474904][T17532] syz.1.4981[17532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.481180][T17527] lo speed is unknown, defaulting to 1000 [ 251.500898][T17532] syz.1.4981[17532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.523149][T17536] loop3: detected capacity change from 0 to 2048 [ 251.535125][T17405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.588230][T17536] loop3: p1 < > p4 [ 251.592782][T17536] loop3: p4 size 8388608 extends beyond EOD, truncated [ 251.634953][T17552] syz.1.4985[17552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.649765][T17555] SELinux: syz.3.4986 (17555) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 251.719026][T17405] veth0_vlan: entered promiscuous mode [ 251.726631][T17405] veth1_vlan: entered promiscuous mode [ 251.738569][T17405] veth0_macvtap: entered promiscuous mode [ 251.745945][T17405] veth1_macvtap: entered promiscuous mode [ 251.755894][T17405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.766505][T17405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.777142][T17405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.785263][T17405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.795779][T17405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.806318][T17405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.830817][T17405] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.839596][T17405] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.848458][T17405] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.857274][T17405] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.880826][T17570] lo speed is unknown, defaulting to 1000 [ 251.902674][T17575] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4990'. [ 251.960086][T17575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.969197][T17575] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.981099][T17575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.000908][T17570] lo speed is unknown, defaulting to 1000 [ 252.035038][T17581] loop0: detected capacity change from 0 to 512 [ 252.042710][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.050298][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.057909][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.068756][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.076395][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.083798][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.091356][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.098906][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.100147][T17581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.106367][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.106394][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.106444][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.106463][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.106483][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.155919][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.164168][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 252.164234][ T29] audit: type=1107 audit(1737186917.850:22953): pid=17578 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 252.185638][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.193096][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.200735][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.205557][T17581] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.208271][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.226257][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.233657][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.241603][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.246270][ T29] audit: type=1400 audit(1737186917.890:22954): avc: denied { append } for pid=17586 comm="syz.1.4993" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 252.249009][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.249031][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.249050][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.249071][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.302316][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.309736][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.317201][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.324591][ T1035] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 252.382913][ T1035] hid-generic 0000:0000:0000.0071: hidraw0: HID v0.00 Device [syz0] on syz1 [ 252.426543][T17599] SELinux: syz.4.4997 (17599) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 252.447484][T17597] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 252.455683][T17597] tipc: Enabled bearer , priority 10 [ 252.490411][T17606] loop4: detected capacity change from 0 to 512 [ 252.600351][T17606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.602537][T11581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.632375][T17606] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.657652][ T29] audit: type=1400 audit(1737186918.330:22955): avc: denied { create } for pid=17609 comm="syz.6.5002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 252.677742][ T29] audit: type=1400 audit(1737186918.350:22956): avc: denied { sys_admin } for pid=17609 comm="syz.6.5002" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 252.780061][T17612] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 252.805281][ T29] audit: type=1400 audit(1737186918.480:22957): avc: denied { read } for pid=17613 comm="syz.6.5003" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.897626][T10959] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.954512][T17621] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5006'. [ 252.999141][T17624] loop4: detected capacity change from 0 to 512 [ 253.045734][T17633] loop3: detected capacity change from 0 to 512 [ 253.055328][T17624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.068542][T17624] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.121127][ T29] audit: type=1107 audit(1737186918.800:22958): pid=17635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 253.152237][T17641] SELinux: syz.1.5010 (17641) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 253.202964][T17633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.218045][T17633] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.244695][T17644] loop6: detected capacity change from 0 to 8192 [ 253.253610][T17646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5012'. [ 253.262804][T17646] bridge_slave_1: left allmulticast mode [ 253.268580][T17646] bridge_slave_1: left promiscuous mode [ 253.274256][T17646] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.292824][T17646] bridge_slave_0: left allmulticast mode [ 253.298553][T17646] bridge_slave_0: left promiscuous mode [ 253.304217][T17646] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.307540][T10959] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.320893][ T29] audit: type=1326 audit(1737186919.000:22959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.1.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 253.344630][ T29] audit: type=1326 audit(1737186919.000:22960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.1.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 253.368211][ T29] audit: type=1326 audit(1737186919.000:22961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.1.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 253.392043][ T29] audit: type=1326 audit(1737186919.000:22962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.1.