last executing test programs: 33.368047925s ago: executing program 4 (id=56): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001000400000000000003000085e1ff007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x62, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r2, 0x5453, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c69617bc4ed0dc57395078896c74a00", @ANYRES16=r2, @ANYBLOB="0100000000009a9f2a11b50000f0001400000008fb09000000000018000180140002006e6574646576730d00300000000000000800080000fc00080011000000000008000e008000000008000dbc6f1a6d3f311d1d98397b5c6ad656a45235b16a1cf9bb47667aa1ed204036ecdd6f4c2c334d9ef7813bd4fe7c9caf7bde39a578d4310e73cb93cfabff50d2bc33c31c96dbb2119317f5019e294cca3573da5c6c015621215bdc3be64d4d0a4e81d7a3c88f"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x3d1a, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000010000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 33.154280964s ago: executing program 4 (id=61): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) openat(r2, &(0x7f0000000700)='./file0/../file0\x00', 0x517b02, 0x52abe154ad664f64) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010300000000000000001c0000000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@restrict={0xd, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x30, 0x61, 0x61, 0x30]}}, &(0x7f0000002f40)=""/4096, 0x2a, 0x1000, 0x0, 0x5, 0x10000, @value}, 0x28) 32.424616422s ago: executing program 4 (id=68): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r1, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x45833af96e4a38fe, 0x0) 32.399906441s ago: executing program 4 (id=69): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f0000002a00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="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", @ANYRES32, @ANYRES64=0xffffffffffffffff], 0x8, 0x302, &(0x7f0000000c00)="$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") syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='7]\xc7z\xdaW_\x81Z\x87\"j&\xfe\xbc\x82?\xd8\"\xf6\'\xbb~z\xf6\x1c\x9d\xf7\x89v\xe16;X=\"\xb9\x9aS\"G\xb9\x1e\xfe\xf1\xbbT\x9b\xb2#\xaa\x05\x98R\xf2\xfb\x03\xfa \xb9W\"\xf0\n\x0e\xb0(\xf9\x12f\x03\xb3\xefc \xb5Y\x91\x12\xf1\xfa\x1fo\xf6*\xc7\xff\x15\xf9\xa4') pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x5406, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x14, 0xc, &(0x7f0000000f40)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x60000001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000240)="4dbd024c2994d3019bbb999434d8558fe4cb4d4b1efb84dd796a28f41c3be375adeeb6d654d0fc96fc59fef29a", &(0x7f0000000280)=@buf="11a0bb7cc61de44ed9f2c908638e1e04df9f3b8f98b7ae2fb956df4b61a790d9de6890bc65128b25977c1370e85d9ba10ae503e9b4ac4fd8af4fcbc1c19d348dbb9b9e9f329b78d24dcd0d3484fdf75ec30cd9446d"}, 0x20) listen(r4, 0x2) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000340)={0x0, 0x6, 0x5, 0x8, 0xa, "d0bba5e0aa596359db70cc8863fd452e257470"}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x81f42) ioctl$EVIOCGBITSW(r10, 0x40095505, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000480), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=@newtaction={0x14, 0x30, 0x200}, 0x14}}, 0x10) 32.194168211s ago: executing program 4 (id=76): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r1, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x45833af96e4a38fe, 0x0) 31.716135949s ago: executing program 4 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x10, 0xf}, {0x0, 0x4}, {0x4, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffffff}, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, r8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r7, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4044810) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fcntl$lock(r10, 0x24, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffe, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002440)={0x6, 0x6, &(0x7f0000001b80)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x0, 0x4, 0x0, 0x100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 30.799445546s ago: executing program 32 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x10, 0xf}, {0x0, 0x4}, {0x4, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffffff}, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, r8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r7, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4044810) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fcntl$lock(r10, 0x24, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffe, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002440)={0x6, 0x6, &(0x7f0000001b80)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x0, 0x4, 0x0, 0x100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18.776414664s ago: executing program 1 (id=230): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) 18.723585634s ago: executing program 1 (id=231): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x5, 0x651, &(0x7f0000000800)="$eJzs3c9rVNceAPDvnUx+v0eiPN57dlEDpSi0JiZqkVKo7kXsj127SU0UazRiUtqI4ATsptBdF0JXXdT+GRXc+g90UShdlYKU1kUtUqfcm5nkZjKT3zMTJ58PjDnn3Jl7ztV8PfeeOefeAPatkYgYjYhDEXEjiRjKbStmfxayN6Xve/L77YvpK4ly+b3fkrh9Jynl95VUfg5WPvz30FLRwa619c4t3Lo6OTMzfbOSH5u/dmNsbuHWsSvXJi9PX56+PvHGxOlTJ0+dHj++4TH0r7PtQC597u7Hnw59cf6Db79+lox/9+P5JM6kR5dJj6v2s70b1ry+kRiJ8pKn+fL07/X0Dve9V/w5VP09WZHUFrCnpTHQHRH/i6Hoyv1rDsXn77S1YUBTlZOo9lHAvpNsK/77dr8hQItVzwOq1/b1roPrqHNFD7xoHp9dGpBaiv3uiKjGfzEb84voy8YGBp4kq8Z5kojYeGRuY2kdjx6ev5u+osE4HNAcpcXqKHdt/59ksTkcfVlu4ElhVfwXcq+0/N2tVNqzkhyp2ST+oXVKixHx/0r/3xNbif9i5OL/o23WL/4BAAAAAABg9zw4GxGv15v/V1ie/9NTZ/7PYESc2YX6N/7+r7C0RK97FyoDVnl8NuKtuvN/qytjY7irkvt3Nh+gO7l0ZWb6eGWd59Ho7k3z4zX7LeTSx748eK9R/fn5f+krrf/Rw/z04sKvxZqFuFOT85PLi42BbXu8GPFSNv/3cKVk9fyftP9P6vT/aXzf2GQdB1+9fyGfL5fLd6rp+vG/NBcYaK7yNxFH6vb/Kx1ssv79Ocay84Gx6lnBWi8/yy00qiH+oX3S/n+gcfwvh+3y/Xrmtrb/nog4sVBsFP6biP/65/89yftdkVtK8Nnk/PzN8Yie5Nza8omttRk6VTUeqvGSxv/RV9Yf/1s+/8/FYX9ElDZZ53+fD/7caJv+H9onjf+p9c//h5NK/x9Z/798IrDpxMT94e+zPdW5L9yFTfX/J7M+/WilJBv/AyoKa0o2G6BtaS4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdIJSIUYrTxH6VxQKo6MRgxHxnxgozMzOzb92afaT61Pptuz5/4Xqk36HlvJJ9fn/w7n8RE3+REQciIivuvqz/OjF2Zmpdh83AAAAAAAAAAAAAAAAAAAA7BGD2Zr/cm/t+v/UL13tbh3QdMXKzw3iva8VbQFaq7jtT5Z7d7UhQMttP/6BF10W/4ubeWd309sCtFbj/v/ps3Kmmk+S/NY/mtwuoPnS+E9cBMC+tM3Q9/UgdIA68T9SW7D6zB/oDOuO6d1bTvn2HzqSS38AAAAAAOgoBw4/+CGJiNKb/dkr1VPZZrI/dLZCuxsAtI05vLB/FWfb3QKgXVzjAyure/4q19veePa/dUEAAAAAAAAAAAAA0CpHDln/D/vV2vX/91eSSUSptc0BWmid9f/1Fva4XQB0kMaP/rCuDzqda3xgo97e+n8AAAAAAAAAAAAA2AP6bl2dnJmZvjm3sMNERPxUTiJ2up8GiQ9rSg5HxNtNqqupidLknmjGzhK9ld+eSsnz5tTVHRHtPtJtJvoiYgcfr96Co41H0cb/kwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFX+CQAA///3ESWR") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0) dup2(r1, r2) sendmsg$key(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000440)=ANY=[], 0x118}}, 0x0) 18.434277833s ago: executing program 1 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x314, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb04}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbd8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe7, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x755e}]}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x66f6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r2 = memfd_create(&(0x7f0000000440)=',%+)]:+.\x00', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x2, 0x2, 0xfffffff7, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r0, 0x10, 0x8, &(0x7f0000000500)="6bd46bd835db55c12ee7d4596f888ca2c767d86470437c19704e3696c5aca8b6734387d1650ee494a15242c9a19745f3eb90ef6ebdf43c538c0a3b0a3af2310f47aa3ca81e7c6965e93b4ddd52e87029b68a8f2db2a9a6bf2c63e41f371906ce671d68d9322ba4b7d6072e", 0x6b) write(r0, &(0x7f0000000580), 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000800)=[0x0, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff]) fsetxattr$system_posix_acl(r0, &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {0x1, 0x4}, [{0x2, 0x1, r6}, {0x2, 0x1, 0xee01}], {0x4, 0x5}, [{0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x1, r8}], {0x10, 0x5}}, 0x54, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8, r3}, 0x18) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) syz_usbip_server_init(0xcb7df5fc55d263f4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000940)=0x2, 0x4) syz_usbip_server_init(0x5) r9 = syz_open_pts(0xffffffffffffffff, 0x20300) ioctl$TCSETA(r9, 0x5406, &(0x7f0000000980)={0x4, 0x5, 0x7531, 0x4, 0x19, "55fa6aee42967261"}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r10, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x84, r11, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8cd}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r3}, {0x8, 0x1, r12}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r4}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x80d1}, 0x0) r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000bc0), 0x420201, 0x0) ioctl$TCSETS(r13, 0x5402, &(0x7f0000000c00)={0xba1, 0x10001, 0x9, 0xbffe, 0x11, "5c6e14ff347322647ce4eef3b42cbe25d21a8b"}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, r14, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000044}, 0x8) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000e40)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r10, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r15, 0x210, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r16}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x85) 17.836661361s ago: executing program 1 (id=250): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], 0x6, 0x35d, &(0x7f0000000f00)="$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") r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000080)={0xd, 0x9}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000240)={0x6, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @local, 0x10, 0x7, 0x2, 0x8}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r6 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xe85) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f00000002c0)) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r7, 0x89e1, &(0x7f0000000140)={0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file2\x00'}, 0x6e) 17.664142191s ago: executing program 1 (id=251): socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x23, r3, 0x1, 0x0, 0x0, {{}, {}, {0x7, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'gre0\x00'}}}}}, 0x30}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r5, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17.53608909s ago: executing program 1 (id=255): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18) pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x20008040) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') (fail_nth: 1) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) 17.5358861s ago: executing program 33 (id=255): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18) pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x20008040) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') (fail_nth: 1) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) 3.388340521s ago: executing program 2 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e12"], 0x44}, 0x1, 0x0, 0x0, 0x40811}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r8, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r9}], 0x1, 0xfffffffb) dup2(r8, r9) fcntl$setown(r8, 0x8, r7) tkill(r7, 0x13) syz_open_pts(r4, 0x802) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 2.665480939s ago: executing program 6 (id=527): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local={0xfe, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}}, 0x0) 2.599158989s ago: executing program 6 (id=528): socket$inet(0x2, 0x80001, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180000004b0b00000000000007000000259b1800fc4d46056a110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xff, &(0x7f00000000c0)=""/255, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0xffffffff}, 0x62, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000400)='!', 0x1}], 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x41}, 0x5}, r2, 0xb}}, 0x48) r3 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 2.503393058s ago: executing program 6 (id=529): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000010000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 2.489549988s ago: executing program 6 (id=530): mkdirat(0xffffffffffffff9c, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000680), 0x64, 0x50a, &(0x7f00000009c0)="$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") 716.255692ms ago: executing program 6 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 656.357012ms ago: executing program 3 (id=553): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffdc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00', @ANYRESHEX, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32=0x0], 0x1, 0x140, &(0x7f00000002c0)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0xfe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) 601.697581ms ago: executing program 6 (id=556): socket$inet6(0xa, 0x1, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509"], &(0x7f0000001dc0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000001040000731f0dc9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) sendfile(r1, r0, 0x0, 0x7ffff000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x6db6e559) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mq_timedreceive(0xffffffffffffffff, &(0x7f00000013c0)=""/102369, 0xda6f, 0xffffffffffffffff, 0x0) 533.098141ms ago: executing program 0 (id=560): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffc96) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200), 0xfc, 0x56d, &(0x7f00000013c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) 437.818851ms ago: executing program 0 (id=562): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local={0xfe, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}}, 0x0) 387.535171ms ago: executing program 3 (id=565): socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x23, r3, 0x1, 0x0, 0x0, {{}, {}, {0x7, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'gre0\x00'}}}}}, 0x30}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x100000d, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 342.786791ms ago: executing program 3 (id=567): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {0x0}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 337.122681ms ago: executing program 0 (id=568): socket(0x10, 0x803, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 260.45995ms ago: executing program 2 (id=569): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) getrandom(0x0, 0x0, 0x0) 260.31087ms ago: executing program 3 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) 259.353641ms ago: executing program 5 (id=571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r1, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x45833af96e4a38fe, 