last executing test programs: 9.316614791s ago: executing program 3 (id=904): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000580)={r0, @in6={{0xa, 0x4e23, 0xbd4, @mcast2, 0xffff}}}, &(0x7f0000000640)=0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x18, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x40}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='fib_table_lookup\x00', r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r5, 0x0, 0xb14}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r6, r6, 0x0, 0x80000000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)={0x3c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044880) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000001340)={0x3c8, r7, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}]}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "fb6926777c7d426af3b88bd99d7714ddd46cf665d05e1e"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "6913c4782af817398e657ee60e5a5cc651686f324174a40a24e4363c75c5d3ca19"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "d781b052325aa0b5980c6dca41570e39c793e36ab7480cfc163c794bff"}}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x118, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x363}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12b8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x708}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc8a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc6d7510}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x106}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaf4f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa77}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6f7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf965}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x400}, 0x820) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000016000000b40000007f00000000"], 0x50) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$FIBMAP(r10, 0x1, &(0x7f0000000180)=0xa98) 9.22729588s ago: executing program 3 (id=907): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005"], 0x28}}, 0x0) 9.20827942s ago: executing program 3 (id=909): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$caif_stream(0x25, 0x1, 0x0) fcntl$notify(r3, 0x402, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0x3, 0x1, 0x6}, {0x400, 0x6, 0x8, 0x101}, {0x8, 0x7, 0x7, 0x6}, {0x4, 0x3, 0x2, 0x5}, {0xc, 0x10, 0x5, 0xe3bb}, {0x3ff, 0x9, 0x5, 0x5}, {0x7, 0x7f, 0x0, 0x9c}, {0x5, 0x2, 0x7, 0x4}]}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="a8b36f7f0c12bccde6176d9115ee7d4de6915dab7da3f0a92cebab635f62520c25d33664025f39bfa2a25ea7746d662fbd2502b1adf3680379b40dd3cfd8dbb61119a4ee2a51073ec6d40be65588767fd79f0e81dfd7deb9d7f50c29fff7826cd381e7e21762c0a7a49b3325abd3fa3855cba03f5a5c84053b5b8c8ee5521c39125c684585121617de689bb86b7bce8ae0a321865109afdbbbfdb5b06718b59396e6a54c7727e46e57231a7ee6b2d7a7d4ca2d991009e24df9f365e674d55654cb394c1b72da6c6d4855e6fddf47e6", @ANYRESOCT=r2, @ANYRES16=r2, @ANYRESOCT=r4], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000940)=ANY=[]) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x122d24e152b3168b, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffff8}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x48087}, 0x40004) 9.15220534s ago: executing program 3 (id=910): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x10d480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000d3720000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) bind$inet6(r7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x2, 0x4, {{0x10, 0x4, 0x0, 0x26, 0x40, 0x67, 0x0, 0x59, 0x4, 0x0, @multicast2, @loopback, {[@end, @ra={0x94, 0x34}, @timestamp_addr={0x44, 0x24, 0x79, 0x1, 0x2, [{@private=0xa010102, 0x5}, {@rand_addr=0x64010102}, {@private=0xa010100, 0xff}, {@multicast2, 0x8001}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r5, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8000a6, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r5, @ANYBLOB="95b1a52069b0b862000000ed0000000000e8ff00b75b6163d61c0de0d2c1fd2e545cc9d271fdd1fce8ee63249ec6c20f0cb15d030000005348f344f3b40f65900d1a7bbe90e1034b5477a0d9db7477c4fd3f47295ebfc099ea5d1e63aa5c99cf328bcff282", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xb, 0x20000000000001b5, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006aaa0100ffffffffbf91000000000000b7020000020000008500000084fcff00b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', r8, @fallback=0x9, r5, 0x8, &(0x7f0000000780)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0xd, 0x3, 0x4}, 0x10, r9, r6, 0x3, &(0x7f0000000c80)=[r7, r10], &(0x7f0000000cc0)=[{0x1, 0x3, 0xf, 0x2}, {0x0, 0x5, 0x6, 0x6}, {0x2, 0x5, 0x8, 0xb}], 0x10, 0x4, @void, @value}, 0x94) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000dc0)=""/219) preadv2(r5, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/142, 0x8e}], 0x1, 0x9e2, 0x7, 0x0) getsockopt$inet_int(r4, 0x0, 0x13, 0x0, &(0x7f00000001c0)=0x4) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x1b, 0xffffffff, 0x3e}, 0x2c) r11 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) 8.300505616s ago: executing program 3 (id=939): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (fail_nth: 4) syz_open_procfs(0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) 8.112321076s ago: executing program 3 (id=942): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c"], 0x28}}, 0x0) 8.095752356s ago: executing program 32 (id=942): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c"], 0x28}}, 0x0) 1.930584358s ago: executing program 0 (id=1072): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) connect$inet(r1, &(0x7f0000000bc0)={0x2, 0x4e21, @private=0xa010101}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.616183807s ago: executing program 5 (id=1083): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0xf, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x8e, &(0x7f0000000200)=""/142, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x3010006, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYBLOB="14a8d0ca3386858350717bda500a6e0d271cba7c24404f4fdd13b1b5922dc27fae2bb7656c2c9cf00076db74ad9da398465c271f3c99f9c8b75aa628562a36eae8e60442812741be1793c1486650f74ba8ad8536070000000000000065f3bc92da1e56d7ffa95c91b5c58ba55f9245a209ef24b8348e9ff4cb9b84333e1a13"], 0xdb, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f00000002c0)='./bus/file0\x00', 0x40) renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 1.609714607s ago: executing program 4 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000fee000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000019c0)=ANY=[@ANYBLOB="1400000001050101599e4a40af173c6b00000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0xf1, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800002000e55c7400007b8af8ff0000ffff00000000000000007b8af0ff000000070f0000f8ffffffbfa400000000000007040000f0ffffffb70200000800000d18", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r9}, 0x18) socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a8, &(0x7f0000000440)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x81) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) chroot(&(0x7f0000000080)='./file1\x00') 1.556414057s ago: executing program 4 (id=1085): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.504697556s ago: executing program 4 (id=1087): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.463137406s ago: executing program 5 (id=1089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x2000000, 0x0, 0x40001}, 0x0) 1.404287616s ago: executing program 4 (id=1090): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000200)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x4, 0x7b12d845, &(0x7f0000000040)="8277f4c7"}) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100802020702500000000002020207b1af8ff00000000bfa10000000013ae366c8e9f000007019d3c2dd765d4a6ca23000000b70300000600000085000000710000009500fff3591632bdc62bf1efb826c0728eb1917eb42614660db083b92c00"/129], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open$dir(0x0, 0x4000, 0x1) io_destroy(0x0) r2 = getpid() setreuid(0xee00, 0x0) syz_pidfd_open(r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000300), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) 1.218972605s ago: executing program 4 (id=1092): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) 1.143810165s ago: executing program 4 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000380)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES64=r1], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f00000002c0)=""/50, 0x32, 0x0, &(0x7f0000000440)=""/185, 0xb9}}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usbip_server_init(0x2) 1.140448265s ago: executing program 5 (id=1094): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 1.140126335s ago: executing program 5 (id=1095): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x100}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x70bd26, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xd6}]}, 0x24}}, 0x0) 892.091584ms ago: executing program 5 (id=1099): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000400000000b311000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRESDEC=r2, @ANYBLOB="00000000400000a90b00000000000000000000009251b4151ff02004fb40986bb5bda74d58eb0f6ce0ccef1c2016a3e477fcf97e28", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0xad, 0x1e, 0x8, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7, 0x9, 0x8001}}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x8, r4}, 0x18) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r9, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r12 = socket$kcm(0xa, 0x2, 0x88) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x3e, &(0x7f00000002c0)=r13, 0x4) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r15}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) setsockopt$sock_attach_bpf(r12, 0x1, 0x41, &(0x7f0000000040)=r11, 0x4) fcntl$setlease(r8, 0x400, 