last executing test programs: 1m38.434615989s ago: executing program 2 (id=2021): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x328, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000400000000e5370953001500000018110000", @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x18) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@loopback, 0x4e22, 0x0, 0x4, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x32}, 0xa, @in=@multicast2, 0xfffffffd, 0x4, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r8}}, 0x48) 1m38.398871369s ago: executing program 2 (id=2024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 1m38.339691009s ago: executing program 2 (id=2026): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x6, 0x3, 0x5fc}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000980)={r1, @in={{0x2, 0x4e20, @loopback}}, 0x3, 0x9}, &(0x7f0000000340)=0x90) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000008bfa100010000002007010000f8ffffffb702000034c59d8bb70300000000000085000000720000009500"/81], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) syz_read_part_table(0x5c6, &(0x7f0000000380)="$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") preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0x69) close(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) rt_tgsigqueueinfo(r7, 0x0, 0x14, &(0x7f0000000380)={0x19, 0x200, 0x8}) sched_setaffinity(r7, 0x8, &(0x7f0000000000)=0x7fffffffffffffff) 1m38.134246459s ago: executing program 2 (id=2029): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e394456", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3"], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x633, 0x0, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}}, {@in6=@loopback, 0xfffffffd, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x140}}, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0xc4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kfree\x00', r9}, 0x18) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = epoll_create(0x3) epoll_pwait2(r12, &(0x7f0000001280)=[{}], 0x1, 0x0, 0x0, 0x0) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="710612090b"], 0x5) 1m37.88672912s ago: executing program 2 (id=2033): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 1m37.726941131s ago: executing program 2 (id=2038): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x20}}], 0x1, 0x0) 1m37.717558151s ago: executing program 32 (id=2038): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x20}}], 0x1, 0x0) 34.250805707s ago: executing program 5 (id=2887): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x503, 0x0, 0x20000, {0x0, 0x0, 0x0, 0x0, 0xf02d}}, 0x20}}, 0x0) 34.155292487s ago: executing program 5 (id=2890): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x200000000000081}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002840)=0x0) mount$9p_tcp(&(0x7f0000000700), &(0x7f0000000d40)='./file0\x00', &(0x7f0000001680), 0x3002081, &(0x7f0000002880)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_loose}, {@version_u}, {@version_u}, {@access_user}, {@nodevmap}, {@access_user}], [{@euid_lt}, {@audit}, {@smackfsroot}, {@fowner_lt}, {@audit}, {@smackfshat={'smackfshat', 0x3d, 'bsddf'}}, {@euid_lt={'euid<', r6}}]}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000400)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@dioread_lock}, {}]}, 0xfe, 0x450, &(0x7f0000000d80)="$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") close(r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r9, &(0x7f0000001600)=[{{&(0x7f0000000500)=@ieee802154, 0x80, &(0x7f0000000180)=[{&(0x7f0000000580)=""/113, 0x71}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000000780)=""/172, 0xac}, {&(0x7f0000000840)=""/197, 0xc5}], 0x4, &(0x7f0000000940)=""/88, 0x58}, 0xfffffe59}, {{&(0x7f0000000a00)=@tipc, 0x80, &(0x7f0000001500)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/166, 0xa6}, {&(0x7f0000000a80)=""/85, 0x55}, {&(0x7f0000000c80)=""/168, 0xa8}, {&(0x7f0000001240)=""/239, 0xef}, {&(0x7f0000001340)=""/214, 0xd6}, {&(0x7f0000001440)=""/175, 0xaf}], 0x7, &(0x7f0000001580)=""/112, 0x70}, 0x5}], 0x2, 0x40000000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x8080) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030001000000050003000000000005000300000000000500030000000000050003000200000008000200020000"], 0x50}}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6010100400140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22637a1690cd15f051b4ec7c4dc93fa08a9c485bb0a24fd045374fda18b4e7a1965c8f4a3948e9c4b0a040eb06053cb61b2add0c70b92ce8997907638a5fcc2516e93be9d1c0b3bd275ae2e240d7f15d3c9e16bc8bb51ee0b0897b248e52f6cc7b7b0822b50522", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c2000090788000"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="3800000003140100ef000000000000000900020073797a44000000000800410073697700140033006c6f000000001e000000000000000000"], 0x38}}, 0x0) 33.269526599s ago: executing program 5 (id=2903): getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000980)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x3, 0x9}, &(0x7f0000000340)=0x90) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000008bfa100010000002007010000f8ffffffb702000034c59d8bb70300000000000085000000720000009500"/81], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0x69) close(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) rt_tgsigqueueinfo(r2, 0x0, 0x14, &(0x7f0000000380)={0x19, 0x200, 0x8}) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x7fffffffffffffff) 32.84237755s ago: executing program 5 (id=2905): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@acl}, {@stripe}]}, 0x3, 0x45d, &(0x7f00000013c0)="$eJzs201sFFUcAPD/TL9EwFbEDz7U+hUbP1oKqBw8qNHEAyYmesBj0xaCFGpoTYQQLcbgyRgTj0bi0bM3T3oxxpOJV70bEmK48HFaMzsztLvsLnTZZYH9/ZLtvrfvTd/778zbfTNvJ4C+NZ79SSI2RcTfETGaZ2srjOdPly6cmr184dRsEpXKe/8l1XoXL5yaLauW220sMhNpRPpFEjsatLt04uSRmYWF+eNFfmr56EdTSydOvnj46Myh+UPzx3bv27d3z/QrL+9+qSNxZn26uP3TxZ3b3v7gm3f2f1UTf10cHTLeqvCZSqXDzfXW5jXpZLCHHWFdBiIi211D1fE/GgOxuvNG463Pe9o5oKsqlUplY/PilQpwF0uiNm/IQ78ov+hHiudG58GvdWfqcVs4/3p+ApTFfal45CWDkRZ1hurObztpPCIO/PT92QMrV85Gd65DAADU+CWb/7yQzzvKR16SxkNr6t1XrA2NRcT9EbElIh6IiK0R8WBEte7DEfHIOtuvXyS5dv6TnmsrsBuUzf9eLda2aud/5ewvxgaK3OZq/EPJwcML87uK92Qihkay/HSLNn5986+vm5VV538rV86Wj6z9ci5Y9OPc4EjtNnMzyzM3E/Na509HbB9sFH9ydSUgiYhtEbG9zTYOP/fjzmZl14+/hQ6sM1V+iHg23/8rURd/KWm9Pjl1TyzM75oqj4pr/fHnmXebtX9T8XdAtv/vbXj8X41/LFm7Xru0/jbO/PNl03Oado//4eT9anq4eO2TmeXl49MRw8n+vNNrX9+9um2ZL+tn8U9kATYY/1ti9Z3YERHZQfxoRDwWEY8XfX8iIp6MiKdaxP/7G09/2H783ZXFP7eu/b+aGI76VxonBo789nNNo2PXxH+5Zfwje6tPE0X2Rj7/bqRf7R3NAAAAcOdJI2JTJOnk1XSaTk7mv5ffGpEuLC4tP39w8eNjc/k9AmMRaXmla3TN9dDp4rQ+z5+OiPynBWX5nuK68bcDG6r5ydnFhbleBw99bmOT8Z/5d6DXvQO6zv1a0L+Mf+hfxj/0L+Mf+leD8b+hF/0Abr1G3/+f9aAfwK1XN/5bL/t9192+ALeW83/oX8Y/9C/jH/rS0oa4/k3yLRPlf2pz87s2EUO3RTe6loi0991Ie/0mtEgM3eHjonefSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ30fwAAAP//EiLV4A==") r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 32.53564868s ago: executing program 5 (id=2910): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') preadv(r1, &(0x7f0000000840)=[{0x0}], 0x1, 0x0, 0x0) 32.170871661s ago: executing program 5 (id=2916): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x23, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x7800, 0x20, 0x0, 0x8c2, {{0x1b, 0x4, 0x0, 0x15, 0x6c, 0x64, 0x0, 0x2, 0x4, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x5d, 0x0, 0x3, [0x1, 0x9, 0xa, 0x0, 0x5]}, @generic={0xc2, 0x2}, @rr={0x7, 0x3, 0x8b}, @lsrr={0x83, 0x3, 0xcc}, @cipso={0x86, 0x29, 0x1, [{0x1, 0xd, "35e4a3aa62e15d199d972d"}, {0x0, 0x5, "c5c396"}, {0x6, 0xf, "bb01bf10f6f717df72ecc50fc9"}, {0x2, 0x2}]}, @lsrr={0x83, 0xb, 0x24, [@dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x1f}]}]}}}}}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r3, &(0x7f0000000880)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r4 = dup2(r3, r3) write$P9_RSTATFS(r4, &(0x7f00000000c0)={0x43, 0x9, 0x0, {0x0, 0xfffffffd, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x4a}}, 0x43) 32.105613851s ago: executing program 33 (id=2916): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x23, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x7800, 0x20, 0x0, 0x8c2, {{0x1b, 0x4, 0x0, 0x15, 0x6c, 0x64, 0x0, 0x2, 0x4, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x5d, 0x0, 0x3, [0x1, 0x9, 0xa, 0x0, 0x5]}, @generic={0xc2, 0x2}, @rr={0x7, 0x3, 0x8b}, @lsrr={0x83, 0x3, 0xcc}, @cipso={0x86, 0x29, 0x1, [{0x1, 0xd, "35e4a3aa62e15d199d972d"}, {0x0, 0x5, "c5c396"}, {0x6, 0xf, "bb01bf10f6f717df72ecc50fc9"}, {0x2, 0x2}]}, @lsrr={0x83, 0xb, 0x24, [@dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x1f}]}]}}}}}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r3, &(0x7f0000000880)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r4 = dup2(r3, r3) write$P9_RSTATFS(r4, &(0x7f00000000c0)={0x43, 0x9, 0x0, {0x0, 0xfffffffd, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x4a}}, 0x43) 3.856056972s ago: executing program 0 (id=3305): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffce6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup2(r2, r2) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x0, 0x2}}, 0x26) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {0x0, 0x8bc}], 0x2}, 0x0) 3.808878232s ago: executing program 0 (id=3306): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) preadv(r1, &(0x7f0000002500)=[{0x0}], 0x1, 0x1000, 0x42e) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) unshare(0x64000600) 2.260446185s ago: executing program 6 (id=3318): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000500"/21], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r2, @ANYBLOB="08001c00", @ANYRES32=r3], 0x24}}, 0x0) sched_getscheduler(r3) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) 2.131589525s ago: executing program 6 (id=3320): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = memfd_secret(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000194, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgget$private(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r1, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e4d, @void, @value}, 0x94) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000001880), 0x4) sync() sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1000000000009}, 0x18) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x2b, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000feffffff000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018250000", @ANYRES32=r0, @ANYBLOB="000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708007b8ab8fb00000000bfb89e757faea20000000000000702ffffff7f00000000000008000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000851000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000cb1f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000093803000700000018270000", @ANYRES32=r2, @ANYBLOB="000000001e0700009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x88, &(0x7f00000014c0)=""/136, 0x41000, 0x1, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000016c0)={0x1, 0xc, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001700)=[r0], &(0x7f0000001740)=[{0x2, 0x2, 0x4, 0xe}, {0x5, 0x1, 0x7}, {0x5, 0x1, 0xc}, {0x1, 0x2, 0x6, 0x7}, {0x7c, 0x2, 0x10, 0xc}, {0x0, 0x2, 0x9, 0x1}], 0x10, 0x1, @void, @value}, 0x94) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000170aff07"], 0x2c}}, 0x0) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) 2.112545915s ago: executing program 0 (id=3321): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r0, r1, 0x0) 1.866430646s ago: executing program 0 (id=3325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000001380004802800018007000100637400001c0002800800014000000002080002400000001505000300040000000c000180080001006e6174000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r5, @ANYRES16=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 1.682367796s ago: executing program 0 (id=3327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 1.366155877s ago: executing program 4 (id=3331): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast1, @dev}, &(0x7f0000000480)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x6, 0x8, 0x9, 0x0, r0, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000ceda1993c2", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ea00000000000000000000000000000000000000000000c1c8dc69a42a160f1881f55a850b30dcc75e28f18c2d4f751bba5cd6b1f93698fee42013a1d7aba12df2442e8f278efda2d1902b8f287ba379afc51f3f4521794dd3cd75f7067a7f25"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001ff, 0x802) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x2, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1001e, 0x0, 0xc5, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000400000080000000000000d8ad42b7c5e93980526c78f34730baaec19465619970ff1b5371309268abbb65b18a926a9e769ddc48292dce681165f982725ef368247b2959c64af71a21ae11970603ef364af60b22", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r10, 0x5425, 0x0) r11 = io_uring_setup(0x2ad5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x211}) close(r11) ioctl$TCSETSW2(r10, 0x5425, 0x0) 1.322748397s ago: executing program 3 (id=3332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030030000000600000000028890081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.206112767s ago: executing program 3 (id=3333): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) bind$tipc(r1, 0x0, 0x0) 1.152871778s ago: executing program 6 (id=3335): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r0, r1, 0x0) 1.135021697s ago: executing program 3 (id=3336): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0) fgetxattr(r2, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000500)='fuseblk\x00', 0x0) fsmount(r3, 0x0, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) 1.090311668s ago: executing program 6 (id=3338): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) preadv(r1, &(0x7f0000002500)=[{&(0x7f0000002400)=""/24, 0x18}, {0x0}], 0x2, 0x1000, 0x42e) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) unshare(0x64000600) 960.864478ms ago: executing program 1 (id=3339): getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000980)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x3, 0x9}, &(0x7f0000000340)=0x90) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000008bfa100010000002007010000f8ffffffb702000034c59d8bb70300000000000085000000720000009500"/81], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0x69) close(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) rt_tgsigqueueinfo(r2, 0x0, 0x14, &(0x7f0000000380)={0x19, 0x200, 0x8}) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x7fffffffffffffff) 960.090798ms ago: executing program 4 (id=3340): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030030000000600000000028890081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) setxattr$security_selinux(&(0x7f0000000040)='./cgroup/pids.max\x00', &(0x7f0000000440), &(0x7f0000000140)='system_u:object_r:hald_log_t:s0\x00', 0xd7, 0x1) 919.554118ms ago: executing program 3 (id=3341): socketpair$unix(0x1, 0x2, 0x0, 0x0) gettid() r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 834.713218ms ago: executing program 3 (id=3342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000080601080000000000000000054e00080900020073797a31bf0f14bd0500010007040000000000000000000005000100070000000500010007000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f0000000100)=0x43, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r4}, 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=@canfd={{0x4, 0x0, 0x1}, 0x26, 0x0, 0x0, 0x0, "7356bc5bc0c3485bdd05e2438e03527120e0857d525dccc513ad0ed0d8f9ac2564c6ccc995a8f8b99eb394e91076f70c6cfe975f1996081b4ab428b925ebd26e"}, 0x48}, 0x2}, 0x0) 623.117289ms ago: executing program 4 (id=3343): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000300)='./file0\x00', 0x414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c0048451600000000005389b3685c0836456d62cffe21fa010ae8354173037f7d719c2a"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000001340)='./file1\x00') 542.785179ms ago: executing program 1 (id=3344): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000300)='./file0\x00', 0x414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c0048451600000000005389b3685c0836456d62cffe21fa010ae8354173037f7d719c2a"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000001340)='./file1\x00') 478.568709ms ago: executing program 3 (id=3345): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = memfd_secret(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000194, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgget$private(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r1, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e4d, @void, @value}, 0x94) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000001880), 0x4) sync() sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1000000000009}, 0x18) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x2b, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000feffffff000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018250000", @ANYRES32=r0, @ANYBLOB="000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708007b8ab8fb00000000bfb89e757faea20000000000000702ffffff7f00000000000008000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000851000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000cb1f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000093803000700000018270000", @ANYRES32=r2, @ANYBLOB="000000001e0700009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x88, &(0x7f00000014c0)=""/136, 0x41000, 0x1, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000016c0)={0x1, 0xc, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001700)=[r0], &(0x7f0000001740)=[{0x2, 0x2, 0x4, 0xe}, {0x5, 0x1, 0x7}, {0x5, 0x1, 0xc}, {0x1, 0x2, 0x6, 0x7}, {0x7c, 0x2, 0x10, 0xc}, {0x0, 0x2, 0x9, 0x1}], 0x10, 0x1, @void, @value}, 0x94) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000170aff07"], 0x2c}}, 0x0) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) 402.181819ms ago: executing program 1 (id=3346): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x4, 0x7c1, &(0x7f0000001a00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c1880, 