0x0) 250.46949ms ago: executing program 2 (id=572): socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x23, r3, 0x1, 0x0, 0x0, {{}, {}, {0x7, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'gre0\x00'}}}}}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) 229.29138ms ago: executing program 5 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d9e00c58d55cc60281a759a6fd48345edf97e73a762ef9102773cd076b744b2d469fb96e369096fd729f2eb93fd218e0f1c6442ab1019ed5cc6ebb66d5b23a9cb57bae819088540f50c68741b3f0461942671541ed551fe88ae56b7e0b8b6d1b653900f2fc16217bc532321b4c37985c2271f0ffe69132e1f6388c7f110eee6", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) r1 = signalfd4(r0, &(0x7f0000000080)={[0x6]}, 0x8, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='writeback_bdi_register\x00'}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) 223.91622ms ago: executing program 0 (id=574): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x1e3}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x14, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x7a}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 198.02961ms ago: executing program 3 (id=575): socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 170.45754ms ago: executing program 5 (id=576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 145.53587ms ago: executing program 2 (id=577): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8994, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) sendmmsg$inet(r3, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="ac14142ae000000000000000"], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000009c0)="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", 0xfb}, {&(0x7f00000004c0)="0c71e8d7705b19c24e8c3ec98b4243ae0be48cd79f024361b8082d328363e63e360e122e7ec929c89aea0b338987609655fb5f5f91cd457584f30946f63e00fd0e8c536ae0106beb7d02fb4eb35db10c37c4bf3f2c6df9254d540598ae9b7098b74908c7da448e8891bc1b46f58553776f43370d090df693f3a4e4a724dbb498e51860bd766e36c41c0a0ee41019a0b05b519107c1fbb944f26f16f9fc127f3cd86c3fdbcf169912fc1c42a4a7051d3e85591ccd24b19681da775dc34c98ad24ab07c6feab583ba1f5efb430a06d66c039dbf40a84f04cfdfca240676e96579502925e57864815d3fe17edaf5cdbc3a4b48843c22372f9f1cf363d8428fe6341fb474ba53db6be689703ce5f7b6639b3493a5aca4c9316df8b4600d73533021932eb359ce7c1f00a54cb1318076ccb00e27ba0934db1867e078ee47b86d3e367b96ba948c3aa029c365eb0dc99685c5fd7bfbd1916b889da42d6ad1ab2466e989b5c8304b1e2190d4efeb9ccbd3a7a48c3b393470fc215e164cb91e238c5a28c4f40b4b99ee8f9481fe62e0bcf0a9831e491dc1150ad9c023217df6432487219a3083b310958cdbc217f99d02a19414987ff1bc176e3267c205827f466ea1912cbc0e304faf034602b85db010d8796d2ab18c2c4badf39db5312ad908d8555c30d0cc7d3bce8b4fcfc5764ed6e8bf4e8e4af6bbb3f82ac014f021dc6cb81cebe4b7d071e4d019719d1b0354ce0a2ff3b66ba7bf0f4598bde90a9115ddc4f197bcd881e0cd0baabb57316e75d108b14acc668ee906acf7bffdff3aef11ecf107b3eccd67a56c6b26e0a9a72d404a7a2dd3da8759e676c0eef6a95890d4f647269d1bf972d75307bd867819f385df6f57a7c28332307f444d1157c303c30a478b056d6e11111398aafcb6fff1b6a985cf888afa04586e35e7d3b292d254acf08a6bd38fbbd22bc9919052e6693c1e454aade6348679e027d1b102618476c9ab1f9928fc7f505046cb8383b9e1d79b961895502cded12f1842705102dffddc11f7bea0bd53833f1a455e661f6bda92d35b1159e1489cf762da76c125060ffedc7cc54238b3bd2d894a91d92a6c5cce9bf5417674a2bd0e38271912f7481e58ec7ab422db826482ffb80ce45dab2cb43105356c292a2fd1db8a758b37d56f46721163f24c075d980a37917cca20acce274c404828efaed50b881a5481f9ad268e99e25884db25426d5a5f338f405748817bba32b89e4c18b0f061e6758d46b5f0f2865b1c41be4f7ff999d289538a8fca45b2cf76a2fc398b7913db0ea85ee4d00156432f764ef888094dceb05c68da62fdf667b511276ac97dcf0b34819d9307cf0066267f94ab80fcc19c9f3d682e6e375ac25d7d6b71ae6d084ca1ed7e21b46b1ca0abc6cd50b3aa40e341cfc0a75f2040cc71c26e6cff3d76cc6c629051c47d8b950d01de19d324f2705e37a7a41364ecc70e5021ef955b50144860dafe6fc8b14fb6c451c0444aef66c3081097b6072c304f17206810b4e937bd5673720071d5f1d964f8bb21ab4ffbda1ece1e95005c6abdf00f78681f37c34936e8c9ba1bf420ba0dbfb84698931da95003dd2a34f59a179420ce004664f0495d1548e04e544c238599e6c41831d05c568607f0cd59153422fea60f7de8c4c1ab308b977e2280372c1f57506c22caf84ef2d912b3dbdd9d05fd1fe78ea2965f9542b0010009efea9c642f1", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x1}}], 0x4, 0xc080) 43.723719ms ago: executing program 5 (id=581): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {0x0}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 43.266669ms ago: executing program 0 (id=582): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) getrandom(0x0, 0x0, 0x0) 1.00805ms ago: executing program 0 (id=583): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r1, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x45833af96e4a38fe, 0x0) 552.15µs ago: executing program 5 (id=584): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x1300) 0s ago: executing program 3 (id=585): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.598326][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.605401][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.614073][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.621130][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.631629][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.648722][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.655932][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.676010][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.683160][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.691964][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.699073][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.724750][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.731920][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.757903][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.784924][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.821781][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.857070][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.874123][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.956289][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.991974][ T3299] veth0_vlan: entered promiscuous mode [ 30.041965][ T3299] veth1_vlan: entered promiscuous mode [ 30.055092][ T3296] veth0_vlan: entered promiscuous mode [ 30.065370][ T3303] veth0_vlan: entered promiscuous mode [ 30.080566][ T3299] veth0_macvtap: entered promiscuous mode [ 30.088251][ T3303] veth1_vlan: entered promiscuous mode [ 30.094443][ T3296] veth1_vlan: entered promiscuous mode [ 30.106020][ T3297] veth0_vlan: entered promiscuous mode [ 30.122404][ T3299] veth1_macvtap: entered promiscuous mode [ 30.130432][ T3297] veth1_vlan: entered promiscuous mode [ 30.139318][ T3302] veth0_vlan: entered promiscuous mode [ 30.154201][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.164674][ T3297] veth0_macvtap: entered promiscuous mode [ 30.172417][ T3302] veth1_vlan: entered promiscuous mode [ 30.183424][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.196395][ T3297] veth1_macvtap: entered promiscuous mode [ 30.207170][ T3299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.215963][ T3299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.224812][ T3299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.233652][ T3299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.245457][ T3303] veth0_macvtap: entered promiscuous mode [ 30.256661][ T3303] veth1_macvtap: entered promiscuous mode [ 30.270243][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.280746][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.291972][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.299929][ T3296] veth0_macvtap: entered promiscuous mode [ 30.309488][ T3302] veth0_macvtap: entered promiscuous mode [ 30.320967][ T3296] veth1_macvtap: entered promiscuous mode [ 30.328134][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.338680][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.349334][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.359168][ T3302] veth1_macvtap: entered promiscuous mode [ 30.371439][ T3297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.380292][ T3297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.389026][ T3297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.397808][ T3297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.414587][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.425173][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.435039][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.445547][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.458546][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.470284][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.486165][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.496639][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.506494][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.516960][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.526878][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.537569][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.549986][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.562786][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.573512][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.583388][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.593897][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.604956][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.612732][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.623307][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.633171][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.643685][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.653522][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.663979][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.673833][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.684300][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.694751][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.704208][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.714830][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.724813][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.736197][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.746146][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.756635][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.768957][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.777977][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.788519][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.798365][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.808871][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.818683][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.829185][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.839005][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.849490][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.867562][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.875818][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 30.875830][ T29] audit: type=1400 audit(1737572590.119:149): avc: denied { create } for pid=3439 comm="syz.1.6" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.903194][ T29] audit: type=1400 audit(1737572590.129:150): avc: denied { map } for pid=3439 comm="syz.1.6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.903390][ T3440] netlink: 'syz.1.6': attribute type 7 has an invalid length. [ 30.927179][ T29] audit: type=1400 audit(1737572590.129:151): avc: denied { read write } for pid=3439 comm="syz.1.6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.927214][ T29] audit: type=1400 audit(1737572590.139:152): avc: denied { create } for pid=3439 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.934693][ T3440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 30.965208][ T29] audit: type=1400 audit(1737572590.209:153): avc: denied { write } for pid=3439 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.010335][ T3296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.019370][ T3296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.028237][ T3296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.036990][ T3296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.048158][ T3303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.056909][ T3303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.065675][ T3303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.074526][ T3303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.085449][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.094209][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.102981][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.111838][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.162554][ T29] audit: type=1326 audit(1737572590.409:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1424565d29 code=0x7ffc0000 [ 31.185814][ T29] audit: type=1326 audit(1737572590.409:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1424565d29 code=0x7ffc0000 [ 31.209015][ T29] audit: type=1326 audit(1737572590.409:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1424565d29 code=0x7ffc0000 [ 31.238070][ T29] audit: type=1326 audit(1737572590.409:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1424565d29 code=0x7ffc0000 [ 31.261238][ T29] audit: type=1326 audit(1737572590.409:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1424565d29 code=0x7ffc0000 [ 31.327948][ T3451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8'. [ 31.602373][ T3465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 31.675941][ T3477] loop0: detected capacity change from 0 to 512 [ 31.732712][ T3477] ======================================================= [ 31.732712][ T3477] WARNING: The mand mount option has been deprecated and [ 31.732712][ T3477] and is ignored by this kernel. Remove the mand [ 31.732712][ T3477] option from the mount to silence this warning. [ 31.732712][ T3477] ======================================================= [ 31.845034][ T3477] EXT4-fs: Ignoring removed i_version option [ 31.852894][ T3477] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 31.864064][ T3477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 31.873142][ T3477] System zones: 1-12 [ 31.877959][ T3477] EXT4-fs (loop0): orphan cleanup on readonly fs [ 31.884570][ T3477] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.10: invalid indirect mapped block 12 (level 1) [ 31.904654][ T3482] loop3: detected capacity change from 0 to 1024 [ 31.911174][ T3477] EXT4-fs (loop0): Remounting filesystem read-only [ 31.918095][ T3477] EXT4-fs (loop0): 1 truncate cleaned up [ 31.924111][ T3477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 31.936254][ T3477] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 31.940271][ T3482] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 31.948872][ T3477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 32.148201][ T3497] loop2: detected capacity change from 0 to 2048 [ 32.182151][ T3497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.199623][ T3504] Zero length message leads to an empty skb [ 32.207389][ T3504] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 32.232268][ T3504] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 32.238910][ T3504] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 32.246660][ T3504] vhci_hcd vhci_hcd.0: Device attached [ 32.310394][ T3512] loop4: detected capacity change from 0 to 512 [ 32.326353][ T3506] vhci_hcd: connection closed [ 32.326510][ T3395] vhci_hcd: stop threads [ 32.335547][ T3395] vhci_hcd: release socket [ 32.340044][ T3395] vhci_hcd: disconnect device [ 32.346150][ T3512] EXT4-fs: Ignoring removed i_version option [ 32.353019][ T3512] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 32.363788][ T3512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 32.374752][ T3512] System zones: 1-12 [ 32.380203][ T3512] EXT4-fs (loop4): orphan cleanup on readonly fs [ 32.386708][ T3512] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.20: invalid indirect mapped block 12 (level 1) [ 32.400196][ T3512] EXT4-fs (loop4): Remounting filesystem read-only [ 32.406918][ T3512] EXT4-fs (loop4): 1 truncate cleaned up [ 32.413162][ T3512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 32.425259][ T3512] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 32.432346][ T3512] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 32.614016][ T3527] loop1: detected capacity change from 0 to 1024 [ 32.625653][ T3527] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 32.639119][ T3527] ALSA: seq fatal error: cannot create timer (-16) [ 32.676918][ T3529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25'. [ 32.738969][ T3533] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.782275][ T3539] loop3: detected capacity change from 0 to 164 [ 32.842877][ T3545] loop3: detected capacity change from 0 to 1024 [ 32.854264][ T3545] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 32.872020][ T3545] ALSA: seq fatal error: cannot create timer (-16) [ 32.879995][ T3547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.32'. [ 32.924058][ T3549] netlink: 3 bytes leftover after parsing attributes in process `syz.0.33'. [ 32.933435][ T3549] 0X: renamed from caif0 [ 32.941252][ T3549] 0X: entered allmulticast mode [ 32.946698][ T3549] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 32.981578][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.045059][ T3553] loop4: detected capacity change from 0 to 2048 [ 33.051781][ T3558] hsr_slave_0: left promiscuous mode [ 33.058527][ T3558] hsr_slave_1: left promiscuous mode [ 33.084463][ T3553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.181929][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.492962][ T3572] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 33.514992][ T3572] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 33.521560][ T3572] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 33.529294][ T3572] vhci_hcd vhci_hcd.0: Device attached [ 33.594969][ T3576] loop4: detected capacity change from 0 to 512 [ 33.715051][ T3576] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.725763][ T3576] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.40: bg 0: block 248: padding at end of block bitmap is not set [ 33.746039][ T3576] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.40: Failed to acquire dquot type 1 [ 33.762755][ T3576] EXT4-fs (loop4): 1 truncate cleaned up [ 33.769635][ T3576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.940585][ T3584] loop3: detected capacity change from 0 to 128 [ 33.974338][ T3573] vhci_hcd: connection closed [ 33.974639][ T311] vhci_hcd: stop threads [ 33.983770][ T311] vhci_hcd: release socket [ 33.988286][ T311] vhci_hcd: disconnect device [ 34.039708][ T3584] 7]zW_Z"j&: attempt to access beyond end of device [ 34.039708][ T3584] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 34.248953][ T3584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.339558][ T3576] syz.4.40 (3576) used greatest stack depth: 9272 bytes left [ 34.397436][ T3584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.623908][ T3600] geneve2: entered promiscuous mode [ 34.629288][ T3600] geneve2: entered allmulticast mode [ 34.642126][ T3591] loop2: detected capacity change from 0 to 2048 [ 34.828607][ T3591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.453394][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.529432][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.589858][ T3618] loop2: detected capacity change from 0 to 512 [ 35.598266][ T3395] kworker/u8:7: attempt to access beyond end of device [ 35.598266][ T3395] loop3: rw=1, sector=153, nr_sectors = 888 limit=128 [ 35.599068][ T3618] EXT4-fs: Ignoring removed i_version option [ 35.623495][ T3622] loop4: detected capacity change from 0 to 164 [ 35.637534][ T3618] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 35.677430][ T3625] netlink: 3 bytes leftover after parsing attributes in process `syz.3.54'. [ 35.686227][ T3625] 0X: renamed from caif0 [ 35.692800][ T3618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 35.702884][ T3625] 0X: entered allmulticast mode [ 35.708254][ T3625] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 35.738265][ T3618] System zones: 1-12 [ 35.753675][ T3618] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.802905][ T3618] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.51: invalid indirect mapped block 12 (level 1) [ 35.840023][ T3629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.55'. [ 35.857775][ T3618] EXT4-fs (loop2): Remounting filesystem read-only [ 35.890098][ T3618] EXT4-fs (loop2): 1 truncate cleaned up [ 35.892534][ T3630] loop4: detected capacity change from 0 to 2048 [ 35.897338][ T3618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 35.931422][ T3618] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 35.949727][ T3630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.958942][ T3618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 35.996328][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.007755][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 36.007771][ T29] audit: type=1400 audit(1737572595.259:577): avc: denied { create } for pid=3638 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.035737][ T3642] netlink: 48 bytes leftover after parsing attributes in process `syz.0.60'. [ 36.036589][ T29] audit: type=1400 audit(1737572595.279:578): avc: denied { write } for pid=3638 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.040314][ T29] audit: type=1400 audit(1737572595.289:579): avc: denied { remount } for pid=3638 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.044415][ T3642] loop0: detected capacity change from 0 to 1024 [ 36.044769][ T3642] EXT4-fs: Ignoring removed nobh option [ 36.045401][ T3642] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.059561][ T3642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.061735][ T29] audit: type=1400 audit(1737572595.309:580): avc: denied { remount } for pid=3638 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.065204][ T3642] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 36.066524][ T3642] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 36.067169][ T3642] netlink: 'syz.0.60': attribute type 13 has an invalid length. [ 36.095073][ T3648] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 36.163759][ T29] audit: type=1326 audit(1737572595.409:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 36.272037][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.272226][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.331113][ T3648] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 36.337363][ T29] audit: type=1326 audit(1737572595.439:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 36.344221][ T3648] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 36.344517][ T3648] vhci_hcd vhci_hcd.0: Device attached [ 36.350817][ T29] audit: type=1326 audit(1737572595.439:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 36.350853][ T29] audit: type=1326 audit(1737572595.439:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 36.350887][ T29] audit: type=1326 audit(1737572595.439:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 36.350919][ T29] audit: type=1326 audit(1737572595.439:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.3.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 36.398889][ T3655] vhci_hcd: connection closed [ 36.464174][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.489146][ T2598] vhci_hcd: stop threads [ 36.498441][ T2598] vhci_hcd: release socket [ 36.502905][ T2598] vhci_hcd: disconnect device [ 36.519947][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.574638][ T3642] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.583745][ T3642] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.592839][ T3642] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.602042][ T3642] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.734690][ T3668] netlink: 3 bytes leftover after parsing attributes in process `syz.3.67'. [ 36.745830][ T3668] 1X: renamed from 60X [ 36.753722][ T3668] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 36.766026][ T3671] loop4: detected capacity change from 0 to 128 [ 36.790719][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.838876][ T3671] 7]zW_Z"j&: attempt to access beyond end of device [ 36.838876][ T3671] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 36.857467][ T3676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'. [ 36.893352][ T3679] geneve2: entered promiscuous mode [ 36.898706][ T3679] geneve2: entered allmulticast mode [ 37.168689][ T3693] loop2: detected capacity change from 0 to 512 [ 37.215965][ T3693] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.224200][ T3693] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.75: bg 0: block 248: padding at end of block bitmap is not set [ 37.240486][ T3693] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.75: Failed to acquire dquot type 1 [ 37.252470][ T3693] EXT4-fs (loop2): 1 truncate cleaned up [ 37.263042][ T3693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.396274][ T3697] sd 0:0:1:0: device reset [ 37.402713][ T2598] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.592751][ T2598] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.750813][ T2598] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.281781][ T3702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.81'. [ 38.306697][ T3702] loop3: detected capacity change from 0 to 1024 [ 38.330729][ T3702] EXT4-fs: Ignoring removed nobh option [ 38.340172][ T3702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.362191][ T2598] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.430233][ T3702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.519771][ T3702] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 39.236232][ T2598] bridge_slave_1: left allmulticast mode [ 39.241936][ T2598] bridge_slave_1: left promiscuous mode [ 39.247794][ T2598] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.259652][ T3702] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 39.298878][ T2598] bridge_slave_0: left allmulticast mode [ 39.304594][ T2598] bridge_slave_0: left promiscuous mode [ 39.310467][ T2598] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.570150][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.040081][ T3735] netlink: 48 bytes leftover after parsing attributes in process `syz.1.91'. [ 40.049385][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.072481][ T3735] loop1: detected capacity change from 0 to 1024 [ 40.091233][ T3735] EXT4-fs: Ignoring removed nobh option [ 40.104082][ T3735] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.114225][ T3739] loop2: detected capacity change from 0 to 1024 [ 40.116368][ T3735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.132404][ T3739] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 40.144543][ T2598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.154095][ T3735] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 40.166342][ T3739] ALSA: seq fatal error: cannot create timer (-16) [ 40.166778][ T2598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.177370][ T3735] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 40.193648][ T2598] bond0 (unregistering): Released all slaves [ 40.203017][ T3735] netlink: 'syz.1.91': attribute type 13 has an invalid length. [ 40.302912][ T3747] loop3: detected capacity change from 0 to 8192 [ 40.323510][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.330895][ T3735] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.379613][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.392644][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.436292][ T3735] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.445430][ T3735] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.454494][ T3735] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.463670][ T3735] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.568700][ T2598] hsr_slave_0: left promiscuous mode [ 40.587015][ T2598] hsr_slave_1: left promiscuous mode [ 40.618423][ T2598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.625892][ T2598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.636745][ T2598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.644252][ T2598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.652431][ T3767] netlink: 3 bytes leftover after parsing attributes in process `syz.0.94'. [ 40.743273][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.754648][ T2598] veth1_macvtap: left promiscuous mode [ 40.760236][ T2598] veth0_macvtap: left promiscuous mode [ 40.765805][ T2598] veth1_vlan: left promiscuous mode [ 40.771111][ T2598] veth0_vlan: left promiscuous mode [ 40.872471][ T2598] team0 (unregistering): Port device team_slave_1 removed [ 40.883052][ T3779] netlink: 3 bytes leftover after parsing attributes in process `syz.1.95'. [ 40.899366][ T2598] team0 (unregistering): Port device team_slave_0 removed [ 40.949837][ T3767] 1X: renamed from 60X [ 40.958266][ T3767] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 40.977514][ T3779] 0X: renamed from caif0 [ 40.985412][ T3779] 0X: entered allmulticast mode [ 40.990703][ T3779] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 41.062020][ T3781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'. [ 41.243439][ T3716] chnl_net:caif_netlink_parms(): no params data found [ 41.432368][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.439563][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.446918][ T3716] bridge_slave_0: entered allmulticast mode [ 41.453563][ T3716] bridge_slave_0: entered promiscuous mode [ 41.460307][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.467907][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.475877][ T3812] netlink: 48 bytes leftover after parsing attributes in process `syz.3.100'. [ 41.486135][ T3716] bridge_slave_1: entered allmulticast