0x1) fremovexattr(r8, &(0x7f0000000040)=@known='system.posix_acl_default\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/16], &(0x7f00000000c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x4, '\x00', r6, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0xd, 0x5c, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[r7, r5, r8], &(0x7f0000000440)=[{0x1, 0x2, 0x7}, {0x4, 0x2, 0x9, 0x1}, {0x0, 0x4, 0x1, 0x6}, {0x4, 0x1, 0x9, 0x2}, {0x1, 0x2, 0x6, 0xb}, {0x2, 0x5, 0x4}, {0x4, 0x5, 0x2, 0x4}], 0x10, 0x7, @void, @value}, 0x94) 891.734004ms ago: executing program 1 (id=1100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, 0x0) ioctl$USBDEVFS_GETDRIVER(r2, 0x80045519, 0x0) 848.631214ms ago: executing program 5 (id=1102): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x800803fe) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x12, &(0x7f0000000000), &(0x7f0000000140)=0x4) 796.304203ms ago: executing program 1 (id=1103): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setresuid(0x0, 0xee01, 0x0) r1 = syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000100001c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) tee(r3, r5, 0x1000, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x3b, 0xf, 0x7, 0x0, 0x6, 0xa, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x0, @perf_config_ext={0x3, 0x8}, 0xd01, 0x9, 0x7e2, 0x6, 0x672, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x8}, r1, 0x1, r5, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {r0}}, './file0\x00'}) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x1, &(0x7f0000000300)=""/82, &(0x7f0000000380)=0x52) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x57e5, &(0x7f0000000600)={0x0, 0x0, 0x13580, 0xfffffffb}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}}) syz_io_uring_submit(0x0, r10, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x59, 0x0, r8, 0x0, &(0x7f0000000000)="80cf9c42de0ee9b38f60164bff69699f3dde2709acd65cb49954022ad8bc390cb9ae0fb9ff377010f33b37c9226a06541b22a7119c643fde", 0x38, 0x0, 0x1}) getsockopt$inet_int(r8, 0x0, 0x18, 0x0, &(0x7f00000000c0)) 787.035743ms ago: executing program 0 (id=1104): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xf20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x63db, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 2) 784.684964ms ago: executing program 1 (id=1105): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c00000000000000", @ANYRES32, @ANYBLOB="feff3b930ad800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$team(0x0, r1) ioctl$SIOCGIFMTU(r1, 0x8913, &(0x7f0000000380)={'bond_slave_1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x8, 0x3d1, 0x4, 0x10001, 0xbd, 0x8, 0x2}, &(0x7f0000000200)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e24, 0x8, @loopback, 0x6}}, 0x3, 0x10001, 0x4, 0x1, 0x2}, &(0x7f0000000480)=0x98) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f00000006c0)=""/74}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000001400000200000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000708000a40000000000900020073797a30000000000900010073797a3000000000080005400000000e3400128010000180090001006c6173740000000010000180090001006c61737400000000100001800c000100636f756e7465720008000340000001"], 0xc0}}, 0x20050800) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=0x0, @ANYBLOB="f119ff73fd9da163ce014d4f82b8b8e50ea7601bcf0010db1f2077d96754ef3e2ca1bae2030000000000000002b4728ef05a"], 0x1c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b004bce6f8d0040000000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000005884dd3746ee0a90000000000000000f79f2894a1", @ANYRESHEX=r2, @ANYRES8=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x46) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xf20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x63db, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 437.189772ms ago: executing program 2 (id=1108): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x10000a, 0x0, 0x20000}, 0x20) 414.989122ms ago: executing program 2 (id=1109): syz_mount_image$ext4(&(0x7f0000000800)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x1040f3, &(0x7f0000000540)={[{@bh}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000040)={0x1, 0x1}) 339.072571ms ago: executing program 2 (id=1110): syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local, {[@lsrr={0x83, 0x3, 0x66}, @cipso={0x86, 0x3a, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x6, 0xd, "102bc870b88f2f0dc1eee2"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x11, "ffd11634eea26b0faffa0dea2e9035"}, {0x0, 0x5, "02a209"}]}]}}}}}}}, 0x0) 338.692621ms ago: executing program 0 (id=1111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 338.455451ms ago: executing program 2 (id=1112): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) 334.797942ms ago: executing program 0 (id=1113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000fee000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000019c0)=ANY=[@ANYBLOB="1400000001050101599e4a40af173c6b00000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0xf1, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800002000e55c7400007b8af8ff0000ffff00000000000000007b8af0ff000000070f0000f8ffffffbfa400000000000007040000f0ffffffb70200000800000d18", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r9}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="0213000003"], 0x18}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a8, &(0x7f0000000440)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x81) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) chroot(&(0x7f0000000080)='./file1\x00') 230.097401ms ago: executing program 2 (id=1114): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r3, &(0x7f0000000b00)="aa873851", 0x4, 0x8000, &(0x7f0000000a40)={0xa, 0x0, 0x6c5d, @local, 0x5}, 0x1c) shutdown(r3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000002c0)={0x1, 0x0, 0x6}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) 229.508231ms ago: executing program 1 (id=1115): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000600)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_remount}, {@noload}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") 216.620641ms ago: executing program 0 (id=1116): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0xf, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x8e, &(0x7f0000000200)=""/142, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x3010006, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYBLOB="14a8d0ca3386858350717bda500a6e0d271cba7c24404f4fdd13b1b5922dc27fae2bb7656c2c9cf00076db74ad9da398465c271f3c99f9c8b75aa628562a36eae8e60442812741be1793c1486650f74ba8ad8536070000000000000065f3bc92da1e56d7ffa95c91b5c58ba55f9245a209ef24b8348e9ff4cb9b84333e1a13"], 0xdb, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f00000002c0)='./bus/file0\x00', 0x40) renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 64.39667ms ago: executing program 1 (id=1117): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x10000a, 0x0, 0x20000}, 0x20) 28.23282ms ago: executing program 1 (id=1118): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") socket(0x1e, 0x4, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000fc0)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8924, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) socket$inet6_tcp(0xa, 0x1, 0x0) 4.28747ms ago: executing program 2 (id=1119): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x410c84, &(0x7f0000000040), 0x1, 0x786, &(0x7f0000000800)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f00000001c0)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=1120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): unknown main item tag 0x0 [ 61.687829][ T1104] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 61.695232][ T1104] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 61.702699][ T1104] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 61.710097][ T1104] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 61.717670][ T1104] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 61.725058][ T1104] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 61.732533][ T1104] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 61.739986][ T1104] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 61.747389][ T1104] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 61.754782][ T1104] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 61.762176][ T1104] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 61.769643][ T1104] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 61.788703][ T1104] hid-generic 0000:0003:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 61.791505][ T4746] usb usb4: usbfs: process 4746 (syz.0.427) did not claim interface 0 before use [ 61.834477][ T4748] loop3: detected capacity change from 0 to 512 [ 61.866847][ T4748] EXT4-fs: Ignoring removed oldalloc option [ 61.888753][ T4748] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.428: Parent and EA inode have the same ino 15 [ 61.913025][ T4748] EXT4-fs (loop3): Remounting filesystem read-only [ 61.920583][ T4748] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 61.937017][ T4748] EXT4-fs (loop3): 1 orphan inode deleted [ 61.957296][ T4754] loop4: detected capacity change from 0 to 2048 [ 61.963944][ T4748] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 62.057938][ T4758] usb usb4: usbfs: process 4758 (syz.2.431) did not claim interface 0 before use [ 62.107185][ T4761] loop4: detected capacity change from 0 to 164 [ 62.120942][ T4760] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.428'. [ 62.142336][ T4766] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.153486][ T4761] ISOFS: unable to read i-node block [ 62.158824][ T4761] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 62.383523][ T4771] loop0: detected capacity change from 0 to 2048 [ 62.707049][ T4784] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.777624][ T4786] loop0: detected capacity change from 0 to 8192 [ 62.787984][ T4788] loop3: detected capacity change from 0 to 512 [ 62.795855][ T4788] EXT4-fs: Ignoring removed oldalloc option [ 62.808358][ T4788] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.442: Parent and EA inode have the same ino 15 [ 62.820811][ T4788] EXT4-fs (loop3): Remounting filesystem read-only [ 62.827441][ T4788] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 62.836385][ T4788] EXT4-fs (loop3): 1 orphan inode deleted [ 62.842447][ T4788] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 62.919032][ T4793] loop1: detected capacity change from 0 to 512 [ 62.925673][ T4793] EXT4-fs: Ignoring removed oldalloc option [ 62.938928][ T4797] loop2: detected capacity change from 0 to 512 [ 62.945647][ T4797] EXT4-fs: Ignoring removed oldalloc option [ 62.956349][ T4793] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.443: Parent and EA inode have the same ino 15 [ 62.959086][ T4797] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.444: Parent and EA inode have the same ino 15 [ 62.971225][ T4793] EXT4-fs (loop1): Remounting filesystem read-only [ 62.981820][ T4797] EXT4-fs (loop2): Remounting filesystem read-only [ 62.987627][ T4793] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5) [ 63.002975][ T4793] EXT4-fs (loop1): 1 orphan inode deleted [ 63.009334][ T4793] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 63.015928][ T4797] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5) [ 63.025003][ T4797] EXT4-fs (loop2): 1 orphan inode deleted [ 63.031083][ T4797] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 63.096056][ T4800] loop4: detected capacity change from 0 to 512 [ 63.102757][ T4800] EXT4-fs: Ignoring removed oldalloc option [ 63.133895][ T4800] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.445: Parent and EA inode have the same ino 15 [ 63.146651][ T4800] EXT4-fs (loop4): Remounting filesystem read-only [ 63.153438][ T4800] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 63.185781][ T4800] EXT4-fs (loop4): 1 orphan inode deleted [ 63.191955][ T4800] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 63.871512][ T4817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.450'. [ 63.896625][ T4807] loop3: detected capacity change from 0 to 8192 [ 63.903304][ T4811] loop4: detected capacity change from 0 to 2048 [ 63.916144][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 64.034665][ T4823] loop0: detected capacity change from 0 to 2048 [ 64.061980][ T4829] loop4: detected capacity change from 0 to 8192 [ 64.102850][ T4835] loop2: detected capacity change from 0 to 512 [ 64.129997][ T4835] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.457: Failed to acquire dquot type 1 [ 64.142791][ T4835] EXT4-fs (loop2): 1 truncate cleaned up [ 64.190718][ T4842] loop0: detected capacity change from 0 to 512 [ 64.200494][ T4842] EXT4-fs: Ignoring removed oldalloc option [ 64.207348][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 64.217539][ T4842] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.458: Parent and EA inode have the same ino 15 [ 64.233568][ T4842] EXT4-fs (loop0): Remounting filesystem read-only [ 64.240255][ T4842] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -5) [ 64.247657][ T4844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'. [ 64.249515][ T4842] EXT4-fs (loop0): 1 orphan inode deleted [ 64.264357][ T4842] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 64.293310][ T4848] loop2: detected capacity change from 0 to 512 [ 64.301105][ T4848] EXT4-fs: Ignoring removed oldalloc option [ 64.348752][ T4848] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.460: Parent and EA inode have the same ino 15 [ 64.385972][ T4848] EXT4-fs (loop2): Remounting filesystem read-only [ 64.402590][ T4848] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5) [ 64.419316][ T4848] EXT4-fs (loop2): 1 orphan inode deleted [ 64.428099][ T4848] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 64.889096][ T4856] loop1: detected capacity change from 0 to 2048 [ 64.928311][ T4856] EXT4-fs mount: 130 callbacks suppressed [ 64.928326][ T4856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.999831][ T4865] __nla_validate_parse: 1 callbacks suppressed [ 64.999845][ T4865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.464'. [ 65.018057][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.097355][ T4871] loop3: detected capacity change from 0 to 2048 [ 65.140207][ T4871] Alternate GPT is invalid, using primary GPT. [ 65.146592][ T4871] loop3: p2 p3 p7 [ 65.181781][ T4871] usb usb4: usbfs: process 4871 (syz.3.467) did not claim interface 0 before use [ 65.196505][ T4878] loop2: detected capacity change from 0 to 512 [ 65.203146][ T4878] EXT4-fs: Ignoring removed oldalloc option [ 65.212633][ T4873] loop4: detected capacity change from 0 to 8192 [ 65.219508][ T4875] netlink: 60 bytes leftover after parsing attributes in process `syz.0.470'. [ 65.236131][ T4878] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.469: Parent and EA inode have the same ino 15 [ 65.253374][ T4878] EXT4-fs (loop2): Remounting filesystem read-only [ 65.260229][ T4878] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5) [ 65.299317][ T4878] EXT4-fs (loop2): 1 orphan inode deleted [ 65.301302][ T4882] loop0: detected capacity change from 0 to 8192 [ 65.312802][ T4878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.327531][ T4878] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 65.336279][ T4878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.418062][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 65.418077][ T29] audit: type=1326 audit(65.456:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 65.448048][ T29] audit: type=1326 audit(65.456:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 65.776890][ T4889] usb usb4: usbfs: process 4889 (syz.2.472) did not claim interface 0 before use [ 65.802523][ T29] audit: type=1326 audit(65.836:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350d45d29 code=0x7ffc0000 [ 65.864534][ T29] audit: type=1326 audit(65.866:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0350d45d29 code=0x7ffc0000 [ 65.887118][ T29] audit: type=1326 audit(65.866:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350d45d29 code=0x7ffc0000 [ 65.909777][ T29] audit: type=1326 audit(65.866:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f0350d45d29 code=0x7ffc0000 [ 65.932311][ T29] audit: type=1326 audit(65.866:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350d45d29 code=0x7ffc0000 [ 65.954859][ T29] audit: type=1326 audit(65.866:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0350d45d29 code=0x7ffc0000 [ 65.977329][ T29] audit: type=1326 audit(65.866:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350d45d29 code=0x7ffc0000 [ 65.999820][ T29] audit: type=1326 audit(65.866:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4888 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f0350d45d29 code=0x7ffc0000 [ 66.087026][ T4901] loop3: detected capacity change from 0 to 512 [ 66.159961][ T4901] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.477: bg 0: block 393: padding at end of block bitmap is not set [ 66.185892][ T4904] loop2: detected capacity change from 0 to 2048 [ 66.223558][ T4900] loop1: detected capacity change from 0 to 8192 [ 66.234046][ T4901] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 66.244026][ T4901] EXT4-fs (loop3): 2 truncates cleaned up [ 66.253276][ T4901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.258241][ T4906] loop4: detected capacity change from 0 to 512 [ 66.278999][ T4904] Alternate GPT is invalid, using primary GPT. [ 66.285367][ T4904] loop2: p2 p3 p7 [ 66.296145][ T4901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.314684][ T4904] usb usb4: usbfs: process 4904 (syz.2.479) did not claim interface 0 before use [ 66.324119][ T4906] EXT4-fs: Ignoring removed oldalloc option [ 66.345328][ T4906] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.480: Parent and EA inode have the same ino 15 [ 66.450878][ T4906] EXT4-fs (loop4): Remounting filesystem read-only [ 66.457797][ T4906] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 66.466879][ T4906] EXT4-fs (loop4): 1 orphan inode deleted [ 66.473147][ T4906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.485456][ T4906] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 66.496488][ T4906] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.512606][ T4914] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.540260][ T4917] loop3: detected capacity change from 0 to 2048 [ 66.567279][ T4917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.591314][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.657177][ T4925] loop3: detected capacity change from 0 to 1024 [ 66.670364][ T4925] EXT4-fs: Ignoring removed nobh option [ 66.675979][ T4925] EXT4-fs: Ignoring removed oldalloc option [ 66.726196][ T4925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.787327][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.859202][ T4921] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.480'. [ 66.868546][ T4935] loop3: detected capacity change from 0 to 512 [ 66.876257][ T4935] EXT4-fs: Ignoring removed oldalloc option [ 66.886987][ T4935] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.488: Parent and EA inode have the same ino 15 [ 66.909714][ T4935] EXT4-fs (loop3): Remounting filesystem read-only [ 66.929535][ T4935] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 66.943815][ T4935] EXT4-fs (loop3): 1 orphan inode deleted [ 66.949959][ T4935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.962174][ T4935] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 66.969503][ T4935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.058226][ T4938] loop2: detected capacity change from 0 to 2048 [ 67.111702][ T4938] Alternate GPT is invalid, using primary GPT. [ 67.118159][ T4938] loop2: p2 p3 p7 [ 67.157394][ T4938] usb usb4: usbfs: process 4938 (syz.2.489) did not claim interface 0 before use [ 67.179803][ T4941] loop1: detected capacity change from 0 to 2048 [ 67.181422][ T4944] loop4: detected capacity change from 0 to 128 [ 67.194852][ T4944] FAT-fs (loop4): Directory bread(block 162) failed [ 67.201614][ T4944] FAT-fs (loop4): Directory bread(block 163) failed [ 67.209500][ T4944] FAT-fs (loop4): Directory bread(block 164) failed [ 67.216679][ T4944] FAT-fs (loop4): Directory bread(block 165) failed [ 67.223505][ T4944] FAT-fs (loop4): Directory bread(block 166) failed [ 67.231209][ T4944] FAT-fs (loop4): Directory bread(block 167) failed [ 67.238679][ T4944] FAT-fs (loop4): Directory bread(block 168) failed [ 67.246339][ T4944] FAT-fs (loop4): Directory bread(block 169) failed [ 67.256778][ T4947] loop3: detected capacity change from 0 to 164 [ 67.265583][ T4947] ISOFS: unable to read i-node block [ 67.270902][ T4947] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 67.288944][ T4941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.331878][ T4953] loop3: detected capacity change from 0 to 164 [ 67.331891][ T4955] loop4: detected capacity change from 0 to 512 [ 67.344941][ T4955] EXT4-fs: Ignoring removed oldalloc option [ 67.346079][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.362348][ T4953] ISOFS: unable to read i-node block [ 67.367686][ T4953] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 67.368581][ T4955] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.495: Parent and EA inode have the same ino 15 [ 67.390498][ T4955] EXT4-fs (loop4): Remounting filesystem read-only [ 67.397078][ T4955] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 67.406244][ T4955] EXT4-fs (loop4): 1 orphan inode deleted [ 67.413776][ T4955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.419213][ T4958] loop1: detected capacity change from 0 to 512 [ 67.425860][ T4955] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 67.429582][ T4955] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.452022][ T4958] EXT4-fs: Ignoring removed oldalloc option [ 67.460374][ T4960] IPv6: Can't replace route, no match found [ 67.470509][ T4958] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.496: Parent and EA inode have the same ino 15 [ 67.484998][ T4958] EXT4-fs (loop1): Remounting filesystem read-only [ 67.491633][ T4958] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5) [ 67.505946][ T4958] EXT4-fs (loop1): 1 orphan inode deleted [ 67.512066][ T4958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.524132][ T4958] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 67.531134][ T4958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.565580][ T4963] loop3: detected capacity change from 0 to 2048 [ 67.585892][ T4963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.610325][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.637619][ T4974] loop3: detected capacity change from 0 to 512 [ 67.644659][ T4974] EXT4-fs: Ignoring removed oldalloc option [ 67.673936][ T4974] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.500: Parent and EA inode have the same ino 15 [ 67.687031][ T4974] EXT4-fs (loop3): Remounting filesystem read-only [ 67.693710][ T4974] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 67.702716][ T4974] EXT4-fs (loop3): 1 orphan inode deleted [ 67.709064][ T4974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.721346][ T4974] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 67.754120][ T4974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.973487][ T4986] loop4: detected capacity change from 0 to 164 [ 67.982089][ T4986] ISOFS: unable to read i-node block [ 67.987408][ T4986] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 68.031752][ T4988] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 68.096626][ T4993] loop2: detected capacity change from 0 to 2048 [ 68.123334][ T4978] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.500'. [ 68.129225][ T4993] Alternate GPT is invalid, using primary GPT. [ 68.138944][ T4993] loop2: p2 p3 p7 [ 68.163378][ T4993] usb usb4: usbfs: process 4993 (syz.2.506) did not claim interface 0 before use [ 68.386013][ T5003] loop1: detected capacity change from 0 to 2048 [ 68.407005][ T5003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.444285][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.475987][ T5009] loop9: detected capacity change from 0 to 16384 [ 68.484996][ T5007] loop0: detected capacity change from 0 to 8192 [ 68.737038][ T5017] loop3: detected capacity change from 0 to 512 [ 68.744137][ T5017] EXT4-fs: Ignoring removed oldalloc option [ 68.753869][ T5017] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.514: Parent and EA inode have the same ino 15 [ 68.782508][ T5017] EXT4-fs (loop3): Remounting filesystem read-only [ 68.789397][ T5017] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 68.798323][ T5017] EXT4-fs (loop3): 1 orphan inode deleted [ 68.808722][ T5017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.820785][ T5017] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 68.831360][ T5017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.854777][ T5020] loop1: detected capacity change from 0 to 8192 [ 68.908013][ T5022] loop3: detected capacity change from 0 to 512 [ 68.918547][ T5022] EXT4-fs: Ignoring removed oldalloc option [ 68.939554][ T5022] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.516: Parent and EA inode have the same ino 15 [ 68.962114][ T5022] EXT4-fs (loop3): Remounting filesystem read-only [ 68.971465][ T5022] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 68.980575][ T5022] EXT4-fs (loop3): 1 orphan inode deleted [ 68.987398][ T5022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.999642][ T5022] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 69.006697][ T5022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.701973][ T5036] loop0: detected capacity change from 0 to 2048 [ 69.774707][ T5036] Alternate GPT is invalid, using primary GPT. [ 69.781048][ T5036] loop0: p2 p3 p7 [ 69.787551][ T5030] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.516'. [ 69.807398][ T5036] usb usb4: usbfs: process 5036 (syz.0.519) did not claim interface 0 before use [ 69.860071][ T5041] loop4: detected capacity change from 0 to 512 [ 69.873174][ T5041] EXT4-fs: Ignoring removed oldalloc option [ 69.892021][ T5041] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.521: Parent and EA inode have the same ino 15 [ 69.917574][ T5041] EXT4-fs (loop4): Remounting filesystem read-only [ 69.937822][ T5041] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 69.961869][ T5041] EXT4-fs (loop4): 1 orphan inode deleted [ 69.981458][ T5041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.002497][ T5041] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 70.009560][ T5041] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.105245][ T5051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.117193][ T5048] loop2: detected capacity change from 0 to 8192 [ 70.131504][ T5051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.602836][ T5094] loop0: detected capacity change from 0 to 2048 [ 70.610277][ T5091] loop4: detected capacity change from 0 to 8192 [ 70.667589][ T5094] Alternate GPT is invalid, using primary GPT. [ 70.673901][ T5094] loop0: p2 p3 p7 [ 70.695495][ T5094] usb usb4: usbfs: process 5094 (syz.0.528) did not claim interface 0 before use [ 70.728142][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 70.728154][ T29] audit: type=1326 audit(70.766:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5090 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b27745d29 code=0x7ffc0000 [ 70.758035][ T29] audit: type=1326 audit(70.796:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5090 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b27745d29 code=0x7ffc0000 [ 70.790022][ T29] audit: type=1326 audit(70.816:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 70.812676][ T29] audit: type=1326 audit(70.826:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 70.835326][ T29] audit: type=1326 audit(70.826:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 70.857949][ T29] audit: type=1326 audit(70.826:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 70.880727][ T29] audit: type=1326 audit(70.826:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 70.903413][ T29] audit: type=1326 audit(70.826:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 70.926025][ T29] audit: type=1326 audit(70.826:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 70.948784][ T29] audit: type=1326 audit(70.826:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 71.179612][ T5132] loop1: detected capacity change from 0 to 2048 [ 71.220794][ T5132] Alternate GPT is invalid, using primary GPT. [ 71.227259][ T5132] loop1: p2 p3 p7 [ 71.241550][ T5132] usb usb4: usbfs: process 5132 (syz.1.531) did not claim interface 0 before use [ 71.267488][ T2998] Alternate GPT is invalid, using primary GPT. [ 71.273919][ T2998] loop1: p2 p3 p7 [ 71.422157][ T5151] loop0: detected capacity change from 0 to 8192 [ 71.682586][ T5180] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.968727][ T5210] loop4: detected capacity change from 0 to 8192 [ 72.267223][ T5230] loop1: detected capacity change from 0 to 8192 [ 72.476904][ T5253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 72.511865][ T5258] loop0: detected capacity change from 0 to 2048 [ 72.542078][ T5258] Alternate GPT is invalid, using primary GPT. [ 72.548372][ T5258] loop0: p2 p3 p7 [ 72.583098][ T5258] usb usb4: usbfs: process 5258 (syz.0.545) did not claim interface 0 before use [ 72.711531][ T2998] Alternate GPT is invalid, using primary GPT. [ 72.717891][ T2998] loop0: p2 p3 p7 [ 73.077909][ T5287] loop4: detected capacity change from 0 to 8192 [ 73.113489][ T5289] loop2: detected capacity change from 0 to 2048 [ 73.145373][ T5292] loop1: detected capacity change from 0 to 2048 [ 73.156664][ T5289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.172156][ T5292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.197810][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.249262][ T5303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.550'. [ 73.300740][ T5307] loop2: detected capacity change from 0 to 2048 [ 73.316519][ T5307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.359614][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.396613][ T5311] loop0: detected capacity change from 0 to 8192 [ 73.454711][ T5314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 73.497400][ T5319] loop3: detected capacity change