0x0) 401.588799ms ago: executing program 4 (id=3347): r0 = syz_io_uring_setup(0x5c2, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 375.065519ms ago: executing program 4 (id=3348): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AB\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000c00)={0x19}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x4044000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0xfffffffffffffe24, &(0x7f0000000780)={&(0x7f0000000240)={0x30, r7, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x7}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x4000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000003880)=ANY=[@ANYBLOB="9c1a0000", @ANYRES16=r7, @ANYBLOB="00082dbd7000ffdbdf25890000002c001d801c0000800500090000000000040004000c00020007000000000000000c00008005000c000000000038031d802000008005000800020000000c000300030000000000000005000a0000000000ac0100807c010d804000018014000500faff0500ff0f06000f0008000c0009000a0001006c1602011b600000050007000200000014000500d4000300002404000f00060007000200500000800500060000000000050007000000000005000700000000000500040000000000140005000300080003000700070009000800050017000200353f4e3d1e201d4f2b4e4203212f210a32521500d00002800500060002000000240002001321273d103f2e101952555347092847443a034d091052391b242ba119220c460c000100036c0154031b1b043a00020047270f4e29183c134c1556490b46062626311f040e000b3b1200440328272f020850353a52302923451b2100553b50434d4842421057000014000300f2a404000500090006000600070005000500040000000000340002002d332509280a440506001353c109463c2d25182c541c135517211857521840273047064b08415138191608302b0c303e05000600020000001800018014000500ff0f820008000800020001000100008005000b0000000000050007007b00000005000c000200000006000500f30000000c00020001000000000000003c00008005000a00000000000500060000000000050006000100000005000c00020000000400040005000b00010000000c000300c40000000000000038000080040004000500080072000000260002000600000000000000050009000100000005000b000100000004000400050008001f0000001800008005000c00000000000c0002000e00000000000000480000800c000300010000000000000005000b0001000000040004000c000200050000000000000005000b0001000000050008006500000005000c000000000005000c00000000001800008005000b000100000005000a00000000000400040028000080050009000000000005000a0001000000050007002e0000000c0003000600000000000000200000800400040006000500b60000000500080088000000050009000100000034000080050008001900000006000500f7000000050009000100000005000c00000000000c0002000500000000000000040004008c041d80d800008006000500c5000000b4000d80b00003801400050004000200ff0301000400530de4b107000500070002000000050001006c0000003f0002000a433a152e380f2b2810363a1b2f152423433b48483f38091809202f4432195111000e043f4a53403821333953070b13360a413512354114423b19001400050003000800ff030a00040006000a0003001d0002005310232b10464118303a151d3f57084501573c4a37021c043a00000014000500070003007f000500050005001000000005000a000000000005000b000000000005000800b3000000b003008005000a000000000005000b000000000094030d8038000380080001003705013005000700010000000500060002000000050007000100000005000700010000000a0002002f551f0941390000800001800500060002000000220001000909051809051d0912044809020b0424680c04014806181b301b3660050b00000500040002000000050004000200000005000600010000003700020051572e105100523e1601213003014a552025511844411153380f573d472c40473d081b25253e55392d4f4b47193b4f3c3401550098000280050006000100000047000200ee5344413e4b1a2a05273c00490549232551191e28343a102f4649415100361a2d3115511e120c5134212d404839221e4f001e5003224c505514383d024619501b172000100001001848606c48093005240504040500070002000000140003000400ffff0300070007000800010480ff050006000000000005000400020000000500060000000000440002801400050001000000020002006800070000009b0d14000500d500ff7f0010050003000800ed0b05000500070001000000050004000100000005000700000000006000008005000700010000001400030007000b00050006000400040096000900050007000100000005000400000000002f00020040541b315109310f0c0235091e20100636031624540b47554a1d3948185429113148554c4c3c061d3c28500050000180490002004e46402e2e491e4230062531220a0d14160f51073043551c3145323d51364925133029314646483b47512023153d543052381b4137494938102e2a461e44271f0851270d2b000000900003800500060001000000140003000500fbff030017ff040005000100040005000400000000000c00020001203b4451113d5214000300c0c2060013ca8100090000040060570746000200440b1c291a561c012a163e243c30382b245256013c490230121f2c0518182b1a2547064b481e35272c3c2b2a033a2701424d4320340820541d2b1f0b31093c1e16200000040003803000028005000700020000001a0001000c6c6c6c0b6c3736040312090c040b48361205020330000005000400010000008800018005000400000000001400050002000100000104000200800005000800140005000a00020005000001590012800600040005000600020000004400020039221c3138181f40394b1138270a34060f352e54001f14141e242f2040104908332829130135203e082d373a312f383251402154111f1d491102550e51290032050001000b000000050006000000000084001d804000008005000b00000000000500090000000000060005001000000024000d802000028004000100150001006624054848300536120b180c1b060312020000000c00008005000c000000000020000080050006000100000005000900000000000c000200050000000000000014000080050009000000000005000c00000000003c011d80580000800500060001000000050008007700000005000b00000000000500090000000000050006000100000005000700d600000024000d8020000080050007000000000014000300400001000000000109009322f8ff0700e00000800500060000000000d0000d802c00038005000600000000000c000200085123032e12470b0a00010005010305063000000500060002000000600001801400050005000300090039ef01040600f90908002c0002000e3354472e1d0b393e03472c4d0a2b2b000338280f281e29282122392d4d3000210f48451e39002d1b000100246c300b166c06047803090300480b0960480b09363003001c000280140005000700050002000600ffff070006000900040001002400028005000400010000001700020014341019290f1a26104d303a1103250e4c4719000400040084001d800c00008005000a0000000000180000800c000300050000000000000005000800150000001800008005000700960000000c000300d4071217000000004400008005000900000000000400040005000b00000000000c000200ff070000000000000c000200dc00000000000000040004000600050012000000050007003b00000020001d801c000080050006000100000005000b0000000000050006000100000000061d804c0000800c000200ffffffffffffffff05000a00000000000c000300010100000000000005000c000000000005000a000100000005000c000100000005000b00000000000500090000000000d80200800500070065000000cc020d805000008005000700010000000e0002001d0d4345532e0d50303400001300020021485426213e0137360331490f110d00180001006c03361b061b0616160c1218093c0003026c1209050007000000000020000180050001000500000014000300a001ff0f0300400010000800018000002400008005000600010000000500070001000000100002004e0901374543191c4904413968000080070001003603050005000400010000000600010003060000050006000100000005000700020000001400030003004c080800020091100400000003000a0001001606160b1202000005000400000000001400050004000200a6cb07000200010402000800340000801d00010007163348480c484836180b2424366c6b0309486c6c366c1802000000050007000100000005000600010000000c000080050006000100000050000180140003000000020009000500070001010600018014000300ff07090000101fbb52000000000206000500040001000000190001000103096c0c65020c6c096c240c00050c120018604800000068000380050006000100000005000400020000003e00020024041217434113534909571e34481e160e49521609242840184a4634083f40444c2f484228080008001e5249503d160c743b5624480129260f020000140005000200bbdbf000ff0ff8ff06000600030088000180050004000200000017000200002f3203198b0b45324628502950163c1232030014000300020006000000000007008d0502000400050006000100000005000700a3000000140003000500060004000101010002000700ff0f2b0002004534094f3550315126454c1b15343e12643d12152f54334930434a410d131a2422460b36000801004c000180050004000000000014000500bf00ff005707040010000500100009002c000200370d0a3f4e44481027000107532e2c3940330917775153544c4e201a3b241b48271a513e561b055284010080050009000100000005000b000100000050000d804c00008005000400010000000a00010003180248484b000010000100480105000f144818091b1203050007000100000014000500ff01100d08007b000002040001007f00050007000200000005000800270000000c0003000010000000000000050009000000000004010d808c0002804d00020031051800380e3a272930573e372e44470f552320113714262d42232c2a2232444439401944372750434f3449010731431511014f084a41260a163f231c250d005335433212112f114c00000005000600000000001400030008000900fcff060002000200090004000500060002000000140003000000b508090000100800ff010d00090074000080140005000100040006000d0072009bf7bcb002000500060000000000140003000200fbffff070a0008000900060000ff380002004b09103b554d4d100000000218023356352f00403e33312640123c222914234d1e4b2422354d472317113a481918203d2a3b14100500010001000000f800008005000b00010000000c0003000200000000000000c0000d800c00018005000600000000009000008005000600020000001f0001006c48026c48360b1802163004043060010502300b180c600606361200050006000000000014000500f8008c742a03ff7f050080000a0000482400010016010b480c12160b090c2436366c426c1b6c0903090b360218012c0202240b240500060001000000140003002300040085000000ff018a100000790d0500060000000000200000800500040001000000090001000913040504000000050004000200000006000500af00000005000c000000000005000b000000000005000c000200000040000080050007000d00000005000c000000000005000b00000000000500090000000000050008002000000005000900010000000c00020001000000000000001c000080050008008a00000005000800d500000005000b0001000000e0091d80340300800c0003000800000000000000a0010d807c00008020000200412143480f085056510f36423d521a114f3b1718002a283c1b354041140005000800050005000000ff7f0100ff0ff8ff05000700000000001400030009000500ff7f0800000008000700003c1400030005000800300ffcff0500080002000200140005000000ff0f001002000300080009000800180000801400050009000200090003000500f7ff03000e00180001801400030006000100040084110800010000010500280000801400050009000400af00fbff810001000008f009070001000b010b0005000700000000005000028005000400010000001400050003000100b91c08004000090003000500140005001e0d1000ff0301000500050001000500140005000900f7ff05000100000005000100010007000100033601003000028021000100181b050305012c180b120916020c0103127f30240424d30c1662480516000000050006000200000048000380230001003b16120416120100241b1b03361602180216160c090c304806053048240230001e000100093030065b0436601804066c18023018160305180960160c24240000050008007900000005000a000000000005000600010000000c000300fdffffffffffffff0c000300060000000000000006000500f90000004c010d809c0001800500070000000000050004000100000005000700020000000500070001000000460002000f101d483416282150503752101422233d054a3a1e0949532a173c2a2801400057140c252919574b093a192f0b46180612204f01501237091b0d3c37390a511a35390000050006000000000014000300080062080700020009009ffe08000300140005008c0a1d000500030080010b0002006bf8440001800a00010012003603303000000500070002000000140003001000060008000300d70007000300b9ff1000010003010b02360103481b060c0d05000400000000002000018014000300040002003200f90f3d0508000f00ff0705000400010000004400018014000300040007000500010010000900a7022f001400030009001000bcbf80f48100050002000000050006000200000010000100360112363603000c481e6c04040002806c0000800c000200ffffffffffffff7f050007004700000005000b000100000005000b000100000005000800200000000400040038000d8034000380140003000001f70f070001006e00010173a2080014000500810000003f00000097dd0e00040000000500070000000000180000800c000200ffffffffffffffff05000c0000000000c80200800500080032000000050008007900000005000900010000009c020d80300003802c000200161039324504273b06552e06231f120028074b48473041013515202140554d3c3648301801380932440003801400050005000400050000000e0000020400020007000200494b480005000600020000001400030002000400e103ff0003000b000200714605000700000000004800028013000100011b060315160148090403010c023600140003000200060000000000040002000800090014000300400a0c000400030081002400430008000500070000000000dc0003801400050004008100470640004f8f0000018007000500060000000000050007000000000014000500030006000a000000010007000500070005000700020000003d0002003e093112285501290f5335360a384c2f4810373e220c312b394b043645371c4726141f3c473c49511c2132212f331a1909083325244e31344700000034000200094f140425422d4d3c4d4e3a1c070920494c0227370554253554064e083a261d373b1d422e1730071811393b3f4a20280500020048000000140005000c0002000800040037000300060039fc050006000100000078000380040002000500040000000000050007000200000014000300b1f6ffff0700070005000500040009000500070000000000050007000200000005000600020000002c000200413b50073e2a4257051c190901195309382d4e2443352f564535353e3a121d38391c23544e2234100500040003000000280001800d0001000c2416a70316600b0500000014000300001000003a9109000b0000000100ff0f3800008005000700020000001800020057111619233c5014511a123d202e401a1131243e1400030004000300018001019f18040006000a0028000380050006000100000005000400010000001400030003000a0000000100000001000500090005000800d700000005000a00000000001c0000800c00020007000000000000000400040005000b000000000040030080050007009f00000005000c000000000005000800d000000005000b00000000000c000200010000000000000010030d800c0002800500060002000000880000800500060002000000050006000000000005000600000000000b0001006c78161805244800140003008000fdfff80790090b007d0701002c0b0500070000000000420002000e11065517250611174513323f0d0c1e22403d403c4b52103b114a2552384d3b0c3e1c1d320b151c4c02190910480f292c552e40004c3b165514450527110000b0000380420002001b06022a3f45510c0a1e404748461d293955374013420d291414361a18520108473534003806032f42312b57300e0415082c473633001a454e5226342420000005000700010000000500070001000000140003000900090008000700070006007f0000021400050000007f00070002000700000008000800140003000500050009000200000008000000060005000400000000001400050007000a000c0006000100da002959ff0f8800018005000700000000002700020029004a274234143147144c4e280c441811404316525227353e4c1e1c115209243a1626001b0001000b09125a6c241b01483602363f0204600302036c6c48120023000200323f094a35374d1114444309430a3101405723392f3b38534901213b0f33240014000300010003000300050034f7000204000f00900001801d0001001b0260241230063016003618487812091b300b60362409246c000000150002001338252a1f0a143e4d07064133103b072a00000005000700010000001400030005000a00ff0317da090001000300060005000400010000001400030004000080030000f8010040000b0009000500070000000000140005000b0066ff090010000400010004000400b0000080050006000100000020000200441845084f04471308082800192a494017130f2225322c5342570b2105000600020000001400050005000000fbffbe000800ffff00000010050007000200000014000300f0ff6af70500000101048100b70001011400030009007908080001000040182305000100050007000100000030000200091c4535520140400e404a3a2c1306002e0f3c1f3810502a48192a46030d0f084013382e123d153426212d1e54001d8038000080050008005000000005000a000000000005000b00010000000c000200080000000000000006000500ed00000005000800b5000000180000800c000200ff7f0000000000000500060000000000"], 0x1a9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x890) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000040), 0x0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x80}}, './file0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newaddr={0x28, 0x14, 0x509, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, @IFA_ADDRESS={0x8, 0xb, @multicast1}]}, 0x28}}, 0x0) 218.67137ms ago: executing program 4 (id=3349): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") io_setup(0x2003, 0x0) io_submit(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ftruncate(r0, 0x100c17a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYRESDEC=0x0, @ANYRES32, @ANYRES8, @ANYRES8], 0x1, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000000)='./file2\x00', 0x3000) 190.050809ms ago: executing program 1 (id=3350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 157.45656ms ago: executing program 6 (id=3351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000001380004802800018007000100637400001c0002800800014000000002080002400000001505000300040000000c000180080001006e6174000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r5, @ANYRES16=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 127.84445ms ago: executing program 1 (id=3352): syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) 39.706699ms ago: executing program 0 (id=3353): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x200000000000081}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002840)=0x0) mount$9p_tcp(&(0x7f0000000700), &(0x7f0000000d40)='./file0\x00', &(0x7f0000001680), 0x3002081, &(0x7f0000002880)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_loose}, {@version_u}, {@version_u}, {@access_user}, {@nodevmap}, {@access_user}], [{@euid_lt}, {@audit}, {@smackfsroot}, {@fowner_lt}, {@audit}, {@smackfshat={'smackfshat', 0x3d, 'bsddf'}}, {@euid_lt={'euid<', r6}}]}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000400)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@dioread_lock}, {}]}, 0xfe, 0x450, &(0x7f0000000d80)="$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") close(r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r9, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)=""/113, 0x71}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000000780)=""/172, 0xac}, {&(0x7f0000000840)=""/197, 0xc5}], 0x4, &(0x7f0000000940)=""/88, 0x58}, 0xfffffe59}, {{&(0x7f0000000a00)=@tipc, 0x80, &(0x7f0000001500)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/166, 0xa6}, {&(0x7f0000000a80)=""/85, 0x55}, {&(0x7f0000000c80)=""/168, 0xa8}, {&(0x7f0000001240)=""/239, 0xef}, {&(0x7f0000001340)=""/214, 0xd6}, {&(0x7f0000001440)=""/175, 0xaf}], 0x7, &(0x7f0000001580)=""/112, 0x70}, 0x5}], 0x2, 0x40000000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x8080) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100040000002c000480050003000100000005000300000000000500030000000000050003000000000005000300020000000800020002000000"], 0x50}}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6010100400140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22637a1690cd15f051b4ec7c4dc93fa08a9c485bb0a24fd045374fda18b4e7a1965c8f4a3948e9c4b0a040eb06053cb61b2add0c70b92ce8997907638a5fcc2516e93be9d1c0b3bd275ae2e240d7f15d3c9e16bc8bb51ee0b0897b248e52f6cc7b7b0822b50522", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="3800000003140100ef000000000000000900020073797a44000000000800410073697700140033006c6f000000001e000000000000000000"], 0x38}}, 0x0) 38.996619ms ago: executing program 1 (id=3354): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030030000000600000000028890081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) setxattr$security_selinux(&(0x7f0000000040)='./cgroup/pids.max\x00', &(0x7f0000000440), &(0x7f0000000140)='system_u:object_r:hald_log_t:s0\x00', 0xd7, 0x1) 0s ago: executing program 6 (id=3355): getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000980)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x3, 0x9}, &(0x7f0000000340)=0x90) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000008bfa100010000002007010000f8ffffffb702000034c59d8bb70300000000000085000000720000009500"/81], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0x69) close(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) rt_tgsigqueueinfo(r2, 0x0, 0x14, &(0x7f0000000380)={0x19, 0x200, 0x8}) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x7fffffffffffffff) kernel console output (not intermixed with test programs): : type=1400 audit(1734030090.662:8734): avc: denied { create } for pid=10987 comm="syz.4.