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccde4d5d29 code=0x7ffc0000 [ 253.432854][T11784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.456275][T12853] tipc: Node number set to 949750745 [ 253.461562][T17656] loop4: detected capacity change from 0 to 512 [ 253.487281][T17656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.500018][T17656] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.538828][T17663] loop3: detected capacity change from 0 to 8192 [ 253.561860][T17663] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 253.593415][T17665] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5018'. [ 253.644858][T17668] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5019'. [ 253.668837][T17668] infiniband sz1: set down [ 253.675051][T10959] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.775379][T12853] lo speed is unknown, defaulting to 1000 [ 253.781574][T12853] lo speed is unknown, defaulting to 1000 [ 253.788052][T17671] infiniband sz1: set active [ 253.792910][T17671] infiniband sz1: set active [ 253.797833][T17671] infiniband sz1: set active [ 253.808221][T17671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.816806][T17671] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.825815][T17671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.841637][T12853] lo speed is unknown, defaulting to 1000 [ 253.847577][ T3358] lo speed is unknown, defaulting to 1000 [ 253.853325][T12961] lo speed is unknown, defaulting to 1000 [ 253.859730][T12853] lo speed is unknown, defaulting to 1000 [ 253.945990][T17679] loop4: detected capacity change from 0 to 512 [ 253.980961][T17679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.990976][T17675] loop0: detected capacity change from 0 to 8192 [ 253.998678][T17684] SELinux: syz.3.5022 (17684) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 254.000340][T17679] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.064637][T17685] loop1: detected capacity change from 0 to 2048 [ 254.119966][T17685] loop1: p1 < > p4 [ 254.126333][T17685] loop1: p4 size 8388608 extends beyond EOD, truncated [ 254.157773][T10959] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.240859][T17693] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5029'. [ 254.340657][T17702] loop6: detected capacity change from 0 to 2048 [ 254.347941][T17706] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5035'. [ 254.359472][T17706] infiniband sz1: set down [ 254.396849][T17702] loop6: p1 < > p4 [ 254.403539][T17702] loop6: p4 size 8388608 extends beyond EOD, truncated [ 254.416506][ T3358] lo speed is unknown, defaulting to 1000 [ 254.422920][T17708] infiniband sz1: set active [ 254.427844][T17708] infiniband sz1: set active [ 254.438656][T17708] infiniband sz1: set active [ 254.461994][T17708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.483705][T17708] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.504717][T17708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.522670][T12853] lo speed is unknown, defaulting to 1000 [ 254.528869][T12853] lo speed is unknown, defaulting to 1000 [ 254.534967][T12853] lo speed is unknown, defaulting to 1000 [ 254.541260][T12853] lo speed is unknown, defaulting to 1000 [ 254.613635][T17717] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5038'. [ 254.654885][T17717] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.662067][T17717] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.703665][T17717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.713965][T17717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.745383][T17717] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.754526][T17717] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.763593][T17717] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.772517][T17717] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.805203][T17722] loop0: detected capacity change from 0 to 512 [ 254.819569][T17722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.820188][T17719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.832225][T17722] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.841089][T17719] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.861201][T17719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.933141][T11581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.937924][T17728] loop6: detected capacity change from 0 to 512 [ 254.957527][T17730] loop0: detected capacity change from 0 to 512 [ 254.969591][T17728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.982830][T17728] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.994432][T17730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.007658][T17730] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.050177][T17741] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 255.106490][T11581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.109404][T17405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.142596][T17750] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5046'. [ 255.160569][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5047'. [ 255.202100][T17749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.210550][T17749] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.221333][T17749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.243310][T17755] loop4: detected capacity change from 0 to 8192 [ 255.271933][T17761] loop0: detected capacity change from 0 to 512 [ 255.280782][T17761] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.5051: corrupted in-inode xattr: invalid ea_ino [ 255.294705][T17761] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.5051: couldn't read orphan inode 15 (err -117) [ 255.308256][T17761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.359012][T11581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.468376][T17766] ================================================================== [ 255.476491][T17766] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 255.485008][T17766] [ 255.487323][T17766] write to 0xffff888116aec4d0 of 8 bytes by task 17763 on cpu 0: [ 255.495033][T17766] sync_mapping_buffers+0x159/0x7c0 [ 255.500239][T17766] fat_file_fsync+0xa7/0x100 [ 255.504827][T17766] vfs_fsync_range+0x116/0x130 [ 255.509588][T17766] generic_file_write_iter+0x185/0x1c0 [ 255.515042][T17766] iter_file_splice_write+0x5f1/0x980 [ 255.520408][T17766] direct_splice_actor+0x160/0x2c0 [ 255.525515][T17766] splice_direct_to_actor+0x302/0x670 [ 255.530880][T17766] do_splice_direct+0xd7/0x150 [ 255.535638][T17766] do_sendfile+0x398/0x660 [ 255.540042][T17766] __x64_sys_sendfile64+0x110/0x150 [ 255.545237][T17766] x64_sys_call+0xfbd/0x2dc0 [ 255.549820][T17766] do_syscall_64+0xc9/0x1c0 [ 255.554316][T17766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.560205][T17766] [ 255.562534][T17766] read to 0xffff888116aec4d0 of 8 bytes by task 17766 on cpu 1: [ 255.570151][T17766] mark_buffer_dirty_inode+0x96/0x1c0 [ 255.575524][T17766] fat16_ent_put+0x4f/0x60 [ 255.579939][T17766] fat_ent_write+0x66/0xe0 [ 255.584350][T17766] fat_chain_add+0x15f/0x400 [ 255.588959][T17766] fat_get_block+0x46b/0x5e0 [ 255.593550][T17766] __block_write_begin_int+0x417/0xfa0 [ 255.599004][T17766] cont_write_begin+0x546/0x860 [ 255.603850][T17766] fat_write_begin+0x51/0xe0 [ 255.608431][T17766] generic_perform_write+0x1a8/0x4a0 [ 255.613716][T17766] __generic_file_write_iter+0xa1/0x120 [ 255.619261][T17766] generic_file_write_iter+0x77/0x1c0 [ 255.624628][T17766] vfs_write+0x77f/0x920 [ 255.628867][T17766] ksys_write+0xe8/0x1b0 [ 255.633103][T17766] __x64_sys_write+0x42/0x50 [ 255.637685][T17766] x64_sys_call+0x287e/0x2dc0 [ 255.642355][T17766] do_syscall_64+0xc9/0x1c0 [ 255.646848][T17766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.652731][T17766] [ 255.655039][T17766] value changed: 0xffff888106677808 -> 0x0000000000000000 [ 255.662161][T17766] [ 255.664472][T17766] Reported by Kernel Concurrency Sanitizer on: [ 255.670608][T17766] CPU: 1 UID: 0 PID: 17766 Comm: syz.4.5050 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 255.681363][T17766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.691414][T17766] ================================================================== [ 255.743385][T17773] sch_tbf: peakrate 8 is lower than or equals to rate 12 !