from 0 to 512 [ 73.508770][ T5319] EXT4-fs: Ignoring removed oldalloc option [ 73.520142][ T5316] loop2: detected capacity change from 0 to 2048 [ 73.533100][ T5319] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.556: Parent and EA inode have the same ino 15 [ 73.546250][ T5319] EXT4-fs (loop3): Remounting filesystem read-only [ 73.554785][ T5316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.563818][ T5319] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 73.578190][ T5319] EXT4-fs (loop3): 1 orphan inode deleted [ 73.584894][ T5319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.597042][ T5319] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 73.604321][ T5319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.154708][ T5327] loop4: detected capacity change from 0 to 8192 [ 74.165516][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.206336][ T5329] loop1: detected capacity change from 0 to 2048 [ 74.232607][ T5329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.282479][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.418078][ T5341] loop0: detected capacity change from 0 to 2048 [ 74.425976][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.440653][ T5343] loop1: detected capacity change from 0 to 1024 [ 74.448975][ T5343] EXT4-fs: Ignoring removed nobh option [ 74.454607][ T5343] EXT4-fs: Ignoring removed oldalloc option [ 74.506278][ T5341] Alternate GPT is invalid, using primary GPT. [ 74.512602][ T5341] loop0: p2 p3 p7 [ 74.521972][ T5341] usb usb4: usbfs: process 5341 (syz.0.561) did not claim interface 0 before use [ 74.548606][ T5343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.596468][ T5350] usb usb4: usbfs: process 5350 (syz.3.565) did not claim interface 0 before use [ 74.608653][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.670481][ T5358] loop0: detected capacity change from 0 to 512 [ 74.677857][ T5358] EXT4-fs: Ignoring removed oldalloc option [ 74.690798][ T5358] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.568: Parent and EA inode have the same ino 15 [ 74.714009][ T5358] EXT4-fs (loop0): Remounting filesystem read-only [ 74.727126][ T5358] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -5) [ 74.743727][ T5358] EXT4-fs (loop0): 1 orphan inode deleted [ 74.749876][ T5358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.762136][ T5358] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 74.770070][ T5358] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.776069][ T5353] loop1: detected capacity change from 0 to 8192 [ 75.176730][ T5366] loop4: detected capacity change from 0 to 512 [ 75.183353][ T5366] EXT4-fs: Ignoring removed oldalloc option [ 75.208253][ T5366] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.571: Parent and EA inode have the same ino 15 [ 75.231029][ T5366] EXT4-fs (loop4): Remounting filesystem read-only [ 75.240846][ T5366] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 75.253623][ T5368] loop2: detected capacity change from 0 to 8192 [ 75.260052][ T5366] EXT4-fs (loop4): 1 orphan inode deleted [ 75.260504][ T5364] loop0: detected capacity change from 0 to 8192 [ 75.272490][ T5366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.284896][ T5366] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 75.298230][ T5366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.551512][ T5376] loop3: detected capacity change from 0 to 8192 [ 75.627620][ T5373] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.571'. [ 75.750045][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 75.750059][ T29] audit: type=1326 audit(75.786:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.3.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be93e5d29 code=0x7ffc0000 [ 75.780547][ T29] audit: type=1326 audit(75.816:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.3.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be93e5d29 code=0x7ffc0000 [ 76.126332][ T5384] IPv6: Can't replace route, no match found [ 76.209334][ T5391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'. [ 76.215202][ T5393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.227908][ T5393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.237323][ T5395] loop2: detected capacity change from 0 to 512 [ 76.244226][ T5395] EXT4-fs: Ignoring removed oldalloc option [ 76.252322][ T29] audit: type=1400 audit(76.286:1317): avc: denied { mount } for pid=5387 comm="syz.0.576" name="/" dev="configfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 76.276242][ T5395] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.579: Parent and EA inode have the same ino 15 [ 76.291131][ T5395] EXT4-fs (loop2): Remounting filesystem read-only [ 76.297701][ T5395] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5) [ 76.306636][ T5395] EXT4-fs (loop2): 1 orphan inode deleted [ 76.312817][ T5395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.324858][ T5395] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 76.334821][ T5395] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.452248][ T5407] loop0: detected capacity change from 0 to 2048 [ 76.537678][ T5407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.542401][ T5419] loop1: detected capacity change from 0 to 8192 [ 76.634138][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.665955][ T5423] loop3: detected capacity change from 0 to 8192 [ 76.715752][ T5433] loop0: detected capacity change from 0 to 2048 [ 76.723453][ T29] audit: type=1326 audit(76.756:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.1.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 76.746159][ T29] audit: type=1326 audit(76.756:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.1.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 76.789638][ T5433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.872257][ T29] audit: type=1326 audit(76.906:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be93e5d29 code=0x7ffc0000 [ 76.912195][ T29] audit: type=1326 audit(76.946:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5422 comm="syz.3.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be93e5d29 code=0x7ffc0000 [ 76.957106][ T5406] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.579'. [ 77.263535][ T5475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.584'. [ 77.477780][ T5492] loop2: detected capacity change from 0 to 8192 [ 77.577754][ T5498] loop1: detected capacity change from 0 to 8192 [ 77.678435][ T29] audit: type=1326 audit(77.716:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 77.701145][ T29] audit: type=1326 audit(77.716:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5497 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 77.736051][ T29] audit: type=1326 audit(77.716:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0350d45d29 code=0x7ffc0000 [ 77.834941][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.879083][ T5518] loop3: detected capacity change from 0 to 2048 [ 77.906609][ T5518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.949741][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 77.971485][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.047324][ T5536] loop0: detected capacity change from 0 to 2048 [ 78.054235][ T5540] IPv6: Can't replace route, no match found [ 78.110204][ T5536] Alternate GPT is invalid, using primary GPT. [ 78.116602][ T5536] loop0: p2 p3 p7 [ 78.150368][ T5536] usb usb4: usbfs: process 5536 (syz.0.592) did not claim interface 0 before use [ 78.164856][ T5546] loop3: detected capacity change from 0 to 2048 [ 78.195804][ T5546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.220775][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.317645][ T5563] loop3: detected capacity change from 0 to 8192 [ 78.552331][ T5595] loop2: detected capacity change from 0 to 512 [ 78.572744][ T5595] EXT4-fs: Ignoring removed oldalloc option [ 78.582018][ T5595] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.597: Parent and EA inode have the same ino 15 [ 78.595875][ T5595] EXT4-fs (loop2): Remounting filesystem read-only [ 78.604164][ T5595] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5) [ 78.622394][ T5595] EXT4-fs (loop2): 1 orphan inode deleted [ 78.638890][ T5595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.653798][ T5595] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 78.671094][ T5595] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.914886][ T5607] IPv6: Can't replace route, no match found [ 79.247720][ T5619] loop0: detected capacity change from 0 to 2048 [ 79.262723][ T5615] loop2: detected capacity change from 0 to 8192 [ 79.298336][ T5619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.351234][ T5631] usb usb4: usbfs: process 5631 (syz.1.608) did not claim interface 0 before use [ 79.373196][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.382159][ T5634] loop3: detected capacity change from 0 to 2048 [ 79.417925][ T5640] loop0: detected capacity change from 0 to 1024 [ 79.431563][ T5640] EXT4-fs: Ignoring removed nobh option [ 79.437226][ T5640] EXT4-fs: Ignoring removed oldalloc option [ 79.584907][ T5647] loop0: detected capacity change from 0 to 8192 [ 80.172079][ T5653] loop2: detected capacity change from 0 to 512 [ 80.179203][ T5653] EXT4-fs: Ignoring removed oldalloc option [ 80.216046][ T5653] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.614: Parent and EA inode have the same ino 15 [ 80.245037][ T5653] EXT4-fs (loop2): Remounting filesystem read-only [ 80.251929][ T5653] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5) [ 80.265721][ T5653] EXT4-fs (loop2): 1 orphan inode deleted [ 80.271852][ T5653] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 80.287378][ T5661] loop4: detected capacity change from 0 to 1024 [ 80.335851][ T5661] EXT4-fs: Ignoring removed nobh option [ 80.341442][ T5661] EXT4-fs: Ignoring removed oldalloc option [ 80.444773][ T5670] loop3: detected capacity change from 0 to 512 [ 80.452708][ T5670] EXT4-fs: Ignoring removed oldalloc option [ 80.461573][ T5672] loop4: detected capacity change from 0 to 164 [ 80.472227][ T5670] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.620: Parent