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 221.970294][ T29] audit: type=1400 audit(1734030090.662:8735): avc: denied { write } for pid=10987 comm="syz.4.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 222.024934][ T29] audit: type=1400 audit(1734030090.732:8736): avc: denied { create } for pid=11009 comm="syz.0.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.040075][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2705'. [ 222.044710][ T29] audit: type=1400 audit(1734030090.732:8737): avc: denied { bind } for pid=11009 comm="syz.0.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.044740][ T29] audit: type=1400 audit(1734030090.732:8738): avc: denied { name_bind } for pid=11009 comm="syz.0.2705" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 222.044772][ T29] audit: type=1400 audit(1734030090.732:8739): avc: denied { node_bind } for pid=11009 comm="syz.0.2705" saddr=172.20.20.170 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 222.044929][ T29] audit: type=1400 audit(1734030090.732:8740): avc: denied { create } for pid=11009 comm="syz.0.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.101893][T11013] 9pnet_fd: Insufficient options for proto=fd [ 222.714241][T11025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.732810][T11025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.897338][T11035] lo speed is unknown, defaulting to 1000 [ 223.089174][T11039] tipc: Started in network mode [ 223.094089][T11039] tipc: Node identity 7, cluster identity 9 [ 223.100042][T11039] tipc: Node number set to 7 [ 223.113815][T11039] tipc: Cannot configure node identity twice [ 223.374982][T11063] loop3: detected capacity change from 0 to 1764 [ 223.388756][T11067] loop4: detected capacity change from 0 to 1024 [ 223.395495][T11067] EXT4-fs: Ignoring removed orlov option [ 223.401395][T11063] iso9660: Unknown parameter 'Læçpmpress' [ 223.407220][T11067] EXT4-fs: Ignoring removed nobh option [ 223.453487][T11067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.466072][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2729'. [ 223.491725][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.737114][T11087] loop4: detected capacity change from 0 to 512 [ 223.763107][T11087] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 223.787053][T11087] EXT4-fs: error: could not find journal device path [ 224.024717][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 224.149698][T11108] loop4: detected capacity change from 0 to 512 [ 224.182067][T11108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.214725][T11108] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.339924][T11117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.368483][T11117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.489184][T11113] lo speed is unknown, defaulting to 1000 [ 224.643313][T11127] loop1: detected capacity change from 0 to 2048 [ 224.711311][T11127] loop1: p1 < > p4 [ 224.719661][T11127] loop1: p4 size 8388608 extends beyond EOD, truncated [ 225.151207][T11141] lo speed is unknown, defaulting to 1000 [ 225.401192][T11149] loop1: detected capacity change from 0 to 512 [ 225.458431][T11149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.493066][T11149] ext4 filesystem being mounted at /581/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.540339][T11149] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #12: comm syz.1.2757: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 225.602362][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.603253][T11161] bridge0: port 3(bond0) entered blocking state [ 225.617753][T11161] bridge0: port 3(bond0) entered disabled state [ 225.619215][T11163] loop3: detected capacity change from 0 to 512 [ 225.633713][T11161] bond0: entered allmulticast mode [ 225.638998][T11161] bond_slave_0: entered allmulticast mode [ 225.644752][T11161] bond_slave_1: entered allmulticast mode [ 225.651322][T11163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 225.663726][T11166] loop1: detected capacity change from 0 to 2048 [ 225.671023][T11163] System zones: 1-12 [ 225.676230][T11163] EXT4-fs (loop3): orphan cleanup on readonly fs [ 225.682992][T11163] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2762: bg 0: block 328: padding at end of block bitmap is not set [ 225.687429][T11161] bond0: entered promiscuous mode [ 225.702388][T11161] bond_slave_0: entered promiscuous mode [ 225.708204][T11161] bond_slave_1: entered promiscuous mode [ 225.726764][T11166] loop1: p1 < > p4 [ 225.731185][T11166] loop1: p4 size 8388608 extends beyond EOD, truncated [ 225.739024][T11161] bridge0: port 3(bond0) entered blocking state [ 225.745332][T11161] bridge0: port 3(bond0) entered forwarding state [ 225.762611][T11163] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 225.790292][T11163] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2762: invalid indirect mapped block 65280 (level 0) [ 225.814634][T11167] lo speed is unknown, defaulting to 1000 [ 225.853279][T11163] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2762: attempt to clear invalid blocks 33619980 len 1 [ 225.881007][T11169] loop1: detected capacity change from 0 to 512 [ 225.886172][T11163] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2762: invalid indirect mapped block 1819239214 (level 0) [ 225.915953][T11163] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2762: invalid indirect mapped block 1819239214 (level 1) [ 225.939511][T11163] EXT4-fs (loop3): 1 orphan inode deleted [ 225.946109][T11163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 225.961521][T11169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.974347][T11169] ext4 filesystem being mounted at /583/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.974646][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.000223][T11169] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #12: comm syz.1.2764: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 226.038078][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.461437][T11194] loop1: detected capacity change from 0 to 2048 [ 226.501879][T11194] loop1: p1 < > p4 [ 226.509469][T11194] loop1: p4 size 8388608 extends beyond EOD, truncated [ 226.561580][T11199] loop5: detected capacity change from 0 to 512 [ 226.579957][T11201] loop1: detected capacity change from 0 to 2048 [ 226.589790][T11199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 226.609011][T11199] System zones: 1-12 [ 226.616316][T11199] EXT4-fs (loop5): orphan cleanup on readonly fs [ 226.635980][T11201] loop1: p1 < > p4 [ 226.640126][T11199] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2776: bg 0: block 328: padding at end of block bitmap is not set [ 226.640383][T11201] loop1: p4 size 8388608 extends beyond EOD, truncated [ 226.676697][T11199] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 226.685839][T11199] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2776: invalid indirect mapped block 65280 (level 0) [ 226.703154][T11199] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2776: attempt to clear invalid blocks 33619980 len 1 [ 226.718606][T11199] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2776: invalid indirect mapped block 1819239214 (level 0) [ 226.738664][T11199] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2776: invalid indirect mapped block 1819239214 (level 1) [ 226.789471][T11199] EXT4-fs (loop5): 1 orphan inode deleted [ 226.804606][T11199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 226.826313][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 226.826344][ T29] audit: type=1326 audit(1734030095.542:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 226.833272][T11215] bridge0: port 3(bond0) entered blocking state [ 226.856147][ T29] audit: type=1326 audit(1734030095.542:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 226.862384][T11215] bridge0: port 3(bond0) entered disabled state [ 226.885870][ T29] audit: type=1326 audit(1734030095.542:8970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 226.895110][T11199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.915673][ T29] audit: type=1326 audit(1734030095.542:8971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 226.934536][T11215] bond0: entered allmulticast mode [ 226.948049][ T29] audit: type=1326 audit(1734030095.542:8972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 226.948086][ T29] audit: type=1326 audit(1734030095.542:8973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 226.953195][T11215] bond_slave_0: entered allmulticast mode [ 226.953222][T11215] bond_slave_1: entered allmulticast mode [ 226.955357][T11215] bond0: entered promiscuous mode [ 226.976707][ T29] audit: type=1326 audit(1734030095.542:8974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 227.000169][T11215] bond_slave_0: entered promiscuous mode [ 227.005895][ T29] audit: type=1326 audit(1734030095.542:8975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 227.005927][ T29] audit: type=1326 audit(1734030095.542:8976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 227.005956][ T29] audit: type=1326 audit(1734030095.542:8977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 227.116638][T11215] bond_slave_1: entered promiscuous mode [ 227.133029][T11215] bridge0: port 3(bond0) entered blocking state [ 227.139420][T11215] bridge0: port 3(bond0) entered forwarding state [ 227.167455][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.182865][T11218] lo speed is unknown, defaulting to 1000 [ 227.239357][T11221] IPv6: Can't replace route, no match found [ 227.276599][T11221] loop5: detected capacity change from 0 to 128 [ 227.296390][T11221] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.323307][T11221] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.425334][T11229] loop5: detected capacity change from 0 to 2048 [ 227.497247][T11229] loop5: p1 < > p4 [ 227.503423][T11229] loop5: p4 size 8388608 extends beyond EOD, truncated [ 227.563443][T11238] IPv6: Can't replace route, no match found [ 227.732677][T11249] loop5: detected capacity change from 0 to 512 [ 227.752373][T11249] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 227.762203][T11249] System zones: 1-12 [ 227.766387][T11249] EXT4-fs (loop5): orphan cleanup on readonly fs [ 227.785244][T11249] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2794: bg 0: block 328: padding at end of block bitmap is not set [ 227.898514][T11249] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 227.938017][T11254] loop3: detected capacity change from 0 to 2048 [ 227.959302][T11249] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2794: invalid indirect mapped block 65280 (level 0) [ 228.025674][T11254] loop3: p1 < > p4 [ 228.053190][T11254] loop3: p4 size 8388608 extends beyond EOD, truncated [ 228.121216][T11249] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2794: attempt to clear invalid blocks 33619980 len 1 [ 228.145638][T11249] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2794: invalid indirect mapped block 1819239214 (level 0) [ 228.168133][T11249] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2794: invalid indirect mapped block 1819239214 (level 1) [ 228.220134][T11249] EXT4-fs (loop5): 1 orphan inode deleted [ 228.233776][T11249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 228.286696][T11264] lo speed is unknown, defaulting to 1000 [ 228.314106][ T9083] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.518744][T11268] IPv6: Can't replace route, no match found [ 228.530096][T11268] loop5: detected capacity change from 0 to 128 [ 228.546401][T11268] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.602085][T11268] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.188863][T11303] loop5: detected capacity change from 0 to 512 [ 229.190444][T11307] loop1: detected capacity change from 0 to 2048 [ 229.223400][T11306] loop3: detected capacity change from 0 to 2048 [ 229.232133][T11303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.266177][T11303] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.296914][T11307] loop1: p1 < > p4 [ 229.300973][T11306] loop3: p1 < > p4 [ 229.318161][T11307] loop1: p4 size 8388608 extends beyond EOD, truncated [ 229.325315][T11306] loop3: p4 size 8388608 extends beyond EOD, truncated [ 229.464084][T11314] loop1: detected capacity change from 0 to 2048 [ 229.515218][ T9083] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.537277][T11314] loop1: p1 < > p4 [ 229.544397][T11314] loop1: p4 size 8388608 extends beyond EOD, truncated [ 229.683557][T11324] lo speed is unknown, defaulting to 1000 [ 229.739732][T11333] loop1: detected capacity change from 0 to 2048 [ 229.763639][T11320] loop5: detected capacity change from 0 to 8192 [ 229.805517][T11333] loop1: p1 < > p4 [ 229.825561][T11333] loop1: p4 size 8388608 extends beyond EOD, truncated [ 229.835016][T11338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.941395][T11346] atomic_op ffff888149d20128 conn xmit_atomic 0000000000000000 [ 230.008593][T11347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.099439][T11335] lo speed is unknown, defaulting to 1000 [ 230.388582][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.466406][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.587382][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.658117][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.773611][T11353] lo speed is unknown, defaulting to 1000 [ 230.865286][ T55] bond0: left allmulticast mode [ 230.870761][ T55] bond_slave_0: left allmulticast mode [ 230.876290][ T55] bond_slave_1: left allmulticast mode [ 230.881827][ T55] bond0: left promiscuous mode [ 230.886667][ T55] bond_slave_0: left promiscuous mode [ 230.892258][ T55] bond_slave_1: left promiscuous mode [ 230.897987][ T55] bridge0: port 3(bond0) entered disabled state [ 230.938763][ T55] bridge_slave_1: left allmulticast mode [ 230.944496][ T55] bridge_slave_1: left promiscuous mode [ 230.950297][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.982371][ T55] bridge_slave_0: left allmulticast mode [ 230.988400][ T55] bridge_slave_0: left promiscuous mode [ 230.994127][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.097489][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.112363][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.129844][ T55] bond0 (unregistering): Released all slaves [ 231.131265][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2842'. [ 231.179765][ T55] tipc: Left network mode [ 231.306952][ T55] hsr_slave_0: left promiscuous mode [ 231.325239][T11389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2844'. [ 231.334381][ T55] hsr_slave_1: left promiscuous mode [ 231.340402][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.349535][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.395381][ T55] team0 (unregistering): Port device team_slave_1 removed [ 231.455153][ T55] team0 (unregistering): Port device team_slave_0 removed [ 231.475100][ T11] smc: removing ib device syz1 [ 231.965175][T11353] chnl_net:caif_netlink_parms(): no params data found [ 232.120858][T11353] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.128038][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.135246][T11353] bridge_slave_0: entered allmulticast mode [ 232.141863][T11353] bridge_slave_0: entered promiscuous mode [ 232.148781][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.155933][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.618929][T11353] bridge_slave_1: entered allmulticast mode [ 232.625829][T11353] bridge_slave_1: entered promiscuous mode [ 232.679550][T11353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.693347][T11399] lo speed is unknown, defaulting to 1000 [ 232.700529][T11353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.753979][T11353] team0: Port device team_slave_0 added [ 232.776970][T11353] team0: Port device team_slave_1 added [ 232.916906][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 232.916924][ T29] audit: type=1400 audit(1734030101.632:9296): avc: denied { write } for pid=11426 comm="syz.0.2853" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 232.959090][T11353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.966373][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.992507][T11353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.028042][T11436] loop3: detected capacity change from 0 to 512 [ 233.051137][T11353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.058183][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.084199][T11353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.116369][T11436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.145222][T11436] ext4 filesystem being mounted at /510/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.169732][ T29] audit: type=1326 audit(1734030101.882:9297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11429 comm="syz.4.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 233.193498][ T29] audit: type=1326 audit(1734030101.882:9298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11429 comm="syz.4.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 233.217094][ T29] audit: type=1326 audit(1734030101.882:9299): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11429 comm="syz.4.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 233.241082][ T29] audit: type=1400 audit(1734030101.882:9300): avc: denied { read write } for pid=11435 comm="syz.3.2856" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 233.263828][ T29] audit: type=1400 audit(1734030101.882:9301): avc: denied { open } for pid=11435 comm="syz.3.2856" path="/510/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 233.275232][T11443] loop4: detected capacity change from 0 to 128 [ 233.286841][ T29] audit: type=1326 audit(1734030101.902:9302): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11429 comm="syz.4.