mode [ 41.493562][ T3716] bridge_slave_1: entered promiscuous mode [ 41.505655][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 41.505670][ T29] audit: type=1326 audit(1737572600.749:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 41.507972][ T3811] sd 0:0:1:0: device reset [ 41.512023][ T29] audit: type=1326 audit(1737572600.749:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 41.541914][ T3812] loop3: detected capacity change from 0 to 1024 [ 41.566818][ T29] audit: type=1326 audit(1737572600.749:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb828774690 code=0x7ffc0000 [ 41.591594][ T29] audit: type=1326 audit(1737572600.749:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 41.614459][ T29] audit: type=1326 audit(1737572600.749:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 41.616518][ T3812] EXT4-fs: Ignoring removed nobh option [ 41.644748][ T3812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.648826][ T29] audit: type=1326 audit(1737572600.819:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 41.661441][ T3817] loop1: detected capacity change from 0 to 1024 [ 41.676019][ T29] audit: type=1326 audit(1737572600.819:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 41.685335][ T3817] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 41.716663][ T3812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.735752][ T3817] ALSA: seq fatal error: cannot create timer (-16) [ 41.765632][ T3716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.783978][ T3812] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 41.799626][ T3812] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 41.810804][ T3716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.855600][ T3716] team0: Port device team_slave_0 added [ 41.863164][ T3716] team0: Port device team_slave_1 added [ 41.882297][ T3716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.889392][ T3716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.915598][ T3716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.927499][ T3716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.934628][ T3716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.960645][ T3716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.000033][ T3716] hsr_slave_0: entered promiscuous mode [ 42.006250][ T3716] hsr_slave_1: entered promiscuous mode [ 42.138325][ T3716] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.152502][ T3716] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.170163][ T3716] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.182416][ T3716] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.186672][ T3846] loop2: detected capacity change from 0 to 8192 [ 42.211615][ T3864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.109'. [ 42.219929][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.227735][ T3716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.235111][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.242244][ T3716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.250887][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.275605][ T29] audit: type=1400 audit(1737572601.519:689): avc: denied { sys_chroot } for pid=3868 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 42.296825][ T29] audit: type=1400 audit(1737572601.519:690): avc: denied { setgid } for pid=3868 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 42.322993][ T3870] sd 0:0:1:0: device reset [ 42.338757][ T29] audit: type=1400 audit(1737572601.519:691): avc: denied { setuid } for pid=3868 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 42.361900][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.370580][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.379266][ T3873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.111'. [ 42.444260][ T3716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.457094][ T3716] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.486251][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.493385][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.519918][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.527068][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.605700][ T3888] loop3: detected capacity change from 0 to 8192 [ 42.620571][ T3890] loop1: detected capacity change from 0 to 1024 [ 42.628521][ T3890] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 42.670941][ T3893] netlink: 3 bytes leftover after parsing attributes in process `syz.0.116'. [ 42.688916][ T3893] 0X: renamed from 61X [ 42.704178][ T3893] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 42.721545][ T3890] ALSA: seq fatal error: cannot create timer (-16) [ 42.822679][ T3716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.335750][ T3716] veth0_vlan: entered promiscuous mode [ 43.366870][ T3716] veth1_vlan: entered promiscuous mode [ 43.401636][ T3716] veth0_macvtap: entered promiscuous mode [ 43.411125][ T3716] veth1_macvtap: entered promiscuous mode [ 43.444260][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.454762][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.464740][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.475419][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.491415][ T3716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.500773][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.511383][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.521236][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.531861][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.542586][ T3716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.563058][ T3716] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.571938][ T3716] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.580738][ T3716] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.589517][ T3716] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.650931][ T3964] loop2: detected capacity change from 0 to 2048 [ 43.710837][ T3964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.726248][ T3985] netlink: 3 bytes leftover after parsing attributes in process `syz.5.82'. [ 43.742486][ T3985] 0X: renamed from caif0 [ 43.758671][ T3985] 0X: entered allmulticast mode [ 43.763956][ T3985] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 43.799250][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.806310][ T3994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.125'. [ 43.958196][ T3996] netlink: 'syz.2.126': attribute type 3 has an invalid length. [ 44.001039][ T4000] FAULT_INJECTION: forcing a failure. [ 44.001039][ T4000] name failslab, interval 1, probability 0, space 0, times 1 [ 44.013869][ T4000] CPU: 1 UID: 0 PID: 4000 Comm: syz.0.127 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 44.013900][ T4000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 44.013967][ T4000] Call Trace: [ 44.013974][ T4000] [ 44.013981][ T4000] dump_stack_lvl+0xf2/0x150 [ 44.014074][ T4000] dump_stack+0x15/0x1a [ 44.014191][ T4000] should_fail_ex+0x223/0x230 [ 44.014225][ T4000] should_failslab+0x8f/0xb0 [ 44.014265][ T4000] kmem_cache_alloc_noprof+0x52/0x320 [ 44.014295][ T4000] ? copy_fs_struct+0x31/0x110 [ 44.014320][ T4000] copy_fs_struct+0x31/0x110 [ 44.014387][ T4000] __se_sys_setns+0x34c/0xef0 [ 44.014419][ T4000] ? fput+0x1c4/0x200 [ 44.014443][ T4000] __x64_sys_setns+0x31/0x40 [ 44.014540][ T4000] x64_sys_call+0x16ec/0x2dc0 [ 44.014566][ T4000] do_syscall_64+0xc9/0x1c0 [ 44.014605][ T4000] ? clear_bhb_loop+0x55/0xb0 [ 44.014684][ T4000] ? clear_bhb_loop+0x55/0xb0 [ 44.014813][ T4000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.014865][ T4000] RIP: 0033:0x7ff6fa525d29 [ 44.014884][ T4000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.014906][ T4000] RSP: 002b:00007ff6f8b91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 44.014928][ T4000] RAX: ffffffffffffffda RBX: 00007ff6fa715fa0 RCX: 00007ff6fa525d29 [ 44.014942][ T4000] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000004 [ 44.014956][ T4000] RBP: 00007ff6f8b91090 R08: 0000000000000000 R09: 0000000000000000 [ 44.014970][ T4000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.014983][ T4000] R13: 0000000000000000 R14: 00007ff6fa715fa0 R15: 00007ffe51bdabb8 [ 44.015001][ T4000] [ 44.029273][ T4009] loop1: detected capacity change from 0 to 1024 [ 44.457761][ T4009] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 44.480476][ T4021] netlink: 3 bytes leftover after parsing attributes in process `syz.2.132'. [ 44.519061][ T4009] ALSA: seq fatal error: cannot create timer (-16) [ 44.537820][ T4021] 0X: renamed from caif0 [ 44.547504][ T4025] loop0: detected capacity change from 0 to 512 [ 44.556308][ T4025] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.564056][ T4025] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.133: bg 0: block 248: padding at end of block bitmap is not set [ 44.578824][ T4025] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.133: Failed to acquire dquot type 1 [ 44.591162][ T4025] EXT4-fs (loop0): 1 truncate cleaned up [ 44.598473][ T4025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.667992][ T4021] 0X: entered allmulticast mode [ 44.673327][ T4021] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 45.032330][ T4031] loop1: detected capacity change from 0 to 128 [ 45.054011][ T4036] FAULT_INJECTION: forcing a failure. [ 45.054011][ T4036] name failslab, interval 1, probability 0, space 0, times 0 [ 45.066860][ T4036] CPU: 0 UID: 0 PID: 4036 Comm: syz.3.139 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 45.066897][ T4036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 45.066912][ T4036] Call Trace: [ 45.066920][ T4036] [ 45.066932][ T4036] dump_stack_lvl+0xf2/0x150 [ 45.066977][ T4036] dump_stack+0x15/0x1a [ 45.067016][ T4036] should_fail_ex+0x223/0x230 [ 45.067067][ T4036] should_failslab+0x8f/0xb0 [ 45.067107][ T4036] kmem_cache_alloc_node_noprof+0x59/0x320 [ 45.067139][ T4036] ? perf_event_alloc+0x157/0x12e0 [ 45.067178][ T4036] perf_event_alloc+0x157/0x12e0 [ 45.067207][ T4036] ? __fget_files+0x17c/0x1c0 [ 45.067234][ T4036] __se_sys_perf_event_open+0x7f2/0x2230 [ 45.067308][ T4036] ? __rcu_read_unlock+0x4e/0x70 [ 45.067340][ T4036] ? __perf_event_task_sched_out+0x138/0x1010 [ 45.067389][ T4036] __x64_sys_perf_event_open+0x67/0x80 [ 45.067452][ T4036] x64_sys_call+0x1deb/0x2dc0 [ 45.067477][ T4036] do_syscall_64+0xc9/0x1c0 [ 45.067515][ T4036] ? clear_bhb_loop+0x55/0xb0 [ 45.067625][ T4036] ? clear_bhb_loop+0x55/0xb0 [ 45.067657][ T4036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.067695][ T4036] RIP: 0033:0x7fb7e97f5d29 [ 45.067711][ T4036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.067779][ T4036] RSP: 002b:00007fb7e7e61038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 45.067809][ T4036] RAX: ffffffffffffffda RBX: 00007fb7e99e5fa0 RCX: 00007fb7e97f5d29 [ 45.067824][ T4036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200009c0 [ 45.067838][ T4036] RBP: 00007fb7e7e61090 R08: 0000000000000000 R09: 0000000000000000 [ 45.067851][ T4036] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 45.067865][ T4036] R13: 0000000000000000 R14: 00007fb7e99e5fa0 R15: 00007ffe1153e458 [ 45.067883][ T4036] [ 45.494453][ T4034] loop5: detected capacity change from 0 to 2048 [ 45.534791][ T4041] FAULT_INJECTION: forcing a failure. [ 45.534791][ T4041] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.548031][ T4041] CPU: 0 UID: 0 PID: 4041 Comm: syz.3.141 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 45.548062][ T4041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 45.548076][ T4041] Call Trace: [ 45.548083][ T4041] [ 45.548092][ T4041] dump_stack_lvl+0xf2/0x150 [ 45.548130][ T4041] dump_stack+0x15/0x1a [ 45.548207][ T4041] should_fail_ex+0x223/0x230 [ 45.548281][ T4041] should_fail+0xb/0x10 [ 45.548309][ T4041] should_fail_usercopy+0x1a/0x20 [ 45.548344][ T4041] _copy_from_user+0x1c/0xa0 [ 45.548379][ T4041] __se_sys_memfd_create+0x26b/0x5c0 [ 45.548428][ T4041] __x64_sys_memfd_create+0x31/0x40 [ 45.548460][ T4041] x64_sys_call+0x2d4c/0x2dc0 [ 45.548556][ T4041] do_syscall_64+0xc9/0x1c0 [ 45.548594][ T4041] ? clear_bhb_loop+0x55/0xb0 [ 45.548633][ T4041] ? clear_bhb_loop+0x55/0xb0 [ 45.548735][ T4041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.548795][ T4041] RIP: 0033:0x7fb7e97f5d29 [ 45.548811][ T4041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.548871][ T4041] RSP: 002b:00007fb7e7e60e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 45.548981][ T4041] RAX: ffffffffffffffda RBX: 00000000000001f3 RCX: 00007fb7e97f5d29 [ 45.548995][ T4041] RDX: 00007fb7e7e60ef0 RSI: 0000000000000000 RDI: 00007fb7e9872469 [ 45.549009][ T4041] RBP: 0000000020000a80 R08: 00007fb7e7e60bb7 R09: 00007fb7e7e60e40 [ 45.549068][ T4041] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200000c0 [ 45.549082][ T4041] R13: 00007fb7e7e60ef0 R14: 00007fb7e7e60eb0 R15: 0000000020000780 [ 45.549123][ T4041] [ 45.742433][ T4041] process 'syz.3.141' launched './file1' with NULL argv: empty string added [ 45.793606][ T4034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.851145][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.920604][ T4050] loop3: detected capacity change from 0 to 2048 [ 45.959586][ T4050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.990705][ T4064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.148'. [ 46.032515][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.212709][ T4071] SELinux: syz.1.152 (4071) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.505805][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.530951][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 46.530965][ T29] audit: type=1326 audit(1737572605.779:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 46.594548][ T29] audit: type=1326 audit(1737572605.809:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 46.617892][ T29] audit: type=1326 audit(1737572605.809:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 46.641276][ T29] audit: type=1326 audit(1737572605.809:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 46.664558][ T29] audit: type=1326 audit(1737572605.809:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 46.677357][ T4078] FAULT_INJECTION: forcing a failure. [ 46.677357][ T4078] name failslab, interval 1, probability 0, space 0, times 0 [ 46.687905][ T29] audit: type=1326 audit(1737572605.809:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 46.700504][ T4078] CPU: 1 UID: 0 PID: 4078 Comm: syz.5.145 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 46.700624][ T4078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 46.700639][ T4078] Call Trace: [ 46.700647][ T4078] [ 46.700656][ T4078] dump_stack_lvl+0xf2/0x150 [ 46.700703][ T4078] dump_stack+0x15/0x1a [ 46.700754][ T4078] should_fail_ex+0x223/0x230 [ 46.700787][ T4078] should_failslab+0x8f/0xb0 [ 46.700835][ T4078] kmem_cache_alloc_node_noprof+0x59/0x320 [ 46.700871][ T4078] ? __alloc_skb+0x10b/0x310 [ 46.700909][ T4078] __alloc_skb+0x10b/0x310 [ 46.700947][ T4078] netlink_alloc_large_skb+0xad/0xe0 [ 46.701062][ T4078] netlink_sendmsg+0x3b4/0x6e0 [ 46.701162][ T4078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.701188][ T4078] __sock_sendmsg+0x140/0x180 [ 46.701220][ T4078] ____sys_sendmsg+0x312/0x410 [ 46.701247][ T4078] __sys_sendmsg+0x19d/0x230 [ 46.701284][ T4078] __x64_sys_sendmsg+0x46/0x50 [ 46.701307][ T4078] x64_sys_call+0x2734/0x2dc0 [ 46.701392][ T4078] do_syscall_64+0xc9/0x1c0 [ 46.701464][ T4078] ? clear_bhb_loop+0x55/0xb0 [ 46.701503][ T4078] ? clear_bhb_loop+0x55/0xb0 [ 46.701542][ T4078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.701603][ T4078] RIP: 0033:0x7f898c735d29 [ 46.701620][ T4078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.701641][ T4078] RSP: 002b:00007f898ada7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.701664][ T4078] RAX: ffffffffffffffda RBX: 00007f898c925fa0 RCX: 00007f898c735d29 [ 46.701678][ T4078] RDX: 0000000000000000 RSI: 00000000200015c0 RDI: 0000000000000003 [ 46.701693][ T4078] RBP: 00007f898ada7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.701720][ T4078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.701734][ T4078] R13: 0000000000000000 R14: 00007f898c925fa0 R15: 00007fff3af41f98 [ 46.701755][ T4078] [ 46.918406][ T29] audit: type=1326 audit(1737572605.809:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 46.941750][ T29] audit: type=1326 audit(1737572605.819:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 46.965002][ T29] audit: type=1326 audit(1737572605.819:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 46.988297][ T29] audit: type=1326 audit(1737572605.819:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb828775d29 code=0x7ffc0000 [ 47.031281][ T4083] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.041742][ T4083] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 47.048364][ T4083] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 47.056107][ T4083] vhci_hcd vhci_hcd.0: Device attached [ 47.084704][ T4088] sd 0:0:1:0: device reset [ 47.146915][ T4095] loop1: detected capacity change from 0 to 128 [ 47.155881][ T4090] loop5: detected capacity change from 0 to 2048 [ 47.178430][ T4084] vhci_hcd: connection closed [ 47.178804][ T3397] vhci_hcd: stop threads [ 47.187957][ T3397] vhci_hcd: release socket [ 47.192414][ T3397] vhci_hcd: disconnect device [ 47.214666][ T4090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.255811][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.298532][ T4106] loop0: detected capacity change from 0 to 8192 [ 47.314913][ T4112] loop2: detected capacity change from 0 to 512 [ 47.322027][ T4112] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.335144][ T4112] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.360455][ T4112] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.376513][ T4112] EXT4-fs (loop2): 1 truncate cleaned up [ 47.398210][ T4121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'. [ 47.415092][ T4112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.441154][ T4112] FAULT_INJECTION: forcing a failure. [ 47.441154][ T4112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.454308][ T4112] CPU: 0 UID: 0 PID: 4112 Comm: syz.2.160 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 47.454340][ T4112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 47.454355][ T4112] Call Trace: [ 47.454362][ T4112] [ 47.454371][ T4112] dump_stack_lvl+0xf2/0x150 [ 47.454479][ T4112] dump_stack+0x15/0x1a [ 47.454624][ T4112] should_fail_ex+0x223/0x230 [ 47.454652][ T4112] should_fail+0xb/0x10 [ 47.454676][ T4112] should_fail_usercopy+0x1a/0x20 [ 47.454717][ T4112] strncpy_from_user+0x25/0x210 [ 47.454736][ T4112] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 47.454822][ T4112] ? getname_flags+0x81/0x3b0 [ 47.454847][ T4112] getname_flags+0xb0/0x3b0 [ 47.454870][ T4112] __x64_sys_unlink+0x21/0x40 [ 47.454950][ T4112] x64_sys_call+0x2329/0x2dc0 [ 47.454971][ T4112] do_syscall_64+0xc9/0x1c0 [ 47.455010][ T4112] ? clear_bhb_loop+0x55/0xb0 [ 47.455099][ T4112] ? clear_bhb_loop+0x55/0xb0 [ 47.455132][ T4112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.455224][ T4112] RIP: 0033:0x7f6135215d29 [ 47.455242][ T4112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.455259][ T4112] RSP: 002b:00007f6133881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 47.455277][ T4112] RAX: ffffffffffffffda RBX: 00007f6135405fa0 RCX: 00007f6135215d29 [ 47.455288][ T4112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 47.455299][ T4112] RBP: 00007f6133881090 R08: 0000000000000000 R09: 0000000000000000 [ 47.455310][ T4112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.455356][ T4112] R13: 0000000000000000 R14: 00007f6135405fa0 R15: 00007ffc4e074838 [ 47.455377][ T4112] [ 47.469844][ C1] hrtimer: interrupt took 55649 ns [ 47.694669][ T4124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.166'. [ 47.730905][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.770263][ T4129] SELinux: syz.2.167 (4129) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 47.810367][ T4131] sd 0:0:1:0: device reset [ 47.811843][ T4133] loop2: detected capacity change from 0 to 512 [ 47.829620][ T4133] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.850573][ T4133] EXT4-fs (loop2): 1 truncate cleaned up [ 47.856842][ T4133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.869271][ T4136] FAULT_INJECTION: forcing a failure. [ 47.869271][ T4136] name failslab, interval 1, probability 0, space 0, times 0 [ 47.882176][ T4136] CPU: 1 UID: 0 PID: 4136 Comm: syz.1.171 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 47.882235][ T4136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 47.882247][ T4136] Call Trace: [ 47.882333][ T4136] [ 47.882342][ T4136] dump_stack_lvl+0xf2/0x150 [ 47.882388][ T4136] dump_stack+0x15/0x1a [ 47.882426][ T4136] should_fail_ex+0x223/0x230 [ 47.882483][ T4136] should_failslab+0x8f/0xb0 [ 47.882563][ T4136] kmem_cache_alloc_node_noprof+0x59/0x320 [ 47.882596][ T4136] ? __alloc_skb+0x10b/0x310 [ 47.882675][ T4136] __alloc_skb+0x10b/0x310 [ 47.882707][ T4136] netlink_alloc_large_skb+0xad/0xe0 [ 47.882819][ T4136] netlink_sendmsg+0x3b4/0x6e0 [ 47.882843][ T4136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.882863][ T4136] __sock_sendmsg+0x140/0x180 [ 47.882961][ T4136] sock_write_iter+0x15e/0x1a0 [ 47.882991][ T4136] do_iter_readv_writev+0x403/0x4b0 [ 47.883038][ T4136] vfs_writev+0x2d4/0x880 [ 47.883064][ T4136] ? proc_fail_nth_write+0x12a/0x150 [ 47.883106][ T4136] do_writev+0xf4/0x220 [ 47.883133][ T4136] __x64_sys_writev+0x45/0x50 [ 47.883221][ T4136] x64_sys_call+0x1fab/0x2dc0 [ 47.883246][ T4136] do_syscall_64+0xc9/0x1c0 [ 47.883282][ T4136] ? clear_bhb_loop+0x55/0xb0 [ 47.883314][ T4136] ? clear_bhb_loop+0x55/0xb0 [ 47.883363][ T4136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.883395][ T4136] RIP: 0033:0x7fb828775d29 [ 47.883409][ T4136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.883439][ T4136] RSP: 002b:00007fb826de1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 47.883457][ T4136] RAX: ffffffffffffffda RBX: 00007fb828965fa0 RCX: 00007fb828775d29 [ 47.883470][ T4136] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000004 [ 47.883483][ T4136] RBP: 00007fb826de1090 R08: 0000000000000000 R09: 0000000000000000 [ 47.883495][ T4136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.883515][ T4136] R13: 0000000000000000 R14: 00007fb828965fa0 R15: 00007ffc2439e628 [ 47.883533][ T4136] [ 48.192278][ T4142] loop5: detected capacity change from 0 to 2048 [ 48.193448][ T4144] syz.1.175 uses obsolete (PF_INET,SOCK_PACKET) [ 48.203803][ T4146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.176'. [ 48.210023][ T4144] netlink: 96 bytes leftover after parsing attributes in process `syz.1.175'. [ 48.248967][ T4142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.288895][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.300357][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.331750][ T4159] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 48.340865][ T4159] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 48.347403][ T4159] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 48.355234][ T4159] vhci_hcd vhci_hcd.0: Device attached [ 48.389827][ T4160] vhci_hcd: connection closed [ 48.390030][ T36] vhci_hcd: stop threads [ 48.399050][ T36] vhci_hcd: release socket [ 48.403462][ T36] vhci_hcd: disconnect device [ 48.469373][ T4173] sd 0:0:1:0: device reset [ 48.477122][ T4172] SELinux: syz.3.183 (4172) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 48.497208][ T4175] geneve0: entered allmulticast mode [ 48.499357][ T4177] loop1: detected capacity change from 0 to 512 [ 48.505675][ T4175] 9pnet_fd: Insufficient options for proto=fd [ 48.787096][ T4179] infiniband syz!: set active [ 48.791848][ T4179] infiniband syz!: added team_slave_0 [ 48.840276][ T4177] EXT4-fs: journaled quota format not specified [ 48.866540][ T4185] loop5: detected capacity change from 0 to 128 [ 48.881102][ T4185] 7]zW_Z"j&: attempt to access beyond end of device [ 48.881102][ T4185] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 48.943385][ T4177] pim6reg: entered allmulticast mode [ 48.952089][ T4185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.953530][ T4179] RDS/IB: syz!: added [ 48.960527][ T4185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.967181][ T4177] pim6reg: left allmulticast mode [ 48.974838][ T4179] smc: adding ib device syz! with port count 1 [ 48.983608][ T4179] smc: ib device syz! port 1 has pnetid [ 49.109081][ T4192] loop1: detected capacity change from 0 to 2048 [ 49.118560][ T4192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.145686][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.210806][ T4197] loop3: detected capacity change from 0 to 1024 [ 49.229888][ T4197] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 49.280764][ T4206] sd 0:0:1:0: device reset [ 49.290890][ T4197] ALSA: seq fatal error: cannot create timer (-16) [ 49.314064][ T4208] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 49.323511][ T4208] netlink: 'syz.1.196': attribute type 4 has an invalid length. [ 49.439658][ T4225] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 49.462508][ T4223] loop1: detected capacity change from 0 to 2048 [ 49.469674][ T4225] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 49.476218][ T4225] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 49.484031][ T4225] vhci_hcd vhci_hcd.0: Device attached [ 49.500451][ T54] kworker/u8:4: attempt to access beyond end of device [ 49.500451][ T54] loop5: rw=1, sector=153, nr_sectors = 888 limit=128 [ 49.542612][ T4223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.595328][ T4226] vhci_hcd: connection closed [ 49.595465][ T3397] vhci_hcd: stop threads [ 49.604667][ T3397] vhci_hcd: release socket [ 49.609255][ T3397] vhci_hcd: disconnect device [ 49.614985][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.641492][ T4244] netlink: 24 bytes leftover after parsing attributes in process `syz.5.207'. [ 49.656594][ T4246] sd 0:0:1:0: device reset [ 49.682082][ T4249] SELinux: syz.5.209 (4249) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 49.718691][ T4253] loop5: detected capacity change from 0 to 1024 [ 49.725450][ T4253] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 49.735275][ T4257] loop1: detected capacity change from 0 to 128 [ 49.744729][ T4257] 7]zW_Z"j&: attempt to access beyond end of device [ 49.744729][ T4257] loop1: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 49.766231][ T4257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.774757][ T4257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.866162][ T4266] loop5: detected capacity change from 0 to 2048 [ 49.888630][ T4266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.912759][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.033716][ T4277] netlink: 24 bytes leftover after parsing attributes in process `syz.5.220'. [ 50.064044][ T4279] sd 0:0:1:0: device reset [ 50.336655][ T36] kworker/u8:2: attempt to access beyond end of device [ 50.336655][ T36] loop1: rw=1, sector=153, nr_sectors = 888 limit=128 [ 50.354262][ T4300] loop5: detected capacity change from 0 to 2048 [ 50.409285][ T4300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.463924][ T4307] loop1: detected capacity change from 0 to 1024 [ 50.505078][ T4307] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 50.551933][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.644463][ T4312] sd 0:0:1:0: device reset [ 50.667852][ T4314] netlink: 24 bytes leftover after parsing attributes in process `syz.5.233'. [ 50.724332][ T4327] loop5: detected capacity change from 0 to 128 [ 50.724823][ T4326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 50.742669][ T4326] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 50.749249][ T4326] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 50.757051][ T4326] vhci_hcd vhci_hcd.0: Device attached [ 50.762585][ T4328] netlink: 48 bytes leftover after parsing attributes in process `syz.3.235'. [ 50.773854][ T4327] 7]zW_Z"j&: attempt to access beyond end of device [ 50.773854][ T4327] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 50.801447][ T4329] vhci_hcd: connection closed [ 50.802319][ T311] vhci_hcd: stop threads [ 50.811446][ T311] vhci_hcd: release socket [ 50.815999][ T311] vhci_hcd: disconnect device [ 50.827702][ T4327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.839534][ T4328] loop3: detected capacity change from 0 to 1024 [ 50.846489][ T4328] EXT4-fs: Ignoring removed nobh option [ 50.850407][ T4327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.852710][ T4328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.872358][ T4328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.891573][ T4328] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 50.903207][ T4328] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 50.914841][ T4328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 51.059520][ T4349] loop0: detected capacity change from 0 to 128 [ 51.267551][ T4356] sctp: [Deprecated]: syz.0.249 (pid 4356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 51.267551][ T4356] Use struct sctp_sack_info instead [ 51.320713][ T4358] loop1: detected capacity change from 0 to 128 [ 51.355441][ T4359] loop0: detected capacity change from 0 to 1024 [ 51.362630][ T4359] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.374915][ T4359] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.249: Invalid block bitmap block 0 in block_group 0 [ 51.391094][ T4359] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.249: Failed to acquire dquot type 0 [ 51.403471][ T4359] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.249: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.408114][ T3299] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 51.418365][ T4359] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.249: Invalid inode bitmap blk 0 in block_group 0 [ 51.424603][ T3299] FAT-fs (loop1): Filesystem