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 233.293566][T11443] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 233.316778][ T29] audit: type=1326 audit(1734030101.902:9303): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11429 comm="syz.4.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 233.328947][T11443] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 233.352396][ T29] audit: type=1326 audit(1734030101.902:9304): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11429 comm="syz.4.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 233.385329][ T29] audit: type=1326 audit(1734030101.952:9305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.5.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad2255d19 code=0x7ffc0000 [ 233.406879][T11436] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #12: comm syz.3.2856: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 233.451111][T11444] IPv6: Can't replace route, no match found [ 233.465408][T11353] hsr_slave_0: entered promiscuous mode [ 233.478680][T11353] hsr_slave_1: entered promiscuous mode [ 233.479270][T11442] loop5: detected capacity change from 0 to 128 [ 233.491689][T11442] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 233.503892][T11442] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 233.515047][T11353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.526245][T11353] Cannot create hsr debugfs directory [ 233.538855][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.162846][T11469] loop5: detected capacity change from 0 to 512 [ 234.200035][T11473] loop3: detected capacity change from 0 to 2048 [ 234.210357][T11469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.227962][T11469] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.275452][T11473] loop3: p1 < > p4 [ 234.279955][T11473] loop3: p4 size 8388608 extends beyond EOD, truncated [ 234.334656][ T9083] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.464910][T11485] loop4: detected capacity change from 0 to 512 [ 234.484364][T11487] loop3: detected capacity change from 0 to 1024 [ 234.486910][T11353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.495467][T11487] EXT4-fs: Ignoring removed orlov option [ 234.519302][T11485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.525156][T11487] EXT4-fs: Ignoring removed nobh option [ 234.534904][T11490] siw: device registration error -23 [ 234.548679][T11353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.567832][T11353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.586361][T11487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.601234][T11485] ext4 filesystem being mounted at /535/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.616560][T11353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.675230][T11496] IPv6: Can't replace route, no match found [ 234.698417][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.713905][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.737792][T11496] loop5: detected capacity change from 0 to 128 [ 234.748768][T11496] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 234.770057][T11353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.779393][T11496] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.808073][T11353] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.832549][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.839713][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.861861][T11353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.872383][T11353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.889236][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.896358][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.937624][T11516] loop3: detected capacity change from 0 to 2048 [ 235.944932][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2878'. [ 236.013774][T11353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.025555][T11516] loop3: p1 < > p4 [ 236.030349][T11516] loop3: p4 size 8388608 extends beyond EOD, truncated [ 236.485202][T11353] veth0_vlan: entered promiscuous mode [ 236.493494][T11353] veth1_vlan: entered promiscuous mode [ 236.509730][T11353] veth0_macvtap: entered promiscuous mode [ 236.517923][T11353] veth1_macvtap: entered promiscuous mode [ 236.552234][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.562819][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.572796][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.583505][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.597786][T11353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.626195][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.636842][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.646701][T11353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.657327][T11353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.681441][T11353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.712278][T11353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.721102][T11353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.729947][T11353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.738710][T11353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.816915][T11551] loop5: detected capacity change from 0 to 512 [ 236.822392][T11550] loop3: detected capacity change from 0 to 2048 [ 236.840575][T11551] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.2890: invalid block [ 236.871194][T11553] loop4: detected capacity change from 0 to 512 [ 236.885379][T11550] loop3: p1 < > p4 [ 236.893545][T11551] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2890: invalid indirect mapped block 1024 (level 0) [ 236.928733][T11550] loop3: p4 size 8388608 extends beyond EOD, truncated [ 236.941312][T11553] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.970642][T11551] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2890: bg 0: block 35: padding at end of block bitmap is not set [ 237.007411][T11553] EXT4-fs (loop4): 1 truncate cleaned up [ 237.013608][T11553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.048250][T11551] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 237.089277][T11551] EXT4-fs (loop5): 1 truncate cleaned up [ 237.123411][T11551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.166453][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.170239][T11560] loop1: detected capacity change from 0 to 8192 [ 237.206352][T11560] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.255826][T11573] siw: device registration error -23 [ 237.285555][T11575] FAT-fs (loop1): error, clusters badly computed (586 != 18) [ 237.293107][T11575] FAT-fs (loop1): Filesystem has been set read-only [ 237.309678][T11575] FAT-fs (loop1): error, clusters badly computed (587 != 19) [ 237.379357][T11575] FAT-fs (loop1): error, clusters badly computed (588 != 20) [ 237.397601][T11575] FAT-fs (loop1): error, clusters badly computed (589 != 21) [ 237.428158][T11575] FAT-fs (loop1): error, clusters badly computed (590 != 22) [ 237.453052][T11575] FAT-fs (loop1): error, clusters badly computed (591 != 23) [ 237.661866][ T9083] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.981906][T11591] loop5: detected capacity change from 0 to 2048 [ 238.000677][T11574] lo speed is unknown, defaulting to 1000 [ 238.043999][T11591] loop5: p1 < > p4 [ 238.055319][T11591] loop5: p4 size 8388608 extends beyond EOD, truncated [ 238.106086][T11594] loop5: detected capacity change from 0 to 512 [ 238.137435][T11594] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 238.160475][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 238.160494][ T29] audit: type=1400 audit(1734030106.842:9505): avc: denied { bind } for pid=11595 comm="syz.1.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.245020][T11602] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 238.253723][T11594] EXT4-fs (loop5): 1 truncate cleaned up [ 238.254224][ T29] audit: type=1400 audit(1734030106.902:9506): avc: denied { setopt } for pid=11595 comm="syz.1.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.260028][T11594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.312480][ T29] audit: type=1404 audit(1734030107.012:9507): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 238.327577][ T29] audit: type=1400 audit(1734030107.012:9508): avc: denied { create } for pid=11593 comm="syz.5.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 238.348196][ T29] audit: type=1400 audit(1734030107.012:9509): avc: denied { create } for pid=11593 comm="syz.5.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 238.368837][ T29] audit: type=1400 audit(1734030107.022:9510): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 238.395427][ T29] audit: type=1400 audit(1734030107.022:9511): avc: denied { unmount } for pid=9083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 238.415161][ T29] audit: type=1400 audit(1734030107.022:9512): avc: denied { unmount } for pid=9083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 238.434965][ T29] audit: type=1400 audit(1734030107.132:9513): avc: denied { sqpoll } for pid=11601 comm="syz.1.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 238.454408][ T29] audit: type=1404 audit(1734030107.152:9514): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 238.455933][ T9924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.491960][T11609] loop4: detected capacity change from 0 to 128 [ 238.517145][T11609] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 238.552465][T11609] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 238.618406][T11615] loop3: detected capacity change from 0 to 512 [ 238.649196][T11615] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.2913: invalid block [ 238.675794][T11615] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2913: invalid indirect mapped block 1024 (level 0) [ 238.700255][T11619] loop4: detected capacity change from 0 to 2048 [ 238.720450][T11615] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2913: bg 0: block 35: padding at end of block bitmap is not set [ 238.770619][ T2089] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.781011][ T2089] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.814121][T11615] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 238.825586][T11619] loop4: p1 < > p4 [ 238.838103][T11619] loop4: p4 size 8388608 extends beyond EOD, truncated [ 238.857334][T11615] EXT4-fs (loop3): 1 truncate cleaned up [ 238.863365][T11615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.928060][ T2089] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.938474][ T2089] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.960424][T11626] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2918'. [ 239.019212][ T2089] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.029601][ T2089] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.130079][ T2089] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.140493][ T2089] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.154503][T11627] loop4: detected capacity change from 0 to 8192 [ 239.227545][T11627] loop4: p1 p2 < > p3 p4 < p5 > [ 239.232683][T11627] loop4: p1 size 108986237 extends beyond EOD, truncated [ 239.244911][T11628] lo speed is unknown, defaulting to 1000 [ 239.259058][T11627] loop4: p3 size 131072 extends beyond EOD, truncated [ 239.297894][T11627] loop4: p5 size 108986237 extends beyond EOD, truncated [ 239.334450][ T2089] bond0: left allmulticast mode [ 239.339385][ T2089] bond_slave_0: left allmulticast mode [ 239.344952][ T2089] bond_slave_1: left allmulticast mode [ 239.350487][ T2089] bond0: left promiscuous mode [ 239.355302][ T2089] bond_slave_0: left promiscuous mode [ 239.360773][ T2089] bond_slave_1: left promiscuous mode [ 239.366336][ T2089] bridge0: port 3(bond0) entered disabled state [ 239.383830][ T2089] bridge_slave_1: left allmulticast mode [ 239.389558][ T2089] bridge_slave_1: left promiscuous mode [ 239.395342][ T2089] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.403462][ T2089] bridge_slave_0: left allmulticast mode [ 239.409199][ T2089] bridge_slave_0: left promiscuous mode [ 239.414868][ T2089] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.537784][ T2089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.549847][ T2089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.569756][ T2089] bond0 (unregistering): Released all slaves [ 239.618093][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.666815][ T2089] tipc: Left network mode [ 239.687569][T11645] loop4: detected capacity change from 0 to 512 [ 239.694682][T11628] chnl_net:caif_netlink_parms(): no params data found [ 239.734361][ T2089] hsr_slave_0: left promiscuous mode [ 239.740185][ T2089] hsr_slave_1: left promiscuous mode [ 239.756177][ T2089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.759177][T11645] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.763584][ T2089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.781263][ T2089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.788739][ T2089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.817624][ T2089] veth1_macvtap: left promiscuous mode [ 239.823146][ T2089] veth0_macvtap: left promiscuous mode [ 239.828830][ T2089] veth1_vlan: left promiscuous mode [ 239.834128][ T2089] veth0_vlan: left promiscuous mode [ 239.856738][T11645] EXT4-fs (loop4): 1 truncate cleaned up [ 239.862823][T11645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.934597][ T2089] team0 (unregistering): Port device team_slave_1 removed [ 239.966571][ T2089] team0 (unregistering): Port device team_slave_0 removed [ 240.039325][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.073420][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2927'. [ 240.139844][T11628] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.147017][T11628] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.205181][T11628] bridge_slave_0: entered allmulticast mode [ 240.229218][T11628] bridge_slave_0: entered promiscuous mode [ 240.261702][T11628] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.268970][T11628] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.332021][T11628] bridge_slave_1: entered allmulticast mode [ 240.350574][T11628] bridge_slave_1: entered promiscuous mode [ 240.408041][T11628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.456689][T11628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.546436][T11628] team0: Port device team_slave_0 added [ 240.574574][T11628] team0: Port device team_slave_1 added [ 240.639821][T11628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.646929][T11628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.673003][T11628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.747462][T11628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.754468][T11628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.780595][T11628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.861242][T11695] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2938'. [ 240.877645][T11663] lo speed is unknown, defaulting to 1000 [ 240.993079][T11628] hsr_slave_0: entered promiscuous mode [ 241.007459][T11628] hsr_slave_1: entered promiscuous mode [ 241.014155][T11707] loop3: detected capacity change from 0 to 2048 [ 241.044842][T11628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.054879][T11628] Cannot create hsr debugfs directory [ 241.077972][T11707] loop3: p1 < > p4 [ 241.085130][T11707] loop3: p4 size 8388608 extends beyond EOD, truncated [ 241.317367][T11713] loop3: detected capacity change from 0 to 8192 [ 241.388956][T11713] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.456421][T11628] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 241.471566][T11628] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 241.500507][T11628] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 241.518743][T11628] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 241.608788][T11628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.620994][T11628] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.644165][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.651278][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.655119][T11715] loop4: detected capacity change from 0 to 764 [ 241.699951][T11713] FAT-fs (loop3): error, clusters badly computed (715 != 714) [ 241.707492][T11713] FAT-fs (loop3): Filesystem has been set read-only [ 241.712171][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.721194][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.721326][T11722] FAT-fs (loop3): error, clusters badly computed (619 != 18) [ 241.737509][T11713] FAT-fs (loop3): error, clusters badly computed (716 != 715) [ 241.748048][T11722] FAT-fs (loop3): error, clusters badly computed (622 != 19) [ 241.758256][T11722] FAT-fs (loop3): error, clusters badly computed (623 != 20) [ 241.778059][T11722] FAT-fs (loop3): error, clusters badly computed (624 != 21) [ 241.785977][T11713] FAT-fs (loop3): error, clusters badly computed (720 != 716) [ 241.801946][T11628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.812377][T11628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.831414][T11713] FAT-fs (loop3): error, clusters badly computed (722 != 717) [ 241.861260][T11722] FAT-fs (loop3): error, clusters badly computed (626 != 22) [ 241.880223][T11713] FAT-fs (loop3): error, clusters badly computed (723 != 718) [ 241.891311][T11722] FAT-fs (loop3): error, clusters badly computed (629 != 23) [ 241.927437][T11713] FAT-fs (loop3): error, clusters badly computed (725 != 719) [ 241.937761][T11715] Symlink component flag not implemented [ 241.971163][T11713] FAT-fs (loop3): error, clusters badly computed (726 != 720) [ 241.999882][T11628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.009071][T11713] FAT-fs (loop3): error, clusters badly computed (727 != 721) [ 242.021027][T11713] FAT-fs (loop3): error, clusters badly computed (728 != 722) [ 242.041799][T11713] FAT-fs (loop3): error, clusters badly computed (729 != 723) [ 242.056944][T11715] Symlink component flag not implemented (129) [ 242.066180][T11713] FAT-fs (loop3): error, clusters badly computed (730 != 724) [ 242.083731][T11713] FAT-fs (loop3): error, clusters badly computed (731 != 725) [ 242.109625][T11713] FAT-fs (loop3): error, clusters badly computed (732 != 726) [ 242.134602][T11713] FAT-fs (loop3): error, clusters badly computed (733 != 727) [ 242.145682][T11715] rock: directory entry would overflow storage [ 242.151875][T11715] rock: sig=0x4f50, size=4, remaining=3 [ 242.157529][T11715] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 242.204925][T11743] loop1: detected capacity change from 0 to 2048 [ 242.256682][T11743] loop1: p1 < > p4 [ 242.275928][T11743] loop1: p4 size 8388608 extends beyond EOD, truncated [ 242.491944][T11628] veth0_vlan: entered promiscuous mode [ 242.533561][T11628] veth1_vlan: entered promiscuous mode [ 242.589500][T11628] veth0_macvtap: entered promiscuous mode [ 242.618609][T11628] veth1_macvtap: entered promiscuous mode [ 242.649595][T11628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.660203][T11628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.670120][T11628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.680811][T11628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.777018][T11628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.791664][T11766] lo speed is unknown, defaulting to 1000 [ 242.794753][T11628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.807968][T11628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.817936][T11628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.828448][T11628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.866471][T11628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.903149][T11628] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.912024][T11628] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.921051][T11628] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.929835][T11628] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.965818][T11769] loop4: detected capacity change from 0 to 2048 [ 243.084605][T11769] loop4: p1 < > p4 [ 243.170760][T11769] loop4: p4 size 8388608 extends beyond EOD, truncated [ 243.193644][T11784] loop1: detected capacity change from 0 to 2048 [ 243.265654][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 243.265727][ T29] audit: type=1326 audit(1868247839.976:9695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.6.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 243.326803][T11784] loop1: p1 < > p4 [ 243.337849][T11784] loop1: p4 size 8388608 extends beyond EOD, truncated [ 243.367703][ T29] audit: type=1326 audit(1868247840.006:9696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.6.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 243.391288][ T29] audit: type=1326 audit(1868247840.006:9697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.6.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 243.415071][ T29] audit: type=1326 audit(1868247840.006:9698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.6.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 243.438649][ T29] audit: type=1326 audit(1868247840.006:9699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.6.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 243.447077][T11797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.462342][ T29] audit: type=1326 audit(1868247840.006:9700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.6.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 243.494172][ T29] audit: type=1326 audit(1868247840.006:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.6.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 243.499199][T11797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.517736][ T29] audit: type=1326 audit(1868247840.006:9702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.6.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 243.549106][ T29] audit: type=1326 audit(1868247840.006:9703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.6.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 243.572659][ T29] audit: type=1326 audit(1868247840.006:9704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.6.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 243.656568][T11790] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2967'. [ 243.877355][T11810] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 244.006680][T11811] lo speed is unknown, defaulting to 1000 [ 244.462589][T11830] siw: device registration error -23 [ 244.550300][T11834] tipc: Started in network mode [ 244.555245][T11834] tipc: Node identity 7, cluster identity 9 [ 244.561182][T11834] tipc: Node number set to 7 [ 244.580435][T11834] tipc: Cannot configure node identity twice [ 244.658968][T11840] lo speed is unknown, defaulting to 1000 [ 244.994897][T11851] lo speed is unknown, defaulting to 1000 [ 245.566949][T11857] loop3: detected capacity change from 0 to 2048 [ 245.647483][T11857] loop3: p1 < > p4 [ 245.661747][T11857] loop3: p4 size 8388608 extends beyond EOD, truncated [ 245.904341][T11866] loop4: detected capacity change from 0 to 512 [ 246.042170][T11866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.233192][T11877] lo speed is unknown, defaulting to 1000 [ 246.254213][T11866] ext4 filesystem being mounted at /556/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.362906][T11879] lo speed is unknown, defaulting to 1000 [ 246.377287][T11889] loop1: detected capacity change from 0 to 512 [ 246.448680][T11889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 246.556218][T11889] EXT4-fs (loop1): 1 truncate cleaned up [ 246.597342][T11889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.618750][T11889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.904224][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.986837][T11902] FAULT_INJECTION: forcing a failure. [ 246.986837][T11902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.000143][T11902] CPU: 0 UID: 0 PID: 11902 Comm: syz.6.3004 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 247.011025][T11902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 247.021107][T11902] Call Trace: [ 247.024394][T11902] [ 247.027330][T11902] dump_stack_lvl+0xf2/0x150 [ 247.031959][T11902] dump_stack+0x15/0x1a [ 247.036142][T11902] should_fail_ex+0x223/0x230 [ 247.040845][T11902] should_fail+0xb/0x10 [ 247.045044][T11902] should_fail_usercopy+0x1a/0x20 [ 247.050113][T11902] _copy_from_user+0x1e/0xb0 [ 247.054875][T11902] move_addr_to_kernel+0x82/0x120 [ 247.060021][T11902] __sys_connect+0x67/0x1b0 [ 247.064536][T11902] __x64_sys_connect+0x41/0x50 [ 247.069318][T11902] x64_sys_call+0x22a7/0x2dc0 [ 247.074015][T11902] do_syscall_64+0xc9/0x1c0 [ 247.078584][T11902] ? clear_bhb_loop+0x55/0xb0 [ 247.083277][T11902] ? clear_bhb_loop+0x55/0xb0 [ 247.087969][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.093977][T11902] RIP: 0033:0x7f505a1d5d19 [ 247.098398][T11902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.118182][T11902] RSP: 002b:00007f5058841038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 247.126613][T11902] RAX: ffffffffffffffda RBX: 00007f505a3c5fa0 RCX: 00007f505a1d5d19 [ 247.134640][T11902] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000005 [ 247.142690][T11902] RBP: 00007f5058841090 R08: 0000000000000000 R09: 0000000000000000 [ 247.150753][T11902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.158730][T11902] R13: 0000000000000000 R14: 00007f505a3c5fa0 R15: 00007fff1c0b2b28 [ 247.166725][T11902] [ 247.426759][T11906] loop1: detected capacity change from 0 to 8192 [ 247.464337][T11906] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.889596][T11920] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.898406][T11920] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.907284][T11920] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.916060][T11920] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.937892][T11917] FAT-fs (loop1): error, clusters badly computed (698 != 18) [ 247.945509][T11917] FAT-fs (loop1): Filesystem has been set read-only [ 247.953834][T11906] FAT-fs (loop1): error, clusters badly computed (794 != 793) [ 247.971894][T11917] FAT-fs (loop1): error, clusters badly computed (700 != 19) [ 247.980844][T11920] vxlan0: entered promiscuous mode [ 247.986099][T11920] vxlan0: entered allmulticast mode [ 248.005997][T11917] FAT-fs (loop1): error, clusters badly computed (701 != 20) [ 248.020325][T11920] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.029408][T11920] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.038489][T11920] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.047476][T11920] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.062302][T11906] FAT-fs (loop1): error, clusters badly computed (797 != 794) [ 248.091298][T11917] FAT-fs (loop1): error, clusters badly computed (703 != 21) [ 248.120820][T11906] FAT-fs (loop1): error, clusters badly computed (799 != 795) [ 248.153020][T11917] FAT-fs (loop1): error, clusters badly computed (705 != 22) [ 248.167137][T11917] FAT-fs (loop1): error, clusters badly computed (706 != 23) [ 248.189993][T11906] FAT-fs (loop1): error, clusters badly computed (802 != 796) [ 248.228010][T11906] FAT-fs (loop1): error, clusters badly computed (803 != 797) [ 248.257984][T11929] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 248.288802][T11906] FAT-fs (loop1): error, clusters badly computed (804 != 798) [ 248.327254][T11906] FAT-fs (loop1): error, clusters badly computed (805 != 799) [ 248.364732][T11931] lo speed is unknown, defaulting to 1000 [ 248.385030][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 248.385048][ T29] audit: type=1400 audit(1868247845.056:9928): avc: denied { create } for pid=11930 comm="syz.6.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 248.410830][ T29] audit: type=1400 audit(1868247845.056:9929): avc: denied { write } for pid=11930 comm="syz.6.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 248.430297][ T29] audit: type=1400 audit(1868247845.086:9930): avc: denied { mac_admin } for pid=11926 comm="syz.4.3013" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 248.451526][ T29] audit: type=1400 audit(1868247845.086:9931): avc: denied { relabelto } for pid=11926 comm="syz.4.3013" name="pids.max" dev="cgroup2" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 248.478501][ T29] audit: type=1400 audit(1868247845.086:9932): avc: denied { associate } for pid=11926 comm="syz.4.3013" name="pids.max" dev="cgroup2" ino=136 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_log_t:s0" [ 248.510736][ T29] audit: type=1400 audit(1868247845.216:9933): avc: denied { execmem } for pid=11932 comm="syz.3.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 248.597104][T11935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.639609][ T29] audit: type=1400 audit(1868247845.346:9934): avc: denied { unmount } for pid=11353 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 248.721714][ T29] audit: type=1400 audit(1868247845.426:9935): avc: denied { create } for pid=11930 comm="syz.6.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.831133][ T29] audit: type=1400 audit(1868247845.456:9936): avc: denied { module_request } for pid=11930 comm="syz.6.3015" kmod="net-pf-10-proto-3-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 248.928895][ T29] audit: type=1400 audit(1868247845.576:9937): avc: denied { create } for pid=11950 comm="syz.0.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 248.999459][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3023'. [ 249.032449][T11959] loop4: detected capacity change from 0 to 128 [ 249.053164][T11959] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.069332][T11959] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 249.089248][T11962] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3022'. [ 249.098434][T11962] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3022'. [ 249.112058][T11962] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3022'. [ 249.184605][T11962] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3022'. [ 249.193702][T11962] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3022'. [ 249.208583][T11962] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3022'. [ 249.225192][T11970] loop4: detected capacity change from 0 to 512 [ 249.244568][T11970] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.3027: invalid block [ 249.269261][T11970] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3027: invalid indirect mapped block 1024 (level 0) [ 249.297824][T11962] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3022'. [ 249.306886][T11962] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3022'. [ 249.351927][T11970] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3027: bg 0: block 35: padding at end of block bitmap is not set [ 249.365089][T11962] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3022'. [ 249.468936][T11970] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 249.495365][T11970] EXT4-fs (loop4): 1 truncate cleaned up [ 249.544780][T11970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.954637][T11985] siw: device registration error -23 [ 250.126629][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.203341][T12003] netlink: 'syz.4.3035': attribute type 10 has an invalid length. [ 250.211384][T12003] macvlan1: entered allmulticast mode [ 250.234693][T12003] veth1_vlan: entered allmulticast mode [ 250.255921][T12003] macvlan1: entered promiscuous mode [ 250.269735][T12003] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 250.407370][T12018] loop6: detected capacity change from 0 to 128 [ 250.450598][T12022] loop3: detected capacity change from 0 to 512 [ 250.498969][T12022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.530925][T12022] ext4 filesystem being mounted at /552/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.656336][T12038] loop4: detected capacity change from 0 to 128 [ 250.782507][T12038] syz.4.3051: attempt to access beyond end of device [ 250.782507][T12038] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 250.845308][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.880108][T12049] loop6: detected capacity change from 0 to 512 [ 250.889708][T12049] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.3054: invalid block [ 250.920416][T12049] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3054: invalid indirect mapped block 1024 (level 0) [ 250.972797][T12054] loop3: detected capacity change from 0 to 128 [ 250.980238][T12049] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3054: bg 0: block 35: padding at end of block bitmap is not set [ 251.037495][T12049] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 251.100856][T12049] EXT4-fs (loop6): 1 truncate cleaned up [ 251.125231][T12049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.253313][T12061] siw: device registration error -23 [ 251.277548][T12056] syz.3.3055: attempt to access beyond end of device [ 251.277548][T12056] loop3: rw=2049, sector=236, nr_sectors = 16 limit=128 [ 251.338562][T12056] syz.3.3055: attempt to access beyond end of device [ 251.338562][T12056] loop3: rw=2049, sector=260, nr_sectors = 8 limit=128 [ 251.378131][T12056] syz.3.3055: attempt to access beyond end of device [ 251.378131][T12056] loop3: rw=2049, sector=276, nr_sectors = 8 limit=128 [ 251.396150][T12066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.421288][T12066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.443016][T12056] syz.3.3055: attempt to access beyond end of device [ 251.443016][T12056] loop3: rw=2049, sector=292, nr_sectors = 8 limit=128 [ 251.465074][T12056] syz.3.3055: attempt to access beyond end of device [ 251.465074][T12056] loop3: rw=2049, sector=308, nr_sectors = 8 limit=128 [ 251.486880][T12056] syz.3.3055: attempt to access beyond end of device [ 251.486880][T12056] loop3: rw=2049, sector=324, nr_sectors = 8 limit=128 [ 251.525026][T12056] syz.3.3055: attempt to access beyond end of device [ 251.525026][T12056] loop3: rw=2049, sector=340, nr_sectors = 8 limit=128 [ 251.545100][T12056] syz.3.3055: attempt to access beyond end of device [ 251.545100][T12056] loop3: rw=2049, sector=356, nr_sectors = 8 limit=128 [ 251.590249][T12056] syz.3.3055: attempt to access beyond end of device [ 251.590249][T12056] loop3: rw=2049, sector=372, nr_sectors = 8 limit=128 [ 251.691803][T11628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.744125][T12070] loop6: detected capacity change from 0 to 128 [ 251.877030][T12071] loop1: detected capacity change from 0 to 8192 [ 251.904017][T12071] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.137950][T12084] loop3: detected capacity change from 0 to 8192 [ 252.146190][T12084] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.169206][T12089] FAT-fs (loop1): error, clusters badly computed (1423 != 18) [ 252.176854][T12089] FAT-fs (loop1): Filesystem has been set read-only [ 252.208194][T12071] FAT-fs (loop1): error, clusters badly computed (1519 != 1518) [ 252.228980][T12089] FAT-fs (loop1): error, clusters badly computed (1425 != 19) [ 252.239442][T12089] FAT-fs (loop1): error, clusters badly computed (1426 != 20) [ 252.262315][T12071] FAT-fs (loop1): error, clusters badly computed (1522 != 1519) [ 252.266238][T12097] FAT-fs (loop3): error, clusters badly computed (556 != 18) [ 252.277456][T12097] FAT-fs (loop3): Filesystem has been set read-only [ 252.294499][T12089] FAT-fs (loop1): error, clusters badly computed (1428 != 21) [ 252.303945][T12096] lo speed is unknown, defaulting to 1000 [ 252.305206][T12084] FAT-fs (loop3): error, clusters badly computed (652 != 651) [ 252.333893][T12089] FAT-fs (loop1): error, clusters badly computed (1429 != 22) [ 252.364748][T12084] FAT-fs (loop3): error, clusters badly computed (653 != 652) [ 252.372390][T12097] FAT-fs (loop3): error, clusters badly computed (559 != 19) [ 252.390305][T12097] FAT-fs (loop3): error, clusters badly computed (560 != 20) [ 252.419410][T12099] loop4: detected capacity change from 0 to 512 [ 252.419597][T12071] FAT-fs (loop1): error, clusters badly computed (1526 != 1520) [ 252.447936][T12097] FAT-fs (loop3): error, clusters badly computed (562 != 21) [ 252.455864][T12099] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.3071: invalid block [ 252.463072][T12084] FAT-fs (loop3): error, clusters badly computed (656 != 653) [ 