has been set read-only [ 51.441504][ T36] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:2: Failed to release dquot type 0 [ 51.455217][ T4359] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 51.456623][ T3397] kworker/u8:8: attempt to access beyond end of device [ 51.456623][ T3397] loop5: rw=1, sector=153, nr_sectors = 888 limit=128 [ 51.471096][ T4359] EXT4-fs (loop0): 1 orphan inode deleted [ 51.484887][ T4359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.526707][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.670275][ T4376] netlink: 3 bytes leftover after parsing attributes in process `syz.5.257'. [ 51.691352][ T4376] 1X: renamed from 60X [ 51.691972][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.706305][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 51.706321][ T29] audit: type=1326 audit(1737572610.949:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4378 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 51.735930][ T29] audit: type=1326 audit(1737572610.949:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4378 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 51.762175][ T29] audit: type=1326 audit(1737572610.949:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4378 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 51.785585][ T29] audit: type=1326 audit(1737572610.949:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4378 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 51.785673][ T29] audit: type=1326 audit(1737572610.959:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4378 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 51.785711][ T29] audit: type=1326 audit(1737572610.959:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4378 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 51.785741][ T29] audit: type=1326 audit(1737572610.959:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4378 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 51.785819][ T29] audit: type=1326 audit(1737572610.959:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4378 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 51.809143][ T4376] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 51.907970][ T4389] FAULT_INJECTION: forcing a failure. [ 51.907970][ T4389] name failslab, interval 1, probability 0, space 0, times 0 [ 51.918434][ T29] audit: type=1326 audit(1737572610.959:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4378 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 51.931141][ T4389] CPU: 0 UID: 0 PID: 4389 Comm: syz.3.262 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 51.931212][ T4389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 51.931227][ T4389] Call Trace: [ 51.931236][ T4389] [ 51.931245][ T4389] dump_stack_lvl+0xf2/0x150 [ 51.931361][ T4389] dump_stack+0x15/0x1a [ 51.931399][ T4389] should_fail_ex+0x223/0x230 [ 51.931434][ T4389] should_failslab+0x8f/0xb0 [ 51.931474][ T4389] kmem_cache_alloc_node_noprof+0x59/0x320 [ 51.931630][ T4389] ? __alloc_skb+0x10b/0x310 [ 51.931668][ T4389] __alloc_skb+0x10b/0x310 [ 51.931704][ T4389] ? audit_log_start+0x34c/0x6b0 [ 51.931787][ T4389] audit_log_start+0x368/0x6b0 [ 51.931819][ T4389] audit_seccomp+0x4b/0x130 [ 51.931923][ T4389] __seccomp_filter+0x6fa/0x1180 [ 51.931962][ T4389] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 51.932029][ T4389] ? vfs_write+0x596/0x920 [ 51.932069][ T4389] __secure_computing+0x9f/0x1c0 [ 51.932108][ T4389] syscall_trace_enter+0xd1/0x1f0 [ 51.932148][ T4389] ? fpregs_assert_state_consistent+0x83/0xa0 [ 51.932212][ T4389] do_syscall_64+0xaa/0x1c0 [ 51.932250][ T4389] ? clear_bhb_loop+0x55/0xb0 [ 51.932334][ T4389] ? clear_bhb_loop+0x55/0xb0 [ 51.932393][ T4389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.932481][ T4389] RIP: 0033:0x7fb7e97f5d29 [ 51.932495][ T4389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.932511][ T4389] RSP: 002b:00007fb7e7e61038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a8 [ 51.932532][ T4389] RAX: ffffffffffffffda RBX: 00007fb7e99e5fa0 RCX: 00007fb7e97f5d29 [ 51.932547][ T4389] RDX: 0000000000000000 RSI: 0000000000000017 RDI: ffffffffffffffff [ 51.932561][ T4389] RBP: 00007fb7e7e61090 R08: 0000000000000000 R09: 0000000000000000 [ 51.932575][ T4389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.932670][ T4389] R13: 0000000000000000 R14: 00007fb7e99e5fa0 R15: 00007ffe1153e458 [ 51.932691][ T4389] [ 51.932703][ T4389] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 51.959962][ T4391] loop5: detected capacity change from 0 to 128 [ 52.201165][ T4397] loop3: detected capacity change from 0 to 2048 [ 52.211213][ T4391] 7]zW_Z"j&: attempt to access beyond end of device [ 52.211213][ T4391] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 52.238871][ T4391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.257670][ T4391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.294181][ T4373] chnl_net:caif_netlink_parms(): no params data found [ 52.294193][ T4397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.336560][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.672747][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.680004][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.694529][ T4373] bridge_slave_0: entered allmulticast mode [ 52.701049][ T4373] bridge_slave_0: entered promiscuous mode [ 52.708257][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.715430][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.722683][ T4373] bridge_slave_1: entered allmulticast mode [ 52.729724][ T4373] bridge_slave_1: entered promiscuous mode [ 52.759177][ T4373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.769963][ T4373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.783813][ T4415] netlink: 48 bytes leftover after parsing attributes in process `syz.3.266'. [ 52.799508][ T4415] loop3: detected capacity change from 0 to 1024 [ 52.806354][ T4415] EXT4-fs: Ignoring removed nobh option [ 52.807645][ T4373] team0: Port device team_slave_0 added [ 52.817838][ T4415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.820024][ T4373] team0: Port device team_slave_1 added [ 52.845968][ T4373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.850556][ T4415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.853041][ T4373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.891493][ T4373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.902364][ T4415] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 52.902858][ T4373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.914478][ T4415] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 52.919720][ T4373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.956122][ T4373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.968211][ T4415] netlink: 'syz.3.266': attribute type 13 has an invalid length. [ 53.022485][ T4373] hsr_slave_0: entered promiscuous mode [ 53.030470][ T28] kworker/u8:1: attempt to access beyond end of device [ 53.030470][ T28] loop5: rw=1, sector=153, nr_sectors = 888 limit=128 [ 53.045323][ T4373] hsr_slave_1: entered promiscuous mode [ 53.051518][ T4373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.062601][ T4373] Cannot create hsr debugfs directory [ 53.139235][ T4373] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 53.148253][ T4373] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 53.158729][ T4373] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 53.166004][ T4427] netlink: 48 bytes leftover after parsing attributes in process `syz.0.270'. [ 53.177566][ T4373] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 53.183367][ T4429] loop5: detected capacity change from 0 to 512 [ 53.191607][ T4429] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 53.211664][ T4427] loop0: detected capacity change from 0 to 1024 [ 53.218776][ T4427] EXT4-fs: Ignoring removed nobh option [ 53.224812][ T4427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.231689][ T4373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.249245][ T4373] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.251413][ T4427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.257564][ T4429] EXT4-fs (loop5): 1 truncate cleaned up [ 53.277118][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.277285][ T4429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.284210][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.310187][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.317285][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.325622][ T4427] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 53.335211][ T4373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.346330][ T4373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.376628][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.379496][ T4427] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 53.402356][ T4427] netlink: 'syz.0.270': attribute type 13 has an invalid length. [ 53.427139][ T4373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.530541][ T4373] veth0_vlan: entered promiscuous mode [ 53.539301][ T4373] veth1_vlan: entered promiscuous mode [ 53.557915][ T4373] veth0_macvtap: entered promiscuous mode [ 53.565498][ T4373] veth1_macvtap: entered promiscuous mode [ 53.580314][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.591012][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.600921][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.611519][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.621596][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.632089][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.642847][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.644731][ T4373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.670251][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.674642][ T4459] netlink: 3 bytes leftover after parsing attributes in process `syz.3.274'. [ 53.680724][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.680738][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.680754][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.680774][ T4373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.680789][ T4373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.686064][ T4373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.750387][ T4459] 0X: renamed from 61X [ 53.760454][ T4459] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 53.778118][ T4373] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.786839][ T4373] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.795659][ T4373] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.796699][ T4463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.277'. [ 53.804727][ T4373] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.853469][ T4466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.278'. [ 53.881067][ T4468] hsr_slave_0: left promiscuous mode [ 53.888785][ T4468] hsr_slave_1: left promiscuous mode [ 53.945075][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.140326][ T4491] netlink: 3 bytes leftover after parsing attributes in process `syz.3.286'. [ 54.151001][ T4491] 1X: renamed from 60X [ 54.157452][ T4492] netlink: 48 bytes leftover after parsing attributes in process `syz.2.284'. [ 54.173792][ T4491] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 54.173939][ T4492] loop2: detected capacity change from 0 to 1024 [ 54.199269][ T4492] EXT4-fs: Ignoring removed nobh option [ 54.205302][ T4492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.219081][ T4492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.233406][ T4492] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 54.263611][ T4495] loop3: detected capacity change from 0 to 128 [ 54.274684][ T4495] 7]zW_Z"j&: attempt to access beyond end of device [ 54.274684][ T4495] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 54.300410][ T4495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.317724][ T4495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.363369][ T4492] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 54.374411][ T4492] netlink: 'syz.2.284': attribute type 13 has an invalid length. [ 54.842792][ T311] kworker/u8:5: attempt to access beyond end of device [ 54.842792][ T311] loop3: rw=1, sector=153, nr_sectors = 888 limit=128 [ 54.871587][ T4501] FAULT_INJECTION: forcing a failure. [ 54.871587][ T4501] name failslab, interval 1, probability 0, space 0, times 0 [ 54.884260][ T4501] CPU: 0 UID: 0 PID: 4501 Comm: syz.3.289 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 54.884358][ T4501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 54.884373][ T4501] Call Trace: [ 54.884381][ T4501] [ 54.884389][ T4501] dump_stack_lvl+0xf2/0x150 [ 54.884433][ T4501] dump_stack+0x15/0x1a [ 54.884468][ T4501] should_fail_ex+0x223/0x230 [ 54.884561][ T4501] should_failslab+0x8f/0xb0 [ 54.884616][ T4501] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 54.884649][ T4501] ? sidtab_sid2str_get+0xb8/0x140 [ 54.884723][ T4501] kmemdup_noprof+0x2a/0x60 [ 54.884762][ T4501] sidtab_sid2str_get+0xb8/0x140 [ 54.884831][ T4501] security_sid_to_context_core+0x1eb/0x2f0 [ 54.884858][ T4501] security_sid_to_context+0x27/0x30 [ 54.884882][ T4501] selinux_lsmprop_to_secctx+0x68/0xf0 [ 54.884909][ T4501] security_lsmprop_to_secctx+0x40/0x80 [ 54.885010][ T4501] audit_log_task_context+0x76/0x180 [ 54.885035][ T4501] audit_log_task+0xf9/0x1c0 [ 54.885056][ T4501] audit_seccomp+0x68/0x130 [ 54.885075][ T4501] __seccomp_filter+0x6fa/0x1180 [ 54.885104][ T4501] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 54.885133][ T4501] ? vfs_write+0x596/0x920 [ 54.885164][ T4501] __secure_computing+0x9f/0x1c0 [ 54.885231][ T4501] syscall_trace_enter+0xd1/0x1f0 [ 54.885259][ T4501] ? fpregs_assert_state_consistent+0x83/0xa0 [ 54.885317][ T4501] do_syscall_64+0xaa/0x1c0 [ 54.885345][ T4501] ? clear_bhb_loop+0x55/0xb0 [ 54.885373][ T4501] ? clear_bhb_loop+0x55/0xb0 [ 54.885413][ T4501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.885471][ T4501] RIP: 0033:0x7fb7e97f5d29 [ 54.885483][ T4501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.885498][ T4501] RSP: 002b:00007fb7e7e61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 54.885513][ T4501] RAX: ffffffffffffffda RBX: 00007fb7e99e5fa0 RCX: 00007fb7e97f5d29 [ 54.885524][ T4501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.885570][ T4501] RBP: 00007fb7e7e61090 R08: 0000000000000000 R09: 0000000000000000 [ 54.885580][ T4501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.885665][ T4501] R13: 0000000000000000 R14: 00007fb7e99e5fa0 R15: 00007ffe1153e458 [ 54.885681][ T4501] [ 55.128947][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.150546][ T4510] loop2: detected capacity change from 0 to 128 [ 55.255216][ T4518] loop3: detected capacity change from 0 to 2048 [ 55.256083][ T4520] netlink: 3 bytes leftover after parsing attributes in process `syz.2.297'. [ 55.270870][ T4520] 1X: renamed from 60X [ 55.277452][ T4520] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 