252.507439][T12089] FAT-fs (loop1): error, clusters badly computed (1430 != 23) [ 252.515132][T12099] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3071: invalid indirect mapped block 1024 (level 0) [ 252.530677][T12071] FAT-fs (loop1): error, clusters badly computed (1527 != 1521) [ 252.539731][T12099] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3071: bg 0: block 35: padding at end of block bitmap is not set [ 252.555505][T12084] FAT-fs (loop3): error, clusters badly computed (658 != 654) [ 252.576761][T12099] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 252.585889][T12099] EXT4-fs (loop4): 1 truncate cleaned up [ 252.597113][T12097] FAT-fs (loop3): error, clusters badly computed (564 != 22) [ 252.607361][T12071] FAT-fs (loop1): error, clusters badly computed (1528 != 1522) [ 252.622314][T12099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.648105][T12104] lo speed is unknown, defaulting to 1000 [ 252.666434][T12097] FAT-fs (loop3): error, clusters badly computed (565 != 23) [ 252.724796][T12071] FAT-fs (loop1): error, clusters badly computed (1529 != 1523) [ 252.771762][T12071] FAT-fs (loop1): error, clusters badly computed (1530 != 1524) [ 252.820856][T12071] FAT-fs (loop1): error, clusters badly computed (1531 != 1525) [ 252.867000][T12071] FAT-fs (loop1): error, clusters badly computed (1532 != 1526) [ 252.882958][T12084] FAT-fs (loop3): error, clusters badly computed (661 != 655) [ 252.903796][T12071] FAT-fs (loop1): error, clusters badly computed (1533 != 1527) [ 252.958668][T12084] FAT-fs (loop3): error, clusters badly computed (662 != 656) [ 252.981545][T12105] siw: device registration error -23 [ 253.082388][T12084] FAT-fs (loop3): error, clusters badly computed (663 != 657) [ 253.145466][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.155899][T12084] FAT-fs (loop3): error, clusters badly computed (664 != 658) [ 253.195657][T12084] FAT-fs (loop3): error, clusters badly computed (665 != 659) [ 253.210351][T12111] loop4: detected capacity change from 0 to 128 [ 253.225075][T12084] FAT-fs (loop3): error, clusters badly computed (666 != 660) [ 253.225771][T12111] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 253.248883][T12084] FAT-fs (loop3): error, clusters badly computed (667 != 661) [ 253.266558][T12084] FAT-fs (loop3): error, clusters badly computed (668 != 662) [ 253.276308][T12084] FAT-fs (loop3): error, clusters badly computed (669 != 663) [ 253.295531][T12111] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 253.419420][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 253.419435][ T29] audit: type=1326 audit(1868247850.126:10117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 253.454524][T12120] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 253.462345][T12120] audit: out of memory in audit_log_start [ 253.492185][T12126] loop1: detected capacity change from 0 to 512 [ 253.508257][T12127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.519800][ T29] audit: type=1326 audit(1868247850.156:10118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 253.543486][ T29] audit: type=1326 audit(1868247850.156:10119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 253.567193][ T29] audit: type=1326 audit(1868247850.156:10120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 253.590836][ T29] audit: type=1326 audit(1868247850.156:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 253.614427][ T29] audit: type=1326 audit(1868247850.156:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 253.638017][ T29] audit: type=1326 audit(1868247850.156:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f505a1d5d19 code=0x7ffc0000 [ 253.661820][ T29] audit: type=1326 audit(1868247850.156:10124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.6.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f505a1d4680 code=0x7ffc0000 [ 253.685752][T12127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.706877][T12126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.729119][T12126] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.806847][T12136] tipc: Started in network mode [ 253.811793][T12136] tipc: Node identity 7, cluster identity 9 [ 253.817768][T12136] tipc: Node number set to 7 [ 253.832316][T12136] tipc: Cannot configure node identity twice [ 253.898559][T11353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.959788][T12143] loop1: detected capacity change from 0 to 512 [ 253.977064][T12143] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.3085: invalid block [ 253.989458][T12143] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3085: invalid indirect mapped block 1024 (level 0) [ 254.019903][T12143] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3085: bg 0: block 35: padding at end of block bitmap is not set [ 254.054309][T12143] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 254.126876][T12143] EXT4-fs (loop1): 1 truncate cleaned up [ 254.133170][T12143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.204693][T12155] siw: device registration error -23 [ 254.246235][T12156] netlink: 'syz.0.3090': attribute type 10 has an invalid length. [ 254.329635][T12159] loop3: detected capacity change from 0 to 1764 [ 254.350769][T12159] iso9660: Unknown parameter '' [ 254.396108][T12156] bridge0: port 3(bond0) entered disabled state [ 254.402560][T12156] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.409785][T12156] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.468711][T12166] __nla_validate_parse: 2 callbacks suppressed [ 254.468729][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3094'. [ 254.531381][T12156] bridge0: port 3(bond0) entered blocking state [ 254.531416][T12156] bridge0: port 3(bond0) entered forwarding state [ 254.531591][T12156] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.531627][T12156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.531710][T12156] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.565922][T12156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.602488][T12156] bridge0: port 3(bond0) entered disabled state [ 254.602602][T12156] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.602691][T12156] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.632898][T12167] lo speed is unknown, defaulting to 1000 [ 254.720149][T12170] loop4: detected capacity change from 0 to 512 [ 254.794739][T12170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.794848][T12170] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.800916][T11353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.987347][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.153450][T12188] loop1: detected capacity change from 0 to 764 [ 255.160368][T12188] Symlink component flag not implemented [ 255.160663][T12188] Symlink component flag not implemented (129) [ 255.161395][T12188] rock: directory entry would overflow storage [ 255.161403][T12188] rock: sig=0x4f50, size=4, remaining=3 [ 255.161416][T12188] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 255.295468][T12187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.295607][T12187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.463779][T12203] loop1: detected capacity change from 0 to 2048 [ 255.503798][T12205] loop3: detected capacity change from 0 to 1024 [ 255.535543][T12203] loop1: p1 < > p4 [ 255.544275][T12203] loop1: p4 size 8388608 extends beyond EOD, truncated [ 255.545636][T12205] EXT4-fs: Ignoring removed orlov option [ 255.582861][T12205] EXT4-fs: Ignoring removed nobh option [ 255.672863][T12205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.710797][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.727291][T12213] loop6: detected capacity change from 0 to 2048 [ 255.775438][T12213] loop6: p1 < > p4 [ 255.780655][T12225] FAULT_INJECTION: forcing a failure. [ 255.780655][T12225] name failslab, interval 1, probability 0, space 0, times 0 [ 255.783455][T12213] loop6: p4 size 8388608 extends beyond EOD, [ 255.793323][T12225] CPU: 1 UID: 0 PID: 12225 Comm: syz.1.3118 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 255.799460][T12213] truncated [ 255.813352][T12225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.823438][T12225] Call Trace: [ 255.826922][T12225] [ 255.829863][T12225] dump_stack_lvl+0xf2/0x150 [ 255.834524][T12225] dump_stack+0x15/0x1a [ 255.838704][T12225] should_fail_ex+0x223/0x230 [ 255.843470][T12225] should_failslab+0x8f/0xb0 [ 255.848081][T12225] __kmalloc_noprof+0xab/0x3f0 [ 255.852954][T12225] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 255.859228][T12225] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 255.865330][T12225] ? ns_capable+0x7d/0xb0 [ 255.869683][T12225] genl_rcv_msg+0x470/0x6c0 [ 255.874271][T12225] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 255.880409][T12225] ? __dev_queue_xmit+0xb6e/0x2090 [ 255.885592][T12225] ? ref_tracker_free+0x3a5/0x410 [ 255.890687][T12225] ? __dev_queue_xmit+0x186/0x2090 [ 255.895883][T12225] netlink_rcv_skb+0x12c/0x230 [ 255.900660][T12225] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.905723][T12225] genl_rcv+0x28/0x40 [ 255.909762][T12225] netlink_unicast+0x599/0x670 [ 255.914544][T12225] netlink_sendmsg+0x5cc/0x6e0 [ 255.919413][T12225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.924727][T12225] __sock_sendmsg+0x140/0x180 [ 255.929504][T12225] ____sys_sendmsg+0x312/0x410 [ 255.934285][T12225] __sys_sendmsg+0x19d/0x230 [ 255.938990][T12225] __x64_sys_sendmsg+0x46/0x50 [ 255.943814][T12225] x64_sys_call+0x2734/0x2dc0 [ 255.948503][T12225] do_syscall_64+0xc9/0x1c0 [ 255.953018][T12225] ? clear_bhb_loop+0x55/0xb0 [ 255.957758][T12225] ? clear_bhb_loop+0x55/0xb0 [ 255.962443][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.968436][T12225] RIP: 0033:0x7fc5f7805d19 [ 255.972856][T12225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.992551][T12225] RSP: 002b:00007fc5f5e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.001026][T12225] RAX: ffffffffffffffda RBX: 00007fc5f79f5fa0 RCX: 00007fc5f7805d19 [ 256.009009][T12225] RDX: 0000000000000000 RSI: 0000000020001540 RDI: 0000000000000006 [ 256.016992][T12225] RBP: 00007fc5f5e77090 R08: 0000000000000000 R09: 0000000000000000 [ 256.024972][T12225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.032975][T12225] R13: 0000000000000000 R14: 00007fc5f79f5fa0 R15: 00007ffe9a654238 [ 256.041015][T12225] [ 256.109340][T12231] loop4: detected capacity change from 0 to 2048 [ 256.127410][T12235] loop6: detected capacity change from 0 to 2048 [ 256.170279][T12241] loop1: detected capacity change from 0 to 512 [ 256.179328][T12231] loop4: p1 < > p4 [ 256.183768][T12231] loop4: p4 size 8388608 extends beyond EOD, truncated [ 256.183910][T12235] loop6: p1 < > p4 [ 256.195059][T12235] loop6: p4 size 8388608 extends beyond EOD, truncated [ 256.224094][T12241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.261641][T12241] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.321428][T12249] loop4: detected capacity change from 0 to 128 [ 256.343126][T12249] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 256.380609][T12249] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.412389][T12253] loop6: detected capacity change from 0 to 512 [ 256.446089][T12253] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 256.470746][T11353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.496613][T12253] EXT4-fs (loop6): 1 truncate cleaned up [ 256.507552][T12253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.546916][T12256] vlan2: entered promiscuous mode [ 256.622954][T11628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.633635][T12262] loop1: detected capacity change from 0 to 512 [ 256.678493][T12262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.727931][T12262] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.847383][T12276] loop6: detected capacity change from 0 to 2048 [ 256.867333][T11353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.910888][T12280] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3139'. [ 256.915354][T12276] loop6: p1 < > p4 [ 256.928310][T12282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.936927][T12276] loop6: p4 size 8388608 extends beyond EOD, truncated [ 256.937129][T12282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.012967][T12289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.021854][T12289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.097844][T12292] loop6: detected capacity change from 0 to 764 [ 257.117753][T12292] Symlink component flag not implemented [ 257.132244][T12292] Symlink component flag not implemented (129) [ 257.148423][T12292] rock: directory entry would overflow storage [ 257.154685][T12292] rock: sig=0x4f50, size=4, remaining=3 [ 257.160323][T12292] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 257.322848][T12300] loop3: detected capacity change from 0 to 2048 [ 257.334199][T12302] loop6: detected capacity change from 0 to 512 [ 257.343850][T12302] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.3147: invalid block [ 257.355653][T12302] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3147: invalid indirect mapped block 1024 (level 0) [ 257.369542][T12302] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3147: bg 0: block 35: padding at end of block bitmap is not set [ 257.384002][T12302] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 257.393185][T12300] loop3: p1 < > p4 [ 257.399365][T12300] loop3: p4 size 8388608 extends beyond EOD, truncated [ 257.406759][T12302] EXT4-fs (loop6): 1 truncate cleaned up [ 257.420415][T12302] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.502778][T12312] siw: device registration error -23 [ 257.521945][T12314] loop1: detected capacity change from 0 to 2048 [ 257.575367][T12314] loop1: p1 < > p4 [ 257.579719][T12314] loop1: p4 size 8388608 extends beyond EOD, truncated [ 257.598438][T12317] lo speed is unknown, defaulting to 1000 [ 257.673716][T12320] loop4: detected capacity change from 0 to 512 [ 257.692832][T12320] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 257.713796][T12320] EXT4-fs (loop4): orphan cleanup on readonly fs [ 257.725421][T12320] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 257.741609][T12320] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.3153: corrupted inode contents [ 257.758030][T12320] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #11: comm syz.4.3153: mark_inode_dirty error [ 257.770727][T12320] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3153: invalid indirect mapped block 1 (level 1) [ 257.799235][T12327] FAULT_INJECTION: forcing a failure. [ 257.799235][T12327] name failslab, interval 1, probability 0, space 0, times 0 [ 257.804659][T12320] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.3153: corrupted inode contents [ 257.812009][T12327] CPU: 1 UID: 0 PID: 12327 Comm: syz.0.3156 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 257.824594][T12320] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 257.834543][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.843376][T12320] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #11: comm syz.4.3153: corrupted inode contents [ 257.853480][T12327] Call Trace: [ 257.853491][T12327] [ 257.853501][T12327] dump_stack_lvl+0xf2/0x150 [ 257.865501][T12320] EXT4-fs error (device loop4): ext4_truncate:4240: inode #11: comm syz.4.3153: mark_inode_dirty error [ 257.868571][T12327] dump_stack+0x15/0x1a [ 257.871680][T12320] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 257.876156][T12327] should_fail_ex+0x223/0x230 [ 257.876189][T12327] should_failslab+0x8f/0xb0 [ 257.876301][T12327] kmem_cache_alloc_noprof+0x52/0x320 [ 257.876329][T12327] ? getname_flags+0x81/0x3b0 [ 257.876362][T12327] getname_flags+0x81/0x3b0 [ 257.911605][T12320] EXT4-fs (loop4): 1 truncate cleaned up [ 257.915276][T12327] __x64_sys_rename+0x40/0x70 [ 257.921809][T12320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 257.924460][T12327] x64_sys_call+0x2b1c/0x2dc0 [ 257.951580][T12327] do_syscall_64+0xc9/0x1c0 [ 257.956193][T12327] ? clear_bhb_loop+0x55/0xb0 [ 257.960985][T12327] ? clear_bhb_loop+0x55/0xb0 [ 257.965780][T12327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.971783][T12327] RIP: 0033:0x7fc016895d19 [ 257.976205][T12327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.995823][T12327] RSP: 002b:00007fc014f01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 258.004265][T12327] RAX: ffffffffffffffda RBX: 00007fc016a85fa0 RCX: 00007fc016895d19 [ 258.012290][T12327] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000000 [ 258.020295][T12327] RBP: 00007fc014f01090 R08: 0000000000000000 R09: 0000000000000000 [ 258.028326][T12327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.036377][T12327] R13: 0000000000000000 R14: 00007fc016a85fa0 R15: 00007ffe5b8c97a8 [ 258.044374][T12327] [ 258.120487][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.178089][T11628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.250082][T12338] loop4: detected capacity change from 0 to 2048 [ 258.295528][T12323] block device autoloading is deprecated and will be removed. [ 258.315700][T12338] loop4: p1 < > p4 [ 258.320160][T12338] loop4: p4 size 8388608 extends beyond EOD, truncated [ 258.330710][T12323] bio_check_eod: 23 callbacks suppressed [ 258.330728][T12323] syz.1.3155: attempt to access beyond end of device [ 258.330728][T12323] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 258.459826][T12349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.479806][T12349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.498373][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 258.498391][ T29] audit: type=1326 audit(1868247855.206:10413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.4.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 258.551276][ T29] audit: type=1326 audit(1868247855.246:10414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.4.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 258.575057][ T29] audit: type=1326 audit(1868247855.246:10415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.4.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 258.598653][ T29] audit: type=1326 audit(1868247855.246:10416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.4.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 258.622303][ T29] audit: type=1326 audit(1868247855.246:10417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.4.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 258.646001][ T29] audit: type=1326 audit(1868247855.246:10418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.4.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 258.669595][ T29] audit: type=1326 audit(1868247855.246:10419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.4.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 258.693256][ T29] audit: type=1326 audit(1868247855.246:10420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.4.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 258.717058][ T29] audit: type=1326 audit(1868247855.246:10421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.4.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 258.740657][ T29] audit: type=1326 audit(1868247855.246:10422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.4.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fae2dfe5d19 code=0x7ffc0000 [ 258.952249][T12358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3167'. [ 258.972984][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 259.244257][T12369] loop4: detected capacity change from 0 to 512 [ 259.298756][T12369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.337822][T12369] ext4 filesystem being mounted at /592/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.465400][T12363] infiniband syz1: set active [ 259.470131][T12363] infiniband syz1: added team_slave_0 [ 259.485762][T12374] lo speed is unknown, defaulting to 1000 [ 259.528450][T12382] loop3: detected capacity change from 0 to 1024 [ 259.535262][T12382] EXT4-fs: Ignoring removed orlov option [ 259.541010][T12382] EXT4-fs: Ignoring removed nobh option [ 259.552462][T12363] RDS/IB: syz1: added [ 259.556566][T12363] smc: adding ib device syz1 with port count 1 [ 259.563461][T12363] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 259.621744][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.631509][T12387] FAULT_INJECTION: forcing a failure. [ 259.631509][T12387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.644678][T12387] CPU: 0 UID: 0 PID: 12387 Comm: syz.0.3177 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 259.655507][T12387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.665586][T12387] Call Trace: [ 259.668933][T12387] [ 259.671886][T12387] dump_stack_lvl+0xf2/0x150 [ 259.676532][T12387] dump_stack+0x15/0x1a [ 259.680847][T12387] should_fail_ex+0x223/0x230 [ 259.685548][T12387] should_fail+0xb/0x10 [ 259.689740][T12387] should_fail_usercopy+0x1a/0x20 [ 259.694802][T12387] _copy_from_user+0x1e/0xb0 [ 259.699473][T12387] copy_msghdr_from_user+0x54/0x2a0 [ 259.704804][T12387] ? __fget_files+0x17c/0x1c0 [ 259.709573][T12387] __sys_sendmsg+0x13e/0x230 [ 259.714216][T12387] __x64_sys_sendmsg+0x46/0x50 [ 259.718999][T12387] x64_sys_call+0x2734/0x2dc0 [ 259.723687][T12387] do_syscall_64+0xc9/0x1c0 [ 259.728198][T12387] ? clear_bhb_loop+0x55/0xb0 [ 259.732972][T12387] ? clear_bhb_loop+0x55/0xb0 [ 259.737754][T12387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.743779][T12387] RIP: 0033:0x7fc016895d19 [ 259.748206][T12387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.767945][T12387] RSP: 002b:00007fc014f01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.776491][T12387] RAX: ffffffffffffffda RBX: 00007fc016a85fa0 RCX: 00007fc016895d19 [ 259.784536][T12387] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 259.792511][T12387] RBP: 00007fc014f01090 R08: 0000000000000000 R09: 0000000000000000 [ 259.800508][T12387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.808517][T12387] R13: 0000000000000000 R14: 00007fc016a85fa0 R15: 00007ffe5b8c97a8 [ 259.816507][T12387] [ 259.876880][T12382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.891427][T12392] syz.0.3179[12392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.891493][T12392] syz.0.3179[12392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.934567][T12392] syz.0.3179[12392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.995610][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.208650][T12402] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 260.252351][T12399] loop3: detected capacity change from 0 to 8192 [ 260.278096][T12399] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.361517][T12412] loop4: detected capacity change from 0 to 128 [ 260.398049][T12412] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.417869][T12413] FAT-fs (loop3): error, clusters badly computed (852 != 18) [ 260.425419][T12413] FAT-fs (loop3): Filesystem has been set read-only [ 260.446522][T12399] FAT-fs (loop3): error, clusters badly computed (948 != 947) [ 260.470666][T12412] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 260.489651][T12413] FAT-fs (loop3): error, clusters badly computed (854 != 19) [ 260.511871][T12413] FAT-fs (loop3): error, clusters badly computed (856 != 20) [ 260.516645][T12399] FAT-fs (loop3): error, clusters badly computed (950 != 948) [ 260.584650][T12399] FAT-fs (loop3): error, clusters badly computed (952 != 949) [ 260.593796][T12418] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 260.593796][T12418] program syz.6.3188 not setting count and/or reply_len properly [ 260.597958][T12413] FAT-fs (loop3): error, clusters badly computed (858 != 21) [ 260.625530][T12399] FAT-fs (loop3): error, clusters badly computed (954 != 950) [ 260.656526][T12399] FAT-fs (loop3): error, clusters badly computed (955 != 951) [ 260.692823][T12399] FAT-fs (loop3): error, clusters badly computed (956 != 952) [ 260.704522][T12422] netlink: 'syz.6.3191': attribute type 16 has an invalid length. [ 260.712381][T12422] netlink: 'syz.6.3191': attribute type 17 has an invalid length. [ 260.734256][T12399] FAT-fs (loop3): error, clusters badly computed (958 != 953) [ 260.749269][T12399] FAT-fs (loop3): error, clusters badly computed (959 != 954) [ 260.749367][T12413] FAT-fs (loop3): error, clusters badly computed (862 != 22) [ 260.772336][T12399] FAT-fs (loop3): error, clusters badly computed (960 != 955) [ 260.807195][T12425] loop6: detected capacity change from 0 to 164 [ 260.813764][T12399] FAT-fs (loop3): error, clusters badly computed (961 != 956) [ 260.834254][T12422] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.841534][T12422] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.849170][T12413] FAT-fs (loop3): error, clusters badly computed (867 != 23) [ 260.857739][T12399] FAT-fs (loop3): error, clusters badly computed (963 != 957) [ 260.874292][T12399] FAT-fs (loop3): error, clusters badly computed (964 != 958) [ 260.896011][T12399] FAT-fs (loop3): error, clusters badly computed (965 != 959) [ 260.921133][T12399] FAT-fs (loop3): error, clusters badly computed (966 != 960) [ 260.945324][T12399] FAT-fs (loop3): error, clusters badly computed (967 != 961) [ 261.067348][T12399] FAT-fs (loop3): error, clusters badly computed (968 != 962) [ 261.082372][T12422] infiniband syz1: set down [ 261.106201][T12422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.121639][T12399] FAT-fs (loop3): error, clusters badly computed (969 != 963) [ 261.164505][T12399] FAT-fs (loop3): error, clusters badly computed (970 != 964) [ 261.165387][T12422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.241670][T12399] FAT-fs (loop3): error, clusters badly computed (971 != 965) [ 261.273085][T12399] FAT-fs (loop3): error, clusters badly computed (972 != 966) [ 261.306544][T12422] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.315711][T12422] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.324682][T12422] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.333690][T12422] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.353882][T12399] FAT-fs (loop3): error, clusters badly computed (973 != 967) [ 261.458815][T12434] lo speed is unknown, defaulting to 1000 [ 261.534108][T12446] loop1: detected capacity change from 0 to 2048 [ 261.557360][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.596011][T12446] loop1: p1 < > p4 [ 261.598599][T12434] chnl_net:caif_netlink_parms(): no params data found [ 261.600210][T12446] loop1: p4 size 8388608 extends beyond EOD, truncated [ 261.667534][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.690258][T12434] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.697380][T12434] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.714744][T12434] bridge_slave_0: entered allmulticast mode [ 261.738972][T12434] bridge_slave_0: entered promiscuous mode [ 261.754493][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.778216][T12434] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.785410][T12434] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.798947][T12465] loop1: detected capacity change from 0 to 128 [ 261.834875][T12434] bridge_slave_1: entered allmulticast mode [ 261.860693][T12434] bridge_slave_1: entered promiscuous mode [ 261.883285][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.916271][T12465] syz.1.3202: attempt to access beyond end of device [ 261.916271][T12465] loop1: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 261.988287][T12434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.030684][T12467] loop3: detected capacity change from 0 to 8192 [ 262.040181][ T50] bond0: left allmulticast mode [ 262.045217][ T50] bond_slave_0: left allmulticast mode [ 262.050756][ T50] bond_slave_1: left allmulticast mode [ 262.056304][ T50] macvlan2: left allmulticast mode [ 262.061431][ T50] bond0: left promiscuous mode [ 262.066273][ T50] bond_slave_0: left promiscuous mode [ 262.071715][ T50] bond_slave_1: left promiscuous mode [ 262.077282][ T50] macvlan2: left promiscuous mode [ 262.082373][ T50] macvlan1: left promiscuous mode [ 262.087676][ T50] bridge0: port 3(bond0) entered disabled state [ 262.128072][T12467] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.174760][ T50] bridge_slave_1: left allmulticast mode [ 262.180477][ T50] bridge_slave_1: left promiscuous mode [ 262.186186][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.230860][T12477] FAT-fs (loop3): error, clusters badly computed (1594 != 18) [ 262.238446][T12477] FAT-fs (loop3): Filesystem has been set read-only [ 262.245845][ T50] bridge_slave_0: left allmulticast mode [ 262.251513][ T50] bridge_slave_0: left promiscuous mode [ 262.257181][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.259425][T12467] FAT-fs (loop3): error, clusters badly computed (1690 != 1689) [ 262.274905][T12477] FAT-fs (loop3): error, clusters badly computed (1596 != 19) [ 262.298855][T12477] FAT-fs (loop3): error, clusters badly computed (1597 != 20) [ 262.343065][T12477] FAT-fs (loop3): error, clusters badly computed (1598 != 21) [ 262.352869][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.361916][T12467] FAT-fs (loop3): error, clusters badly computed (1694 != 1690) [ 262.370589][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.384185][T12479] loop6: detected capacity change from 0 to 8192 [ 262.392034][ T50] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 262.401567][T12477] FAT-fs (loop3): error, clusters badly computed (1600 != 22) [ 262.406585][T12479] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.422885][ T50] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 262.431589][T12467] FAT-fs (loop3): error, clusters badly computed (1696 != 1691) [ 262.439393][ T50] veth1_vlan: left allmulticast mode [ 262.449536][ T50] bond0 (unregistering): Released all slaves [ 262.461791][T12434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.486376][T12477] FAT-fs (loop3): error, clusters badly computed (1602 != 23) [ 262.506763][T12434] team0: Port device team_slave_0 added [ 262.512456][T12467] FAT-fs (loop3): error, clusters badly computed (1698 != 1692) [ 262.546053][T12434] team0: Port device team_slave_1 added [ 262.556893][T12490] FAT-fs (loop6): error, clusters badly computed (648 != 18) [ 262.564312][T12490] FAT-fs (loop6): Filesystem has been set read-only [ 262.575589][ T50] tipc: Left network mode [ 262.583422][T12479] FAT-fs (loop6): error, clusters badly computed (744 != 743) [ 262.594425][T12467] FAT-fs (loop3): error, clusters badly computed (1699 != 1693) [ 262.600136][T12494] loop1: detected capacity change from 0 to 2048 [ 262.603638][T12490] FAT-fs (loop6): error, clusters badly computed (650 != 19) [ 262.620889][T12434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.627914][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.654026][T12434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.673167][T12479] FAT-fs (loop6): error, clusters badly computed (746 != 744) [ 262.683924][T12494] loop1: p1 < > p4 [ 262.701452][T12490] FAT-fs (loop6): error, clusters badly computed (652 != 20) [ 262.709125][T12494] loop1: p4 size 8388608 extends beyond EOD, truncated [ 262.716080][T12467] FAT-fs (loop3): error, clusters badly computed (1700 != 1694) [ 262.723878][ T50] hsr_slave_0: left promiscuous mode [ 262.747799][T12490] FAT-fs (loop6): error, clusters badly computed (653 != 21) [ 262.760187][ T50] hsr_slave_1: left promiscuous mode [ 262.768290][T12467] FAT-fs (loop3): error, clusters badly computed (1701 != 1695) [ 262.778843][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.783437][T12479] FAT-fs (loop6): error, clusters badly computed (749 != 745) [ 262.792131][T12490] FAT-fs (loop6): error, clusters badly computed (655 != 22) [ 262.801780][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.852734][T12490] FAT-fs (loop6): error, clusters badly computed (656 != 23) [ 262.880585][T12479] FAT-fs (loop6): error, clusters badly computed (752 != 746) [ 262.891627][ T50] team0 (unregistering): Port device team_slave_1 removed [ 262.922158][ T50] team0 (unregistering): Port device team_slave_0 removed [ 262.943855][T12479] FAT-fs (loop6): error, clusters badly computed (753 != 747) [ 262.974656][T12507] loop1: detected capacity change from 0 to 128 [ 262.997719][T12479] FAT-fs (loop6): error, clusters badly computed (754 != 748) [ 263.006799][T12511] loop3: detected capacity change from 0 to 512 [ 263.015322][T12434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.022298][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.040597][T12479] FAT-fs (loop6): error, clusters badly computed (755 != 749) [ 263.048277][T12434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.056377][T12511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 263.077776][T12507] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 263.098630][T12507] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.112432][T12511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.127654][T12479] FAT-fs (loop6): error, clusters badly computed (756 != 750) [ 263.155432][T12511] ext4 filesystem being mounted at /578/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.171272][T12479] FAT-fs (loop6): error, clusters badly computed (757 != 751) [ 263.195023][T12434] hsr_slave_0: entered promiscuous mode [ 263.221476][T12434] hsr_slave_1: entered promiscuous mode [ 263.245267][T12434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.255113][T12434] Cannot create hsr debugfs directory [ 263.289245][T12522] loop1: detected capacity change from 0 to 2048 [ 263.357457][T12529] loop6: detected capacity change from 0 to 512 [ 263.377598][T12522] loop1: p1 < > p4 [ 263.382434][T12522] loop1: p4 size 8388608 extends beyond EOD, truncated [ 263.400074][T12529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.414397][T12529] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.419281][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.471310][T12538] loop3: detected capacity change from 0 to 2048 [ 263.500737][T12538] loop3: p1 < > p4 [ 263.504949][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 263.505035][ T29] audit: type=1326 audit(1868247860.206:10694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 263.535002][ T29] audit: type=1326 audit(1868247860.206:10695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 263.558690][ T29] audit: type=1326 audit(1868247860.206:10696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 263.559083][T12538] loop3: p4 size 8388608 extends beyond EOD, [ 263.582271][ T29] audit: type=1326 audit(1868247860.206:10697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 263.582368][ T29] audit: type=1326 audit(1868247860.206:10698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 263.588459][T12538] truncated [ 263.612006][ T29] audit: type=1326 audit(1868247860.206:10699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 263.662302][ T29] audit: type=1326 audit(1868247860.206:10700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 263.685888][ T29] audit: type=1326 audit(1868247860.206:10701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 263.709621][ T29] audit: type=1326 audit(1868247860.206:10702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 263.733214][ T29] audit: type=1326 audit(1868247860.206:10703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.0.