55.289200][ T4518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.316382][ T4524] sd 0:0:1:0: device reset [ 55.328091][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.367134][ T4526] loop2: detected capacity change from 0 to 2048 [ 55.390732][ T4526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.420241][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.467566][ T4543] 9pnet_fd: Insufficient options for proto=fd [ 55.531146][ T4545] 9pnet_fd: Insufficient options for proto=fd [ 55.695377][ T4561] loop2: detected capacity change from 0 to 128 [ 55.721195][ T4563] SELinux: syz.3.313 (4563) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 55.770205][ T4569] SELinux: syz.3.316 (4569) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 55.785163][ T4571] loop2: detected capacity change from 0 to 128 [ 55.815527][ T4573] loop6: detected capacity change from 0 to 128 [ 55.849290][ T4580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.320'. [ 55.871861][ T4582] sctp: [Deprecated]: syz.6.322 (pid 4582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 55.871861][ T4582] Use struct sctp_sack_info instead [ 55.907357][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'. [ 55.924298][ T4589] FAULT_INJECTION: forcing a failure. [ 55.924298][ T4589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.934827][ T4591] loop3: detected capacity change from 0 to 128 [ 55.937448][ T4589] CPU: 1 UID: 0 PID: 4589 Comm: syz.2.325 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 55.937539][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 55.937555][ T4589] Call Trace: [ 55.937563][ T4589] [ 55.937572][ T4589] dump_stack_lvl+0xf2/0x150 [ 55.937621][ T4589] dump_stack+0x15/0x1a [ 55.937735][ T4589] should_fail_ex+0x223/0x230 [ 55.937768][ T4589] should_fail+0xb/0x10 [ 55.937797][ T4589] should_fail_usercopy+0x1a/0x20 [ 55.937899][ T4589] _copy_to_user+0x20/0xa0 [ 55.937951][ T4589] simple_read_from_buffer+0xa0/0x110 [ 55.937990][ T4589] proc_fail_nth_read+0xf9/0x140 [ 55.938031][ T4589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.938146][ T4589] vfs_read+0x1a2/0x700 [ 55.938178][ T4589] ? selinux_capable+0x1f2/0x260 [ 55.938205][ T4589] ? __rcu_read_unlock+0x4e/0x70 [ 55.938244][ T4589] ? __fget_files+0x17c/0x1c0 [ 55.938346][ T4589] ksys_read+0xe8/0x1b0 [ 55.938381][ T4589] __x64_sys_read+0x42/0x50 [ 55.938416][ T4589] x64_sys_call+0x2874/0x2dc0 [ 55.938442][ T4589] do_syscall_64+0xc9/0x1c0 [ 55.938488][ T4589] ? clear_bhb_loop+0x55/0xb0 [ 55.938533][ T4589] ? clear_bhb_loop+0x55/0xb0 [ 55.938572][ T4589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.938650][ T4589] RIP: 0033:0x7f613521473c [ 55.938668][ T4589] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 55.938689][ T4589] RSP: 002b:00007f6133881030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.938711][ T4589] RAX: ffffffffffffffda RBX: 00007f6135405fa0 RCX: 00007f613521473c [ 55.938726][ T4589] RDX: 000000000000000f RSI: 00007f61338810a0 RDI: 0000000000000003 [ 55.938740][ T4589] RBP: 00007f6133881090 R08: 0000000000000000 R09: 0000000000000000 [ 55.938753][ T4589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.938804][ T4589] R13: 0000000000000001 R14: 00007f6135405fa0 R15: 00007ffc4e074838 [ 55.938825][ T4589] [ 56.143084][ T4596] hsr_slave_0: left promiscuous mode [ 56.156096][ T4596] hsr_slave_1: left promiscuous mode [ 56.239437][ T4607] SELinux: syz.3.331 (4607) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 56.344224][ T4618] loop0: detected capacity change from 0 to 128 [ 56.376014][ T4620] sd 0:0:1:0: device reset [ 56.420438][ T4624] loop3: detected capacity change from 0 to 128 [ 56.477622][ T4626] loop3: detected capacity change from 0 to 128 [ 56.567718][ T4632] loop6: detected capacity change from 0 to 8192 [ 56.725699][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 56.725716][ T29] audit: type=1326 audit(1737572615.969:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa525d29 code=0x7ffc0000 [ 56.726170][ T4648] sd 0:0:1:0: device reset [ 56.732071][ T29] audit: type=1326 audit(1737572615.969:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa525d29 code=0x7ffc0000 [ 56.782490][ T29] audit: type=1326 audit(1737572615.969:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6fa524690 code=0x7ffc0000 [ 56.805657][ T29] audit: type=1326 audit(1737572615.969:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa525d29 code=0x7ffc0000 [ 56.829006][ T29] audit: type=1326 audit(1737572615.969:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6fa525d29 code=0x7ffc0000 [ 56.852487][ T29] audit: type=1326 audit(1737572616.059:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa525d29 code=0x7ffc0000 [ 56.875623][ T29] audit: type=1326 audit(1737572616.059:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6fa525d29 code=0x7ffc0000 [ 56.935669][ T29] audit: type=1400 audit(1737572616.169:1612): avc: denied { bind } for pid=4652 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.955084][ T29] audit: type=1400 audit(1737572616.169:1613): avc: denied { read write } for pid=4652 comm="syz.0.350" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 56.971828][ T4657] loop3: detected capacity change from 0 to 128 [ 56.978613][ T29] audit: type=1400 audit(1737572616.169:1614): avc: denied { open } for pid=4652 comm="syz.0.350" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 57.039574][ T4664] SELinux: syz.5.354 (4664) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 57.263068][ T4677] sd 0:0:1:0: device reset [ 57.980117][ T4704] SELinux: syz.3.370 (4704) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 58.023223][ T4708] __nla_validate_parse: 2 callbacks suppressed [ 58.023242][ T4708] netlink: 24 bytes leftover after parsing attributes in process `syz.5.373'. [ 58.138309][ T4725] loop0: detected capacity change from 0 to 128 [ 58.173100][ T4729] SELinux: syz.3.382 (4729) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 58.201758][ T4719] netlink: 8 bytes leftover after parsing attributes in process `+}'. [ 58.221887][ T4719] $H: renamed from bond0 (while UP) [ 58.239867][ T4719] $H: entered promiscuous mode [ 58.244949][ T4719] bond_slave_0: entered promiscuous mode [ 58.250805][ T4719] bond_slave_1: entered promiscuous mode [ 58.317527][ T4741] netlink: 24 bytes leftover after parsing attributes in process `syz.5.386'. [ 58.385869][ T4751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.390'. [ 58.824401][ T4768] netlink: 48 bytes leftover after parsing attributes in process `syz.0.391'. [ 58.841438][ T4768] loop0: detected capacity change from 0 to 1024 [ 58.849371][ T4768] EXT4-fs: Ignoring removed nobh option [ 58.855489][ T4768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.884166][ T4773] netlink: 'syz.2.395': attribute type 39 has an invalid length. [ 58.921929][ T4768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.941390][ T4768] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 58.956682][ T4768] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 58.986325][ T4768] netlink: 'syz.0.391': attribute type 13 has an invalid length. [ 58.994182][ T4768] netlink: 'syz.0.391': attribute type 27 has an invalid length. [ 59.022163][ T4781] loop5: detected capacity change from 0 to 128 [ 59.028905][ T4775] hsr_slave_0: left promiscuous mode [ 59.034796][ T4775] hsr_slave_1: left promiscuous mode [ 59.136896][ T4788] tipc: Started in network mode [ 59.141976][ T4788] tipc: Node identity 663a20300a74797, cluster identity 4711 [ 59.149430][ T4788] tipc: Enabling of bearer rejected, failed to enable media [ 59.514051][ T4813] loop5: detected capacity change from 0 to 2048 [ 59.583018][ T4813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.683795][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.751266][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.951854][ T4821] loop3: detected capacity change from 0 to 1024 [ 59.960873][ T4821] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 60.001601][ T4821] ALSA: seq fatal error: cannot create timer (-16) [ 60.008578][ T4825] FAULT_INJECTION: forcing a failure. [ 60.008578][ T4825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.021713][ T4825] CPU: 0 UID: 0 PID: 4825 Comm: syz.5.413 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 60.021737][ T4825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 60.021748][ T4825] Call Trace: [ 60.021754][ T4825] [ 60.021761][ T4825] dump_stack_lvl+0xf2/0x150 [ 60.021855][ T4825] dump_stack+0x15/0x1a [ 60.021905][ T4825] should_fail_ex+0x223/0x230 [ 60.021949][ T4825] should_fail+0xb/0x10 [ 60.021970][ T4825] should_fail_usercopy+0x1a/0x20 [ 60.021994][ T4825] strncpy_from_user+0x25/0x210 [ 60.022014][ T4825] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 60.022036][ T4825] ? getname_flags+0x81/0x3b0 [ 60.022097][ T4825] getname_flags+0xb0/0x3b0 [ 60.022124][ T4825] __x64_sys_rename+0x33/0x70 [ 60.022146][ T4825] x64_sys_call+0x2b1c/0x2dc0 [ 60.022236][ T4825] do_syscall_64+0xc9/0x1c0 [ 60.022270][ T4825] ? clear_bhb_loop+0x55/0xb0 [ 60.022308][ T4825] ? clear_bhb_loop+0x55/0xb0 [ 60.022407][ T4825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.022462][ T4825] RIP: 0033:0x7f898c735d29 [ 60.022475][ T4825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.022489][ T4825] RSP: 002b:00007f898ada7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 60.022515][ T4825] RAX: ffffffffffffffda RBX: 00007f898c925fa0 RCX: 00007f898c735d29 [ 60.022525][ T4825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000580 [ 60.022560][ T4825] RBP: 00007f898ada7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.022569][ T4825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.022579][ T4825] R13: 0000000000000000 R14: 00007f898c925fa0 R15: 00007fff3af41f98 [ 60.022649][ T4825] [ 60.310137][ T4847] loop5: detected capacity change from 0 to 128 [ 60.322496][ T4847] 7]zW_Z"j&: attempt to access beyond end of device [ 60.322496][ T4847] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 60.353614][ T4847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.372436][ T4847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.479063][ T4857] loop2: detected capacity change from 0 to 8192 [ 60.931338][ T36] kworker/u8:2: attempt to access beyond end of device [ 60.931338][ T36] loop5: rw=1, sector=153, nr_sectors = 888 limit=128 [ 60.956361][ T4865] loop0: detected capacity change from 0 to 8192 [ 61.249070][ T4879] loop6: detected capacity change from 0 to 2048 [ 61.761267][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 61.761282][ T29] audit: type=1400 audit(1737572621.009:1804): avc: denied { read write } for pid=4894 comm="syz.6.435" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.878762][ T29] audit: type=1400 audit(1737572621.039:1805): avc: denied { open } for pid=4894 comm="syz.6.435" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.902082][ T29] audit: type=1400 audit(1737572621.059:1806): avc: denied { write } for pid=4894 comm="syz.6.435" path="socket:[9776]" dev="sockfs" ino=9776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 61.926261][ T29] audit: type=1400 audit(1737572621.059:1807): avc: denied { nlmsg_write } for pid=4894 comm="syz.6.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 62.027438][ T4909] SELinux: syz.3.442 (4909) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 62.028735][ T4911] loop6: detected capacity change from 0 to 2048 [ 62.049312][ T4913] SELinux: syz.2.444 (4913) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 62.081969][ T4911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.112508][ T29] audit: type=1326 audit(1737572621.349:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6135215d29 code=0x7ffc0000 [ 62.135919][ T29] audit: type=1326 audit(1737572621.349:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6135215d29 code=0x7ffc0000 [ 62.159454][ T29] audit: type=1326 audit(1737572621.349:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6135215d29 code=0x7ffc0000 [ 62.182866][ T29] audit: type=1326 audit(1737572621.349:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6135215d29 code=0x7ffc0000 [ 62.206224][ T29] audit: type=1326 audit(1737572621.359:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6135215d29 code=0x7ffc0000 [ 62.244905][ T29] audit: type=1326 audit(1737572621.359:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6135215d29 code=0x7ffc0000 [ 62.285425][ T4373] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.304935][ T4927] sctp: [Deprecated]: syz.5.450 (pid 4927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 62.304935][ T4927] Use struct sctp_sack_info instead [ 62.339928][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.447'. [ 62.348831][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.447'. [ 62.434662][ T4944] SELinux: syz.3.455 (4944) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 62.453605][ T4946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.456'. [ 62.566719][ T3360] IPVS: starting estimator thread 0... [ 62.667388][ T4949] IPVS: using max 2256 ests per chain, 112800 per kthread [ 62.714091][ T4953] loop3: detected capacity change from 0 to 2048 [ 62.761874][ T4953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.834890][ T4963] sctp: [Deprecated]: syz.2.460 (pid 4963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 62.834890][ T4963] Use struct sctp_sack_info instead [ 62.887137][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.331700][ T4979] SELinux: syz.5.467 (4979) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 63.540648][ T4991] loop3: detected capacity change from 0 to 8192 [ 63.656459][ T5005] netlink: 3 bytes leftover after parsing attributes in process `syz.2.478'. [ 63.665699][ T5005] 0X: renamed from 61X [ 63.679120][ T5005] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 63.785900][ T5012] loop2: detected capacity change from 0 to 128 [ 63.814231][ T5012] 7]zW_Z"j&: attempt to access beyond end of device [ 63.814231][ T5012] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 63.839467][ T5012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.847985][ T5012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.906586][ T5022] loop5: detected capacity change from 0 to 128 [ 64.044818][ T28] kworker/u8:1: attempt to access beyond end of device [ 64.044818][ T28] loop5: rw=1, sector=129, nr_sectors = 912 limit=128 [ 64.081504][ T5027] 9pnet_virtio: no channels available for device [ 64.332901][ T5032] netlink: 24 bytes leftover after parsing attributes in process `syz.5.488'. [ 64.392561][ T5034] netlink: 3 bytes leftover after parsing attributes in process `syz.6.490'. [ 64.401635][ T5034] 0X: renamed from caif0 [ 64.410160][ T54] kworker/u8:4: attempt to access beyond end of device [ 64.410160][ T54] loop2: rw=1, sector=153, nr_sectors = 888 limit=128 [ 64.426248][ T5034] 0X: entered allmulticast mode [ 64.431515][ T5034] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 64.453471][ T5036] mmap: syz.5.492 (5036) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.653503][ T5055] loop6: detected capacity change from 0 to 8192 [ 64.665585][ T5063] SELinux: syz.3.501 (5063) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 64.695983][ T5065] loop3: detected capacity change from 0 to 128 [ 64.712010][ T5065] 7]zW_Z"j&: attempt to access beyond end of device [ 64.712010][ T5065] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 64.906486][ T5065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.941417][ T5065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.099111][ T5074] $H: renamed from bond0 (while UP) [ 65.109306][ T5074] $H: entered promiscuous mode [ 65.114394][ T5074] bond_slave_0: entered promiscuous mode [ 65.120226][ T5074] bond_slave_1: entered promiscuous mode [ 65.181211][ T5076] FAULT_INJECTION: forcing a failure. [ 65.181211][ T5076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.194345][ T5076] CPU: 1 UID: 0 PID: 5076 Comm: syz.5.504 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 65.194369][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.194447][ T5076] Call Trace: [ 65.194455][ T5076] [ 65.194464][ T5076] dump_stack_lvl+0xf2/0x150 [ 65.194511][ T5076] dump_stack+0x15/0x1a [ 65.194556][ T5076] should_fail_ex+0x223/0x230 [ 65.194647][ T5076] should_fail+0xb/0x10 [ 65.194677][ T5076] should_fail_usercopy+0x1a/0x20 [ 65.194711][ T5076] _copy_from_user+0x1c/0xa0 [ 65.194769][ T5076] set_selection_user+0x48/0xa0 [ 65.194832][ T5076] tioclinux+0x2b0/0x430 [ 65.194873][ T5076] vt_ioctl+0x84f/0x1810 [ 65.194910][ T5076] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 65.194946][ T5076] tty_ioctl+0x815/0xbe0 [ 65.195038][ T5076] ? __pfx_tty_ioctl+0x10/0x10 [ 65.195062][ T5076] __se_sys_ioctl+0xc9/0x140 [ 65.195093][ T5076] __x64_sys_ioctl+0x43/0x50 [ 65.195171][ T5076] x64_sys_call+0x1690/0x2dc0 [ 65.195199][ T5076] do_syscall_64+0xc9/0x1c0 [ 65.195230][ T5076] ? clear_bhb_loop+0x55/0xb0 [ 65.195267][ T5076] ? clear_bhb_loop+0x55/0xb0 [ 65.195341][ T5076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.195381][ T5076] RIP: 0033:0x7f898c735d29 [ 65.195478][ T5076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.195574][ T5076] RSP: 002b:00007f898ada7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.195597][ T5076] RAX: ffffffffffffffda RBX: 00007f898c925fa0 RCX: 00007f898c735d29 [ 65.195716][ T5076] RDX: 0000000020001900 RSI: 000000000000541c RDI: 0000000000000004 [ 65.195731][ T5076] RBP: 00007f898ada7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.195746][ T5076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.195760][ T5076] R13: 0000000000000000 R14: 00007f898c925fa0 R15: 00007fff3af41f98 [ 65.195781][ T5076] [ 65.506005][ T5087] FAULT_INJECTION: forcing a failure. [ 65.506005][ T5087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.519190][ T5087] CPU: 0 UID: 0 PID: 5087 Comm: syz.6.509 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 65.519220][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.519281][ T5087] Call Trace: [ 65.519288][ T5087] [ 65.519295][ T5087] dump_stack_lvl+0xf2/0x150 [ 65.519457][ T5087] dump_stack+0x15/0x1a [ 65.519509][ T5087] should_fail_ex+0x223/0x230 [ 65.519536][ T5087] should_fail+0xb/0x10 [ 65.519631][ T5087] should_fail_usercopy+0x1a/0x20 [ 65.519658][ T5087] _copy_to_user+0x20/0xa0 [ 65.519689][ T5087] simple_read_from_buffer+0xa0/0x110 [ 65.519797][ T5087] proc_fail_nth_read+0xf9/0x140 [ 65.519831][ T5087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.519861][ T5087] vfs_read+0x1a2/0x700 [ 65.519887][ T5087] ? __rcu_read_unlock+0x4e/0x70 [ 65.519919][ T5087] ? __fget_files+0x17c/0x1c0 [ 65.519969][ T5087] ksys_read+0xe8/0x1b0 [ 65.520019][ T5087] __x64_sys_read+0x42/0x50 [ 65.520053][ T5087] x64_sys_call+0x2874/0x2dc0 [ 65.520073][ T5087] do_syscall_64+0xc9/0x1c0 [ 65.520104][ T5087] ? clear_bhb_loop+0x55/0xb0 [ 65.520194][ T5087] ? clear_bhb_loop+0x55/0xb0 [ 65.520232][ T5087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.520266][ T5087] RIP: 0033:0x7ff72672473c [ 65.520282][ T5087] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 65.520299][ T5087] RSP: 002b:00007ff724d97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.520374][ T5087] RAX: ffffffffffffffda RBX: 00007ff726915fa0 RCX: 00007ff72672473c [ 65.520389][ T5087] RDX: 000000000000000f RSI: 00007ff724d970a0 RDI: 0000000000000003 [ 65.520402][ T5087] RBP: 00007ff724d97090 R08: 0000000000000000 R09: 0000000000000000 [ 65.520416][ T5087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.520430][ T5087] R13: 0000000000000001 R14: 00007ff726915fa0 R15: 00007ffc49dc8e78 [ 65.520448][ T5087] [ 65.727488][ T5085] loop2: detected capacity change from 0 to 128 [ 65.773646][ T311] kworker/u8:5: attempt to access beyond end of device [ 65.773646][ T311] loop3: rw=1, sector=153, nr_sectors = 888 limit=128 [ 65.782493][ T5090] 9pnet_fd: Insufficient options for proto=fd [ 65.829383][ T5092] SELinux: syz.3.511 (5092) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 65.871509][ T5096] loop5: detected capacity change from 0 to 128 [ 66.136384][ T5116] loop6: detected capacity change from 0 to 128 [ 66.193471][ T5112] loop5: detected capacity change from 0 to 8192 [ 66.221090][ T5122] sd 0:0:1:0: device reset [ 66.351231][ T5128] SELinux: syz.6.525 (5128) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 66.439003][ T5130] $H: renamed from bond0 (while UP) [ 66.446619][ T5130] $H: entered promiscuous mode [ 66.451792][ T5130] bond_slave_0: entered promiscuous mode [ 66.457554][ T5130] bond_slave_1: entered promiscuous mode [ 66.613145][ T5136] loop6: detected capacity change from 0 to 2048 [ 66.631940][ T5136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.659329][ T4373] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.863548][ T5146] loop6: detected capacity change from 0 to 512 [ 66.929016][ T5146] EXT4-fs (loop6): orphan cleanup on readonly fs [ 66.936694][ T5146] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.530: bg 0: block 248: padding at end of block bitmap is not set [ 66.953148][ T5146] __quota_error: 243 callbacks suppressed [ 66.953165][ T5146] Quota error (device loop6): write_blk: dquota write failed [ 66.966391][ T5146] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 66.976343][ T5146] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.530: Failed to acquire dquot type 1 [ 66.990142][ T5146] EXT4-fs (loop6): 1 truncate cleaned up [ 66.996725][ T5146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.155254][ T5151] sd 0:0:1:0: device reset [ 67.167058][ T29] audit: type=1326 audit(1737572626.399:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 67.190174][ T29] audit: type=1326 audit(1737572626.399:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 67.213107][ T29] audit: type=1326 audit(1737572626.399:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7e97f4690 code=0x7ffc0000 [ 67.236084][ T29] audit: type=1326 audit(1737572626.399:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 67.259174][ T29] audit: type=1326 audit(1737572626.399:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 67.282092][ T29] audit: type=1326 audit(1737572626.399:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 67.304965][ T29] audit: type=1326 audit(1737572626.409:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 67.327871][ T29] audit: type=1326 audit(1737572626.409:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e97f5d29 code=0x7ffc0000 [ 67.384515][ T5153] netlink: 3 bytes leftover after parsing attributes in process `syz.3.535'. [ 67.395975][ T5153] 0X: renamed from 61X [ 67.402992][ T5153] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 67.455240][ T5155] SELinux: syz.3.536 (5155) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 67.609615][ T5161] netlink: 76 bytes leftover after parsing attributes in process `syz.3.539'. [ 67.775454][ T5170] FAULT_INJECTION: forcing a failure. [ 67.775454][ T5170] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 67.788804][ T5170] CPU: 0 UID: 0 PID: 5170 Comm: syz.0.532 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 67.788850][ T5170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 67.788863][ T5170] Call Trace: [ 67.788870][ T5170] [ 67.788878][ T5170] dump_stack_lvl+0xf2/0x150 [ 67.788915][ T5170] dump_stack+0x15/0x1a [ 67.789019][ T5170] should_fail_ex+0x223/0x230 [ 67.789116][ T5170] should_fail_alloc_page+0xfd/0x110 [ 67.789158][ T5170] __alloc_pages_noprof+0x109/0x340 [ 67.789202][ T5170] alloc_pages_mpol_noprof+0xb8/0x260 [ 67.789273][ T5170] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 67.789302][ T5170] do_wp_page+0x64b/0x2340 [ 67.789326][ T5170] ? __rcu_read_lock+0x36/0x50 [ 67.789368][ T5170] handle_mm_fault+0xc63/0x2ac0 [ 67.789484][ T5170] exc_page_fault+0x3b9/0x650 [ 67.789512][ T5170] asm_exc_page_fault+0x26/0x30 [ 67.789590][ T5170] RIP: 0033:0x7ff6fa4df885 [ 67.789607][ T5170] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 67.789627][ T5170] RSP: 002b:00007ff6f8b8fde0 EFLAGS: 00010293 [ 67.789644][ T5170] RAX: 0000000000000008 RBX: 00007ff6fb247d60 RCX: 0000000000000000 [ 67.789716][ T5170] RDX: 0000000000000000 RSI: 00007ff6fa5daf3e RDI: 00007ff6fb247d60 [ 67.789730][ T5170] RBP: 00007ff6f8b8ff00 R08: 0000000000000000 R09: 0000000000000005 [ 67.789744][ T5170] R10: 0000000000000000 R11: 0000000000000293 R12: 00007ff6fa5daae0 [ 67.789758][ T5170] R13: 0000000000000016 R14: 00007ff6fa6eb440 R15: 0000000000000000 [ 67.789777][ T5170] [ 67.789787][ T5170] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 68.041035][ T5182] loop3: detected capacity change from 0 to 128 [ 68.054261][ T5177] FAULT_INJECTION: forcing a failure. [ 68.054261][ T5177] name failslab, interval 1, probability 0, space 0, times 0 [ 68.066987][ T5177] CPU: 1 UID: 0 PID: 5177 Comm: syz.0.543 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 68.067017][ T5177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.067032][ T5177] Call Trace: [ 68.067103][ T5177] [ 68.067112][ T5177] dump_stack_lvl+0xf2/0x150 [ 68.067158][ T5177] dump_stack+0x15/0x1a [ 68.067191][ T5177] should_fail_ex+0x223/0x230 [ 68.067255][ T5177] should_failslab+0x8f/0xb0 [ 68.067295][ T5177] kmem_cache_alloc_noprof+0x52/0x320 [ 68.067325][ T5177] ? copy_fs_struct+0x31/0x110 [ 68.067354][ T5177] copy_fs_struct+0x31/0x110 [ 68.067457][ T5177] __se_sys_setns+0x34c/0xef0 [ 68.067492][ T5177] ? trace_sys_enter+0xcd/0x110 [ 68.067525][ T5177] __x64_sys_setns+0x31/0x40 [ 68.067572][ T5177] x64_sys_call+0x16ec/0x2dc0 [ 68.067610][ T5177] do_syscall_64+0xc9/0x1c0 [ 68.067666][ T5177] ? clear_bhb_loop+0x55/0xb0 [ 68.067744][ T5177] ? clear_bhb_loop+0x55/0xb0 [ 68.067776][ T5177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.067806][ T5177] RIP: 0033:0x7ff6fa525d29 [ 68.067819][ T5177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.067856][ T5177] RSP: 002b:00007ff6f8b91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 68.067874][ T5177] RAX: ffffffffffffffda RBX: 00007ff6fa715fa0 RCX: 00007ff6fa525d29 [ 68.067886][ T5177] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000006 [ 68.067896][ T5177] RBP: 00007ff6f8b91090 R08: 0000000000000000 R09: 0000000000000000 [ 68.067907][ T5177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.067918][ T5177] R13: 0000000000000000 R14: 00007ff6fa715fa0 R15: 00007ffe51bdabb8 [ 68.067938][ T5177] [ 68.308620][ T5187] SELinux: syz.3.547 (5187) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 68.418416][ T4373] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.451693][ T5195] netlink: 140 bytes leftover after parsing attributes in process `syz.0.551'. [ 68.465337][ T5200] netlink: 3 bytes leftover after parsing attributes in process `syz.6.552'. [ 68.476149][ T5200] 1X: renamed from 60X [ 68.476629][ T5199] loop3: detected capacity change from 0 to 128 [ 68.491728][ T5200] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 68.590354][ T5214] SELinux: syz.0.559 (5214) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 68.627122][ T5206] loop6: detected capacity change from 0 to 8192 [ 68.628877][ T5216] loop0: detected capacity change from 0 to 1024 [ 68.649222][ T5216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.686395][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.873130][ T5243] SELinux: syz.3.570 (5243) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 68.935691][ T5250] 9pnet_fd: Insufficient options for proto=fd [ 69.003925][ T5258] netlink: 3 bytes leftover after parsing attributes in process `syz.5.576'. [ 69.017297][ T5258] 0X: renamed from 61X [ 69.029416][ T5258] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 69.171043][ T5228] ================================================================== [ 69.173534][ T5279] loop5: detected capacity change from 0 to 128 [ 69.179216][ T5228] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 69.193991][ T5228] [ 69.196322][ T5228] write to 0xffff888106783cf0 of 8 bytes by task 5223 on cpu 1: [ 69.203965][ T5228] sync_mapping_buffers+0x159/0x7c0 [ 69.209202][ T5228] fat_file_fsync+0xa7/0x100 [ 69.213808][ T5228] vfs_fsync_range+0x116/0x130 [ 69.218595][ T5228] generic_file_write_iter+0x185/0x1c0 [ 69.224072][ T5228] iter_file_splice_write+0x5f1/0x980 [ 69.229465][ T5228] direct_splice_actor+0x160/0x2c0 [ 69.234588][ T5228] splice_direct_to_actor+0x302/0x670 [ 69.239976][ T5228] do_splice_direct+0xd7/0x150 [ 69.244749][ T5228] do_sendfile+0x398/0x660 [ 69.249174][ T5228] __x64_sys_sendfile64+0x110/0x150 [ 69.254377][ T5228] x64_sys_call+0xfbd/0x2dc0 [ 69.259149][ T5228] do_syscall_64+0xc9/0x1c0 [ 69.263684][ T5228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.269601][ T5228] [ 69.271928][ T5228] read to 0xffff888106783cf0 of 8 bytes by task 5228 on cpu 0: [ 69.279471][ T5228] mark_buffer_dirty_inode+0x96/0x1c0 [ 69.284965][ T5228] fat_mirror_bhs+0x241/0x330 [ 69.289663][ T5228] fat_ent_write+0xcc/0xe0 [ 69.294179][ T5228] fat_chain_add+0x15f/0x400 [ 69.298775][ T5228] fat_get_block+0x46b/0x5e0 [ 69.303368][ T5228] __block_write_begin_int+0x417/0xfa0 [ 69.308844][ T5228] cont_write_begin+0x546/0x860 [ 69.313712][ T5228] fat_write_begin+0x51/0xe0 [ 69.318307][ T5228] generic_perform_write+0x1a8/0x4a0 [ 69.323605][ T5228] __generic_file_write_iter+0xa1/0x120 [ 69.329196][ T5228] generic_file_write_iter+0x77/0x1c0 [ 69.334578][ T5228] vfs_write+0x77f/0x920 [ 69.338830][ T5228] ksys_write+0xe8/0x1b0 [ 69.343083][ T5228] __x64_sys_write+0x42/0x50 [ 69.347690][ T5228] x64_sys_call+0x287e/0x2dc0 [ 69.352371][ T5228] do_syscall_64+0xc9/0x1c0 [ 69.356891][ T5228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.362802][ T5228] [ 69.365129][ T5228] value changed: 0xffff888106572008 -> 0x0000000000000000 [ 69.372237][ T5228] [ 69.374665][ T5228] Reported by Kernel Concurrency Sanitizer on: [ 69.380812][ T5228] CPU: 0 UID: 0 PID: 5228 Comm: syz.6.556 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 69.391055][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 69.401118][ T5228] ==================================================================