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc016895d19 code=0x7ffc0000 [ 263.805370][T12552] lo speed is unknown, defaulting to 1000 [ 263.830276][T11628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.993494][T12434] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.001396][T12545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3233'. [ 264.172674][T12434] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.176055][T12434] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.178887][T12434] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.202521][T12562] lo speed is unknown, defaulting to 1000 [ 264.425301][T12434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.441354][T12434] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.444233][ T2215] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.444267][ T2215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.449341][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.449379][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.462688][T12434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.462759][T12434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.519188][T12570] loop6: detected capacity change from 0 to 2048 [ 264.531724][T12434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.545674][T12570] loop6: p1 < > p4 [ 264.546053][T12570] loop6: p4 size 8388608 extends beyond EOD, truncated [ 264.843387][T12591] lo speed is unknown, defaulting to 1000 [ 264.845711][T12434] veth0_vlan: entered promiscuous mode [ 264.892537][T12434] veth1_vlan: entered promiscuous mode [ 264.949212][T12434] veth0_macvtap: entered promiscuous mode [ 264.956735][T12434] veth1_macvtap: entered promiscuous mode [ 264.971359][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.981941][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.991818][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.002332][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.014225][T12434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.031815][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.042364][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.052274][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.062882][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.074201][T12434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.095293][T12434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.104131][T12434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.112908][T12434] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.121670][T12434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.281637][T12638] loop4: detected capacity change from 0 to 2048 [ 265.330154][T12638] loop4: p1 < > p4 [ 265.334638][T12638] loop4: p4 size 8388608 extends beyond EOD, truncated [ 265.622448][T12662] loop6: detected capacity change from 0 to 512 [ 265.660334][T12662] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.3269: invalid block [ 265.673608][T12662] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3269: invalid indirect mapped block 1024 (level 0) [ 265.689977][T12662] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3269: bg 0: block 35: padding at end of block bitmap is not set [ 265.715216][T12662] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 265.755567][T12662] EXT4-fs (loop6): 1 truncate cleaned up [ 265.762118][T12662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.790421][T12668] lo speed is unknown, defaulting to 1000 [ 265.882043][T12675] loop1: detected capacity change from 0 to 128 [ 265.899330][T12676] siw: device registration error -23 [ 265.908036][T12671] lo speed is unknown, defaulting to 1000 [ 265.915829][T12675] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 265.932859][T12675] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.153085][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3275'. [ 266.500328][T12706] loop1: detected capacity change from 0 to 128 [ 266.507397][T12706] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.519021][T11628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.533140][T12706] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.763155][T12729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3288'. [ 266.850371][T12738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3299'. [ 266.850450][T12738] x_tables: ip_tables: udp match: only valid for protocol 17 [ 266.961265][T12741] loop6: detected capacity change from 0 to 8192 [ 266.969002][T12746] loop1: detected capacity change from 0 to 128 [ 266.977734][T12746] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.978384][T12728] lo speed is unknown, defaulting to 1000 [ 267.000829][T12746] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.001777][T12741] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.195448][T12754] FAT-fs (loop6): error, clusters badly computed (1145 != 18) [ 267.202966][T12754] FAT-fs (loop6): Filesystem has been set read-only [ 267.213966][T12761] loop1: detected capacity change from 0 to 128 [ 267.230727][T12761] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.242903][T12741] FAT-fs (loop6): error, clusters badly computed (1241 != 1240) [ 267.261256][T12741] FAT-fs (loop6): error, clusters badly computed (1242 != 1241) [ 267.272904][T12761] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.291499][T12754] FAT-fs (loop6): error, clusters badly computed (1148 != 19) [ 267.324560][T12741] FAT-fs (loop6): error, clusters badly computed (1244 != 1242) [ 267.371251][T12763] lo speed is unknown, defaulting to 1000 [ 267.412252][T12754] FAT-fs (loop6): error, clusters badly computed (1150 != 20) [ 267.424751][T12741] FAT-fs (loop6): error, clusters badly computed (1246 != 1243) [ 267.432113][T12765] loop1: detected capacity change from 0 to 512 [ 267.461281][T12754] FAT-fs (loop6): error, clusters badly computed (1152 != 21) [ 267.481430][T12741] FAT-fs (loop6): error, clusters badly computed (1248 != 1244) [ 267.500760][T12765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.513927][T12765] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.525102][T12754] FAT-fs (loop6): error, clusters badly computed (1155 != 22) [ 267.525105][T12741] FAT-fs (loop6): error, clusters badly computed (1249 != 1245) [ 267.528024][T12741] FAT-fs (loop6): error, clusters badly computed (1251 != 1246) [ 267.552206][T12741] FAT-fs (loop6): error, clusters badly computed (1252 != 1247) [ 267.552255][T12754] FAT-fs (loop6): error, clusters badly computed (1158 != 23) [ 267.614238][T12769] tipc: Started in network mode [ 267.619172][T12769] tipc: Node identity 7, cluster identity 9 [ 267.625121][T12769] tipc: Node number set to 7 [ 267.635768][T12741] FAT-fs (loop6): error, clusters badly computed (1254 != 1248) [ 267.647695][T12741] FAT-fs (loop6): error, clusters badly computed (1255 != 1249) [ 267.654823][T12769] tipc: Cannot configure node identity twice [ 267.661732][T12741] FAT-fs (loop6): error, clusters badly computed (1256 != 1250) [ 267.674679][T12741] FAT-fs (loop6): error, clusters badly computed (1257 != 1251) [ 267.693401][T12741] FAT-fs (loop6): error, clusters badly computed (1258 != 1252) [ 267.703351][T12741] FAT-fs (loop6): error, clusters badly computed (1259 != 1253) [ 267.714907][T12741] FAT-fs (loop6): error, clusters badly computed (1260 != 1254) [ 267.725267][T12741] FAT-fs (loop6): error, clusters badly computed (1261 != 1255) [ 267.736645][T12741] FAT-fs (loop6): error, clusters badly computed (1262 != 1256) [ 267.746620][T12741] FAT-fs (loop6): error, clusters badly computed (1263 != 1257) [ 267.765708][T12741] FAT-fs (loop6): error, clusters badly computed (1264 != 1258) [ 267.796100][T12741] FAT-fs (loop6): error, clusters badly computed (1265 != 1259) [ 267.807046][T12741] FAT-fs (loop6): error, clusters badly computed (1266 != 1260) [ 267.833896][T12741] FAT-fs (loop6): error, clusters badly computed (1267 != 1261) [ 267.928065][T12741] FAT-fs (loop6): error, clusters badly computed (1268 != 1262) [ 267.939748][T12741] FAT-fs (loop6): error, clusters badly computed (1269 != 1263) [ 268.253779][T11353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.454176][T12782] loop1: detected capacity change from 0 to 2048 [ 268.540622][T12782] loop1: p1 < > p4 [ 268.545079][T12782] loop1: p4 size 8388608 extends beyond EOD, truncated [ 268.588830][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 268.588844][ T29] audit: type=1326 audit(1868247865.296:11073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28cc5d19 code=0x7ffc0000 [ 268.632401][T12788] loop3: detected capacity change from 0 to 128 [ 268.641891][ T29] audit: type=1326 audit(1868247865.336:11074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca28cc5d19 code=0x7ffc0000 [ 268.665601][ T29] audit: type=1326 audit(1868247865.336:11075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28cc5d19 code=0x7ffc0000 [ 268.689236][ T29] audit: type=1326 audit(1868247865.336:11076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28cc5d19 code=0x7ffc0000 [ 268.712903][ T29] audit: type=1326 audit(1868247865.336:11077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca28cc5d19 code=0x7ffc0000 [ 268.736541][ T29] audit: type=1326 audit(1868247865.336:11078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28cc5d19 code=0x7ffc0000 [ 268.760140][ T29] audit: type=1326 audit(1868247865.336:11079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28cc5d19 code=0x7ffc0000 [ 268.764427][T12794] lo speed is unknown, defaulting to 1000 [ 268.783762][ T29] audit: type=1326 audit(1868247865.336:11080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca28cc5d19 code=0x7ffc0000 [ 268.783845][ T29] audit: type=1326 audit(1868247865.336:11081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28cc5d19 code=0x7ffc0000 [ 268.819016][T12788] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.836970][ T29] audit: type=1326 audit(1868247865.336:11082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.3.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca28cc5d19 code=0x7ffc0000 [ 268.849466][T12788] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.043776][T12809] loop3: detected capacity change from 0 to 512 [ 269.104865][T12813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.121134][T12809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.145295][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3325'. [ 269.157164][T12818] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3320'. [ 269.166249][T12809] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.470222][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.663369][T12841] loop1: detected capacity change from 0 to 764 [ 269.674613][T12841] Symlink component flag not implemented [ 269.674638][T12841] Symlink component flag not implemented (129) [ 269.693929][T12841] rock: directory entry would overflow storage [ 269.693939][T12841] rock: sig=0x4f50, size=4, remaining=3 [ 269.693955][T12841] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 269.863578][T12856] loop1: detected capacity change from 0 to 2048 [ 269.967300][T12856] loop1: p1 < > p4 [ 269.971673][T12856] loop1: p4 size 8388608 extends beyond EOD, truncated [ 270.098409][T12866] lo speed is unknown, defaulting to 1000 [ 270.344667][T12869] loop4: detected capacity change from 0 to 128 [ 270.425935][T12871] loop1: detected capacity change from 0 to 128 [ 270.438162][T12869] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.466426][T12871] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.479701][T12869] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.494956][T12871] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.560325][T12878] loop1: detected capacity change from 0 to 764 [ 270.574295][T12880] loop4: detected capacity change from 0 to 512 [ 270.596488][T12878] Symlink component flag not implemented [ 270.604432][T12878] Symlink component flag not implemented (129) [ 270.611927][T12874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3345'. [ 270.621892][T12880] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 270.642011][T12880] netlink: 'syz.4.3348': attribute type 11 has an invalid length. [ 270.677712][T12434] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 270.686857][T12878] rock: directory entry would overflow storage [ 270.686868][T12878] rock: sig=0x4f50, size=4, remaining=3 [ 270.686886][T12878] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 270.855476][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3351'. [ 270.860417][T12887] loop4: detected capacity change from 0 to 8192 [ 270.884895][T12887] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 270.939007][T12887] ================================================================== [ 270.939043][T12887] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode [ 270.939076][T12887] [ 270.939081][T12887] read-write to 0xffff8881065ceb28 of 4 bytes by task 165 on cpu 1: [ 270.939101][T12887] __writeback_single_inode+0x1f4/0x850 [ 270.939133][T12887] writeback_sb_inodes+0x461/0xa30 [ 270.939161][T12887] wb_writeback+0x262/0x640 [ 270.939187][T12887] wb_workfn+0x1a8/0x940 [ 270.939225][T12887] process_scheduled_works+0x483/0x9a0 [ 270.939257][T12887] worker_thread+0x51d/0x6f0 [ 270.939285][T12887] kthread+0x1d1/0x210 [ 270.939302][T12887] ret_from_fork+0x4b/0x60 [ 270.939324][T12887] ret_from_fork_asm+0x1a/0x30 [ 270.939348][T12887] [ 270.939354][T12887] read to 0xffff8881065ceb28 of 4 bytes by task 12887 on cpu 0: [ 270.939373][T12887] __mark_inode_dirty+0x58/0x7e0 [ 270.939392][T12887] generic_write_end+0x137/0x160 [ 270.939423][T12887] fat_write_end+0x4e/0x160 [ 270.939442][T12887] cont_write_begin+0x350/0x860 [ 270.939479][T12887] fat_write_begin+0x51/0xe0 [ 270.939502][T12887] generic_cont_expand_simple+0xaa/0x150 [ 270.939539][T12887] fat_cont_expand+0x3a/0x160 [ 270.939571][T12887] fat_setattr+0x2aa/0x840 [ 270.939617][T12887] notify_change+0x85c/0x8e0 [ 270.939648][T12887] do_ftruncate+0x3cf/0x460 [ 270.939675][T12887] __x64_sys_ftruncate+0x67/0xc0 [ 270.939708][T12887] x64_sys_call+0x9d9/0x2dc0 [ 270.939732][T12887] do_syscall_64+0xc9/0x1c0 [ 270.939754][T12887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.939789][T12887] [ 270.939792][T12887] value changed: 0x0001003a -> 0x00010022 [ 270.939803][T12887] [ 270.939806][T12887] Reported by Kernel Concurrency Sanitizer on: [ 270.939815][T12887] CPU: 0 UID: 0 PID: 12887 Comm: syz.4.3349 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 270.939844][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 270.939861][T12887] ================================================================== [ 270.950145][T12898] loop6: detected capacity change from 0 to 2048 [ 270.973402][T12900] siw: device registration error -23 [ 271.146860][T12898] loop6: p1 < > p4 [ 271.161278][T12887] FAT-fs (loop4): error, clusters badly computed (1000 != 999) [ 271.161301][T12887] FAT-fs (loop4): Filesystem has been set read-only [ 271.162598][T12899] FAT-fs (loop4): error, clusters badly computed (904 != 18) [ 271.164556][T12899] FAT-fs (loop4): error, clusters badly computed (906 != 19) [ 271.165145][T12887] FAT-fs (loop4): error, clusters badly computed (1002 != 1000) [ 271.167742][T12899] FAT-fs (loop4): error, clusters badly computed (908 != 20) [ 271.168179][T12887] FAT-fs (loop4): error, clusters badly computed (1004 != 1001) [ 271.171030][T12899] FAT-fs (loop4): error, clusters badly computed (910 != 21) [ 271.171485][T12887] FAT-fs (loop4): error, clusters badly computed (1006 != 1002) [ 271.174640][T12899] FAT-fs (loop4): error, clusters badly computed (912 != 22) [ 271.178422][T12887] FAT-fs (loop4): error, clusters badly computed (1008 != 1003) [ 271.180188][T12899] FAT-fs (loop4): error, clusters badly computed (914 != 23) [ 271.180617][T12887] FAT-fs (loop4): error, clusters badly computed (1010 != 1004) [ 271.182500][T12887] FAT-fs (loop4): error, clusters badly computed (1011 != 1005) [ 271.184175][T12887] FAT-fs (loop4): error, clusters badly computed (1012 != 1006) [ 271.185985][T12898] loop6: p4 size 8388608 extends beyond EOD, truncated [ 271.190231][T12887] FAT-fs (loop4): error, clusters badly computed (1013 != 1007) [ 271.192096][T12887] FAT-fs (loop4): error, clusters badly computed (1014 != 1008) [ 271.210057][T12887] FAT-fs (loop4): error, clusters badly computed (1015 != 1009) [ 271.346813][T12887] FAT-fs (loop4): error, clusters badly computed (1016 != 1010) [ 271.348918][T12887] FAT-fs (loop4): error, clusters badly computed (1017 != 1011) [ 271.364265][T12887] FAT-fs (loop4): error, clusters badly computed (1018 != 1012) [ 271.375457][T12887] FAT-fs (loop4): error, clusters badly computed (1019 != 1013) [ 271.386909][T12887] FAT-fs (loop4): error, clusters badly computed (1020 != 1014) [ 271.397551][T12887] FAT-fs (loop4): error, clusters badly computed (1021 != 1015) [ 271.408432][T12887] FAT-fs (loop4): error, clusters badly computed (1022 != 1016) [ 271.418396][T12887] FAT-fs (loop4): error, clusters badly computed (1023 != 1017) [ 271.428261][T12887] FAT-fs (loop4): error, clusters badly computed (1024 != 1018) [ 271.437834][T12887] FAT-fs (loop4): error, clusters badly computed (1025 != 1019) [ 271.447347][T12887] FAT-fs (loop4): error, clusters badly computed (1026 != 1020) [ 271.456552][T12887] FAT-fs (loop4): error, clusters badly computed (1027 != 1021) [ 271.465878][T12887] FAT-fs (loop4): error, clusters badly computed (1028 != 1022) [ 271.475501][T12887] FAT-fs (loop4): error, clusters badly computed (1029 != 1023) [ 271.485074][T12887] FAT-fs (loop4): error, clusters badly computed (1030 != 1024) [ 271.494453][T12887] FAT-fs (loop4): error, clusters badly computed (1031 != 1025) [ 271.503734][T12887] FAT-fs (loop4): error, clusters badly computed (1032 != 1026) [ 271.512803][T12887] FAT-fs (loop4): error, clusters badly computed (1033 != 1027) [ 271.522420][T12887] FAT-fs (loop4): error, clusters badly computed (1034 != 1028) [ 271.531870][T12887] FAT-fs (loop4): error, clusters badly computed (1035 != 1029) [ 271.541375][T12887] FAT-fs (loop4): error, clusters badly computed (1036 != 1030) [ 271.550997][T12887] FAT-fs (loop4): error, clusters badly computed (1037 != 1031) [ 271.560278][T12887] FAT-fs (loop4): error, clusters badly computed (1038 != 1032) [ 271.569979][T12887] FAT-fs (loop4): error, clusters badly computed (1039 != 1033) [ 271.579433][T12887] FAT-fs (loop4): error, clusters badly computed (1040 != 1034) [ 271.588703][T12887] FAT-fs (loop4): error, clusters badly computed (1041 != 1035) [ 271.598084][T12887] FAT-fs (loop4): error, clusters badly computed (1042 != 1036) [ 271.607653][T12887] FAT-fs (loop4): error, clusters badly computed (1043 != 1037) [ 271.617322][T12887] FAT-fs (loop4): error, clusters badly computed (1044 != 1038) [ 271.627071][T12887] FAT-fs (loop4): error, clusters badly computed (1045 != 1039) [ 271.637280][T12887] FAT-fs (loop4): error, clusters badly computed (1046 != 1040) [ 271.646709][T12887] FAT-fs (loop4): error, clusters badly computed (1047 != 1041) [ 271.656373][T12887] FAT-fs (loop4): error, clusters badly computed (1048 != 1042) [ 271.665945][T12887] FAT-fs (loop4): error, clusters badly computed (1049 != 1043) [ 271.675441][T12887] FAT-fs (loop4): error, clusters badly computed (1050 != 1044) [ 271.684863][T12887] FAT-fs (loop4): error, clusters badly computed (1051 != 1045) [ 271.694415][T12887] FAT-fs (loop4): error, clusters badly computed (1052 != 1046) [ 271.703960][T12887] FAT-fs (loop4): error, clusters badly computed (1053 != 1047)