and EA inode have the same ino 15 [ 80.488979][ T5672] ISOFS: unable to read i-node block [ 80.494315][ T5672] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 80.537004][ T5670] EXT4-fs (loop3): Remounting filesystem read-only [ 80.567175][ T5677] loop4: detected capacity change from 0 to 512 [ 80.573768][ T5677] EXT4-fs: Ignoring removed oldalloc option [ 80.592572][ T5670] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 80.607817][ T5670] EXT4-fs (loop3): 1 orphan inode deleted [ 80.616172][ T5670] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 80.629584][ T5677] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.624: Parent and EA inode have the same ino 15 [ 80.648274][ T5677] EXT4-fs (loop4): Remounting filesystem read-only [ 80.655257][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 80.672318][ T5677] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 80.686397][ T5677] EXT4-fs (loop4): 1 orphan inode deleted [ 80.701276][ T5677] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 80.720728][ T5666] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.614'. [ 80.781394][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 80.817409][ T5694] usb usb4: usbfs: process 5694 (syz.1.629) did not claim interface 0 before use [ 80.883964][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 80.883977][ T29] audit: type=1326 audit(80.926:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5693 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 80.912668][ T29] audit: type=1326 audit(80.926:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5693 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 80.936657][ T29] audit: type=1326 audit(80.956:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5693 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 80.959298][ T29] audit: type=1326 audit(80.956:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5693 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 80.982302][ T29] audit: type=1326 audit(80.956:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5693 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 81.004915][ T29] audit: type=1326 audit(80.956:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5693 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 81.027657][ T29] audit: type=1326 audit(80.956:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5693 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 81.050187][ T29] audit: type=1326 audit(80.956:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5693 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 81.072822][ T29] audit: type=1326 audit(80.956:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5693 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 81.095518][ T29] audit: type=1326 audit(80.956:1415): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5693 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c3205d29 code=0x7ffc0000 [ 81.223335][ T5692] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.624'. [ 81.250008][ T5701] loop2: detected capacity change from 0 to 8192 [ 81.500688][ T5739] loop0: detected capacity change from 0 to 8192 [ 81.691309][ T5764] loop4: detected capacity change from 0 to 512 [ 81.698093][ T5764] EXT4-fs: Ignoring removed oldalloc option [ 81.711677][ T5764] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.636: Parent and EA inode have the same ino 15 [ 81.725980][ T5764] EXT4-fs (loop4): Remounting filesystem read-only [ 81.732573][ T5764] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -5) [ 81.741514][ T5764] EXT4-fs (loop4): 1 orphan inode deleted [ 81.747691][ T5764] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 81.944003][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 82.016237][ T5813] loop4: detected capacity change from 0 to 164 [ 82.072631][ T5813] ISOFS: unable to read i-node block [ 82.077974][ T5813] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 82.181309][ T5831] loop3: detected capacity change from 0 to 2048 [ 82.200723][ T5832] loop4: detected capacity change from 0 to 8192 [ 82.291067][ T5848] loop1: detected capacity change from 0 to 2048 [ 82.313661][ T5852] loop3: detected capacity change from 0 to 164 [ 82.333394][ T5848] Alternate GPT is invalid, using primary GPT. [ 82.339782][ T5848] loop1: p2 p3 p7 [ 82.354064][ T5852] ISOFS: unable to read i-node block [ 82.359372][ T5852] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 82.377363][ T5858] loop2: detected capacity change from 0 to 2048 [ 82.380002][ T5848] usb usb4: usbfs: process 5848 (syz.1.644) did not claim interface 0 before use [ 82.428764][ T2998] Alternate GPT is invalid, using primary GPT. [ 82.435161][ T2998] loop1: p2 p3 p7 [ 83.265895][ T5972] loop1: detected capacity change from 0 to 1024 [ 83.334327][ T5972] FAULT_INJECTION: forcing a failure. [ 83.334327][ T5972] name failslab, interval 1, probability 0, space 0, times 0 [ 83.347070][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: +}[@ Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 83.357311][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.367369][ T5972] Call Trace: [ 83.370657][ T5972] [ 83.373589][ T5972] dump_stack_lvl+0xf2/0x150 [ 83.378206][ T5972] dump_stack+0x15/0x1a [ 83.382407][ T5972] should_fail_ex+0x223/0x230 [ 83.387091][ T5972] ? __iomap_dio_rw+0x144/0x1110 [ 83.392040][ T5972] should_failslab+0x8f/0xb0 [ 83.396643][ T5972] __kmalloc_cache_noprof+0x4e/0x320 [ 83.401966][ T5972] ? mod_objcg_state+0x2ea/0x4f0 [ 83.406915][ T5972] __iomap_dio_rw+0x144/0x1110 [ 83.411693][ T5972] ? should_fail_ex+0x31/0x230 [ 83.416470][ T5972] ? avc_has_perm_noaudit+0x1cc/0x210 [ 83.421902][ T5972] iomap_dio_rw+0x40/0x90 [ 83.426270][ T5972] ext4_file_read_iter+0x214/0x290 [ 83.431510][ T5972] copy_splice_read+0x3a0/0x5d0 [ 83.436554][ T5972] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 83.442384][ T5972] splice_direct_to_actor+0x28b/0x670 [ 83.447775][ T5972] ? __pfx_direct_splice_actor+0x10/0x10 [ 83.453530][ T5972] do_splice_direct+0xd7/0x150 [ 83.458318][ T5972] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 83.464250][ T5972] do_sendfile+0x398/0x660 [ 83.468734][ T5972] __x64_sys_sendfile64+0x110/0x150 [ 83.473995][ T5972] x64_sys_call+0xfbd/0x2dc0 [ 83.478640][ T5972] do_syscall_64+0xc9/0x1c0 [ 83.483230][ T5972] ? clear_bhb_loop+0x55/0xb0 [ 83.487923][ T5972] ? clear_bhb_loop+0x55/0xb0 [ 83.492763][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.498756][ T5972] RIP: 0033:0x7fa2c3205d29 [ 83.503166][ T5972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.522822][ T5972] RSP: 002b:00007fa2c1877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 83.531294][ T5972] RAX: ffffffffffffffda RBX: 00007fa2c33f5fa0 RCX: 00007fa2c3205d29 [ 83.539256][ T5972] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 83.547216][ T5972] RBP: 00007fa2c1877090 R08: 0000000000000000 R09: 0000000000000000 [ 83.555235][ T5972] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.563196][ T5972] R13: 0000000000000000 R14: 00007fa2c33f5fa0 R15: 00007ffefc143a18 [ 83.571185][ T5972] [ 83.628310][ T5994] netlink: 100 bytes leftover after parsing attributes in process `syz.2.658'. [ 83.680320][ T5996] loop4: detected capacity change from 0 to 1024 [ 83.689123][ T6001] loop0: detected capacity change from 0 to 8192 [ 83.701804][ T6003] loop2: detected capacity change from 0 to 512 [ 83.708328][ T5996] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 83.737076][ T6003] EXT4-fs: Ignoring removed oldalloc option [ 83.746177][ T5996] netlink: 104 bytes leftover after parsing attributes in process `syz.4.659'. [ 83.758848][ T6003] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.662: Parent and EA inode have the same ino 15 [ 83.778972][ T6003] EXT4-fs (loop2): Remounting filesystem read-only [ 83.793545][ T6003] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5) [ 83.813540][ T6003] EXT4-fs (loop2): 1 orphan inode deleted [ 83.820119][ T6003] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 84.145363][ T6047] loop1: detected capacity change from 0 to 512 [ 84.151999][ T6047] EXT4-fs: Ignoring removed oldalloc option [ 84.175603][ T6047] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.667: Parent and EA inode have the same ino 15 [ 84.204914][ T6047] EXT4-fs (loop1): Remounting filesystem read-only [ 84.211527][ T6047] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5) [ 84.278270][ T6047] EXT4-fs (loop1): 1 orphan inode deleted [ 84.300212][ T6047] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 84.483256][ T6026] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.662'. [ 84.740566][ T6075] netlink: 100 bytes leftover after parsing attributes in process `syz.2.672'. [ 84.817544][ T6086] usb usb4: usbfs: process 6086 (syz.2.676) did not claim interface 0 before use [ 84.928385][ T6091] loop3: detected capacity change from 0 to 2048 [ 84.986038][ T6098] FAULT_INJECTION: forcing a failure. [ 84.986038][ T6098] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.999176][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.3.679 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 85.009769][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.018331][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 85.019810][ T6098] Call Trace: [ 85.019818][ T6098] [ 85.034778][ T6098] dump_stack_lvl+0xf2/0x150 [ 85.039448][ T6098] dump_stack+0x15/0x1a [ 85.043643][ T6098] should_fail_ex+0x223/0x230 [ 85.048391][ T6098] should_fail+0xb/0x10 [ 85.052551][ T6098] should_fail_usercopy+0x1a/0x20 [ 85.057646][ T6098] _copy_to_user+0x20/0xa0 [ 85.062070][ T6098] simple_read_from_buffer+0xa0/0x110 [ 85.067490][ T6098] proc_fail_nth_read+0xf9/0x140 [ 85.072431][ T6098] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.077996][ T6098] vfs_read+0x1a2/0x700 [ 85.082185][ T6098] ? __rcu_read_unlock+0x4e/0x70 [ 85.087176][ T6098] ? __fget_files+0x17c/0x1c0 [ 85.091841][ T6098] ksys_read+0xe8/0x1b0 [ 85.096002][ T6098] __x64_sys_read+0x42/0x50 [ 85.100585][ T6098] x64_sys_call+0x2874/0x2dc0 [ 85.105304][ T6098] do_syscall_64+0xc9/0x1c0 [ 85.109789][ T6098] ? clear_bhb_loop+0x55/0xb0 [ 85.114539][ T6098] ? clear_bhb_loop+0x55/0xb0 [ 85.119201][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.125132][ T6098] RIP: 0033:0x7f3be93e473c [ 85.129530][ T6098] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 85.149145][ T6098] RSP: 002b:00007f3be7a51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.157604][ T6098] RAX: ffffffffffffffda RBX: 00007f3be95d5fa0 RCX: 00007f3be93e473c [ 85.165617][ T6098] RDX: 000000000000000f RSI: 00007f3be7a510a0 RDI: 0000000000000004 [ 85.173614][ T6098] RBP: 00007f3be7a51090 R08: 0000000000000000 R09: 0000000000000000 [ 85.181565][ T6098] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 85.189631][ T6098] R13: 0000000000000000 R14: 00007f3be95d5fa0 R15: 00007ffe88194928 [ 85.197594][ T6098] [ 85.219935][ T6107] IPv6: Can't replace route, no match found [ 85.239211][ T6109] netlink: 100 bytes leftover after parsing attributes in process `syz.1.684'. [ 85.344566][ T6123] loop3: detected capacity change from 0 to 512 [ 85.351148][ T6123] EXT4-fs: Ignoring removed oldalloc option [ 85.360476][ T6123] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.691: Parent and EA inode have the same ino 15 [ 85.373012][ T6123] EXT4-fs (loop3): Remounting filesystem read-only [ 85.379684][ T6123] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 85.388623][ T6123] EXT4-fs (loop3): 1 orphan inode deleted [ 85.394926][ T6123] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 85.517696][ T6130] loop1: detected capacity change from 0 to 2048 [ 85.608181][ T6139] loop1: detected capacity change from 0 to 2048 [ 85.695724][ T6154] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.808855][ T6160] loop7: detected capacity change from 0 to 16384 [ 85.872679][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.885551][ T6161] batadv_slave_0: entered promiscuous mode [ 85.901589][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 85.901601][ T29] audit: type=1326 audit(85.936:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b27745d29 code=0x7ffc0000 [ 85.944748][ T6160] I/O error, dev loop7, sector 6912 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 85.965685][ T6160] I/O error, dev loop7, sector 7168 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 85.981257][ T29] audit: type=1326 audit(85.936:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b27745d29 code=0x7ffc0000 [ 86.003931][ T29] audit: type=1326 audit(85.936:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7b27745d29 code=0x7ffc0000 [ 86.026781][ T29] audit: type=1326 audit(85.936:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b27745d29 code=0x7ffc0000 [ 86.033817][ T6160] I/O error, dev loop7, sector 6912 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.049813][ T29] audit: type=1326 audit(85.936:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b27745d29 code=0x7ffc0000 [ 86.058908][ T6160] Buffer I/O error on dev loop7, logical block 864, async page read [ 86.090168][ T29] audit: type=1326 audit(85.936:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b27745d29 code=0x7ffc0000 [ 86.112623][ T29] audit: type=1326 audit(85.976:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b27745d29 code=0x7ffc0000 [ 86.135348][ T29] audit: type=1400 audit(85.986:1637): avc: denied { compute_member } for pid=6159 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 86.155062][ T29] audit: type=1326 audit(85.996:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f7b27745d29 code=0x7ffc0000 [ 86.177738][ T29] audit: type=1326 audit(85.996:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6151 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b27745d29 code=0x7ffc0000 [ 86.200545][ T6171] veth0_to_team: entered promiscuous mode [ 86.206421][ T6171] veth0_to_team: entered allmulticast mode [ 86.606745][ T6160] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 86.616439][ T6160] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 86.624829][ T6160] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 86.633151][ T6160] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 86.641622][ T6160] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 86.649952][ T6160] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 86.658303][ T6160] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 86.666709][ T6160] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 86.675046][ T6160] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 86.683414][ T6160] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 86.694680][ T6160] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 86.706817][ T6160] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 86.718849][ T6160] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 86.731102][ T6160] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 86.742987][ T6160] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 86.754733][ T6160] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x800 phys_seg 96 prio class 0 [ 86.850014][ T6190] tipc: Enabling of bearer rejected, failed to enable media [ 86.873401][ T6193] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.106428][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 87.135473][ T6200] usb usb4: usbfs: process 6200 (syz.1.716) did not claim interface 0 before use [ 87.293485][ T6223] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.395699][ T6245] netlink: '+}[@': attribute type 39 has an invalid length. [ 87.400145][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 87.432086][ T6241] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 87.465012][ T6241] loop2: detected capacity change from 0 to 1024 [ 87.490534][ T6241] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.501770][ T6241] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 87.512334][ T6241] EXT4-fs (loop2): orphan cleanup on readonly fs [ 87.524676][ T6241] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.733: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.554003][ T6241] EXT4-fs (loop2): 1 orphan inode deleted [ 87.571538][ T6258] IPv6: Can't replace route, no match found [ 87.603449][ T6260] loop2: detected capacity change from 0 to 512 [ 87.610817][ T6260] EXT4-fs: Ignoring removed oldalloc option [ 87.622762][ T6260] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.740: Parent and EA inode have the same ino 15 [ 87.638827][ T6260] EXT4-fs (loop2): Remounting filesystem read-only [ 87.645916][ T6260] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5) [ 87.655148][ T6260] EXT4-fs (loop2): 1 orphan inode deleted [ 87.661304][ T6260] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 87.665220][ T6268] tmpfs: Bad value for 'nr_inodes' [ 87.690301][ T6269] loop3: detected capacity change from 0 to 2048 [ 87.740923][ T6277] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.797099][ T6281] loop0: detected capacity change from 0 to 512 [ 87.805072][ T6281] EXT4-fs: Ignoring removed oldalloc option [ 87.814303][ T6281] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.748: Parent and EA inode have the same ino 15 [ 87.832356][ T6281] EXT4-fs (loop0): Remounting filesystem read-only [ 87.843317][ T6281] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -5) [ 87.853908][ T6281] EXT4-fs (loop0): 1 orphan inode deleted [ 87.859948][ T6281] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 88.061776][ T6293] IPv6: Can't replace route, no match found [ 88.111393][ T6279] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.747'. [ 88.138363][ T6297] tipc: Started in network mode [ 88.143312][ T6297] tipc: Node identity 767f91bd99d6, cluster identity 4711 [ 88.150515][ T6297] tipc: Enabled bearer , priority 0 [ 88.259555][ T6297] syzkaller0: entered promiscuous mode [ 88.265082][ T6297] syzkaller0: entered allmulticast mode [ 88.284157][ T6297] tipc: Resetting bearer [ 88.298182][ T6296] tipc: Resetting bearer [ 88.310039][ T6296] tipc: Disabling bearer [ 88.317422][ T6305] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 88.419335][ T6310] loop1: detected capacity change from 0 to 2048 [ 88.477486][ T6286] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.748'. [ 88.490366][ T6317] loop3: detected capacity change from 0 to 1024 [ 88.497031][ T6317] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 88.521837][ T6319] IPv6: Can't replace route, no match found [ 88.582845][ T6322] loop2: detected capacity change from 0 to 4096 [ 88.611345][ T6327] loop3: detected capacity change from 0 to 2048 [ 88.659620][ T6327] Alternate GPT is invalid, using primary GPT. [ 88.666008][ T6327] loop3: p2 p3 p7 [ 88.732357][ T6322] __nla_validate_parse: 1 callbacks suppressed [ 88.732371][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 88.751093][ T6322] bridge_slave_1: left allmulticast mode [ 88.756769][ T6322] bridge_slave_1: left promiscuous mode [ 88.762490][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.788093][ T6327] usb usb4: usbfs: process 6327 (syz.3.764) did not claim interface 0 before use [ 88.819968][ T6322] bridge_slave_0: left allmulticast mode [ 88.825768][ T6322] bridge_slave_0: left promiscuous mode [ 88.831427][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.864026][ T6349] loop1: detected capacity change from 0 to 512 [ 88.871681][ T6349] EXT4-fs: Ignoring removed oldalloc option [ 88.882222][ T6349] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.772: Parent and EA inode have the same ino 15 [ 88.894986][ T6349] EXT4-fs (loop1): Remounting filesystem read-only [ 88.901576][ T6349] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5) [ 88.901615][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.763'. [ 88.910636][ T6349] EXT4-fs (loop1): 1 orphan inode deleted [ 88.925571][ T6349] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 89.062104][ T6356] netlink: 'syz.2.774': attribute type 21 has an invalid length. [ 89.069886][ T6356] netlink: 156 bytes leftover after parsing attributes in process `syz.2.774'. [ 89.098181][ T6358] syz.2.775[6358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.098338][ T6358] syz.2.775[6358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.109695][ T6358] syz.2.775[6358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.228215][ T6363] loop0: detected capacity change from 0 to 2048 [ 89.287949][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.778'. [ 89.329548][ T6374] loop2: detected capacity change from 0 to 128 [ 89.331242][ T6372] loop0: detected capacity change from 0 to 128 [ 89.338647][ T6374] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.342515][ T6372] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.360672][ T6374] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.376018][ T6372] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.495970][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 89.511262][ T6380] loop2: detected capacity change from 0 to 8192 [ 89.524034][ T6380] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 89.524034][ T6380] n'º|$@OOݱµ’-®+·el' [ 89.684739][ T6393] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.739476][ T6395] loop1: detected capacity change from 0 to 1024 [ 89.746962][ T6395] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 89.768874][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 89.822382][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.790'. [ 89.847587][ T6401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.791'. [ 89.866441][ T6403] loop3: detected capacity change from 0 to 128 [ 89.873244][ T6403] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.888249][ T6403] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.888759][ T6405] loop1: detected capacity change from 0 to 512 [ 89.903975][ T6405] EXT4-fs: Ignoring removed oldalloc option [ 89.920807][ T6405] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.793: Parent and EA inode have the same ino 15 [ 89.929955][ T6408] loop3: detected capacity change from 0 to 512 [ 89.933488][ T6405] EXT4-fs (loop1): Remounting filesystem read-only [ 89.943625][ T6408] EXT4-fs: Ignoring removed oldalloc option [ 89.947532][ T6405] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5) [ 89.961147][ T6405] EXT4-fs (loop1): 1 orphan inode deleted [ 89.967253][ T6405] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 89.972076][ T6408] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.794: Parent and EA inode have the same ino 15 [ 89.986273][ T6408] EXT4-fs (loop3): Remounting filesystem read-only [ 89.992873][ T6408] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 90.001880][ T6408] EXT4-fs (loop3): 1 orphan inode deleted [ 90.008045][ T6408] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 90.315482][ T6410] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.793'. [ 90.523015][ T6411] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.794'. [ 90.543173][ T6418] loop0: detected capacity change from 0 to 8192 [ 90.551547][ T6418] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 90.551547][ T6418] n'º|$@OOݱµ’-®+·el' [ 90.631158][ T6425] usb usb4: usbfs: process 6425 (syz.2.800) did not claim interface 0 before use [ 90.822300][ T6431] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.851615][ T6433] syz.1.803[6433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.851772][ T6433] syz.1.803[6433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.886134][ T6437] capability: warning: `syz.1.805' uses 32-bit capabilities (legacy support in use) [ 90.911873][ T6436] loop3: detected capacity change from 0 to 512 [ 90.956093][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 90.956106][ T29] audit: type=1400 audit(90.986:1993): avc: denied { map } for pid=6440 comm="syz.3.806" path="socket:[11329]" dev="sockfs" ino=11329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 90.984580][ T29] audit: type=1326 audit(90.996:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be93e5d29 code=0x7ffc0000 [ 91.007408][ T29] audit: type=1326 audit(90.996:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3be93e5d29 code=0x7ffc0000 [ 91.010023][ T6441] loop3: detected capacity change from 0 to 512 [ 91.029996][ T29] audit: type=1326 audit(90.996:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be93e5d29 code=0x7ffc0000 [ 91.058905][ T29] audit: type=1326 audit(90.996:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be93e5d29 code=0x7ffc0000 [ 91.081494][ T29] audit: type=1326 audit(90.996:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be93e5d29 code=0x7ffc0000 [ 91.104088][ T29] audit: type=1326 audit(90.996:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f3be93e5d29 code=0x7ffc0000 [ 91.126680][ T29] audit: type=1326 audit(90.996:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be93e5d29 code=0x7ffc0000 [ 91.149312][ T29] audit: type=1326 audit(90.996:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be93e5d29 code=0x7ffc0000 [ 91.172079][ T29] audit: type=1326 audit(90.996:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be93e5d29 code=0x7ffc0000 [ 91.186604][ T6443] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.233269][ T6449] loop0: detected capacity change from 0 to 1024 [ 91.239893][ T6449] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 91.366435][ T6461] loop0: detected capacity change from 0 to 4096 [ 91.427504][ T6470] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.513058][ T6479] loop2: detected capacity change from 0 to 2048 [ 91.586593][ T6490] FAULT_INJECTION: forcing a failure. [ 91.586593][ T6490] name failslab, interval 1, probability 0, space 0, times 0 [ 91.599245][ T6490] CPU: 1 UID: 0 PID: 6490 Comm: syz.2.825 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 91.609829][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.619864][ T6490] Call Trace: [ 91.623154][ T6490] [ 91.626129][ T6490] dump_stack_lvl+0xf2/0x150 [ 91.630752][ T6490] dump_stack+0x15/0x1a [ 91.634915][ T6490] should_fail_ex+0x223/0x230 [ 91.639729][ T6490] should_failslab+0x8f/0xb0 [ 91.644344][ T6490] kmem_cache_alloc_noprof+0x52/0x320 [ 91.649762][ T6490] ? skb_clone+0x154/0x1f0 [ 91.654193][ T6490] skb_clone+0x154/0x1f0 [ 91.658452][ T6490] __netlink_deliver_tap+0x2bd/0x4f0 [ 91.663746][ T6490] netlink_unicast+0x64a/0x670 [ 91.668519][ T6490] netlink_sendmsg+0x5cc/0x6e0 [ 91.673350][ T6490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.678760][ T6490] __sock_sendmsg+0x140/0x180 [ 91.683488][ T6490] ____sys_sendmsg+0x312/0x410 [ 91.688248][ T6490] __sys_sendmsg+0x19d/0x230 [ 91.692880][ T6490] __x64_sys_sendmsg+0x46/0x50 [ 91.697636][ T6490] x64_sys_call+0x2734/0x2dc0 [ 91.702302][ T6490] do_syscall_64+0xc9/0x1c0 [ 91.706861][ T6490] ? clear_bhb_loop+0x55/0xb0 [ 91.711578][ T6490] ? clear_bhb_loop+0x55/0xb0 [ 91.716336][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.722228][ T6490] RIP: 0033:0x7f0350d45d29 [ 91.726670][ T6490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.746428][ T6490] RSP: 002b:00007f034f3b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.754847][ T6490] RAX: ffffffffffffffda RBX: 00007f0350f35fa0 RCX: 00007f0350d45d29 [ 91.762848][ T6490] RDX: 0000000000004000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 91.770808][ T6490] RBP: 00007f034f3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 91.778795][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.786772][ T6490] R13: 0000000000000000 R14: 00007f0350f35fa0 R15: 00007ffe9c161128 [ 91.794738][ T6490] [ 91.801482][ T6490] vti0: entered allmulticast mode [ 91.845893][ T6497] IPv6: Can't replace route, no match found [ 91.870124][ T6500] loop1: detected capacity change from 0 to 4096 [ 91.965237][ T6519] syz.1.837 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.977174][ T6521] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 91.977174][ T6521] The task syz.4.831 (6521) triggered the difference, watch for misbehavior. [ 92.029503][ T6525] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 92.140215][ T6532] IPv6: Can't replace route, no match found [ 92.174129][ T6536] FAULT_INJECTION: forcing a failure. [ 92.174129][ T6536] name failslab, interval 1, probability 0, space 0, times 0 [ 92.186752][ T6536] CPU: 1 UID: 0 PID: 6536 Comm: syz.3.844 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 92.197386][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.207457][ T6536] Call Trace: [ 92.210734][ T6536] [ 92.213651][ T6536] dump_stack_lvl+0xf2/0x150 [ 92.218320][ T6536] dump_stack+0x15/0x1a [ 92.222546][ T6536] should_fail_ex+0x223/0x230 [ 92.227222][ T6536] ? __tipc_dump_start+0x9d/0xf0 [ 92.232147][ T6536] should_failslab+0x8f/0xb0 [ 92.236752][ T6536] __kmalloc_cache_noprof+0x4e/0x320 [ 92.242130][ T6536] __tipc_dump_start+0x9d/0xf0 [ 92.246919][ T6536] __tipc_nl_compat_dumpit+0xd6/0x620 [ 92.252316][ T6536] ? vsnprintf+0xdd8/0xe30 [ 92.256743][ T6536] tipc_nl_compat_dumpit+0x387/0x400 [ 92.262020][ T6536] tipc_nl_compat_recv+0x729/0x850 [ 92.267126][ T6536] ? __pfx_tipc_nl_compat_name_table_dump_header+0x10/0x10 [ 92.274315][ T6536] ? __pfx_tipc_nl_name_table_dump+0x10/0x10 [ 92.280305][ T6536] ? __pfx_tipc_nl_compat_name_table_dump+0x10/0x10 [ 92.286912][ T6536] genl_rcv_msg+0x61b/0x6c0 [ 92.291425][ T6536] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 92.297057][ T6536] ? __dev_queue_xmit+0xb6e/0x2090 [ 92.302225][ T6536] netlink_rcv_skb+0x12c/0x230 [ 92.306981][ T6536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 92.312115][ T6536] genl_rcv+0x28/0x40 [ 92.316108][ T6536] netlink_unicast+0x599/0x670 [ 92.320876][ T6536] netlink_sendmsg+0x5cc/0x6e0 [ 92.325637][ T6536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.330967][ T6536] __sock_sendmsg+0x140/0x180 [ 92.335716][ T6536] ____sys_sendmsg+0x312/0x410 [ 92.340483][ T6536] __sys_sendmsg+0x19d/0x230 [ 92.345133][ T6536] __x64_sys_sendmsg+0x46/0x50 [ 92.349887][ T6536] x64_sys_call+0x2734/0x2dc0 [ 92.354566][ T6536] do_syscall_64+0xc9/0x1c0 [ 92.359079][ T6536] ? clear_bhb_loop+0x55/0xb0 [ 92.363797][ T6536] ? clear_bhb_loop+0x55/0xb0 [ 92.368470][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.374420][ T6536] RIP: 0033:0x7f3be93e5d29 [ 92.378823][ T6536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.398421][ T6536] RSP: 002b:00007f3be7a51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.406857][ T6536] RAX: ffffffffffffffda RBX: 00007f3be95d5fa0 RCX: 00007f3be93e5d29 [ 92.414848][ T6536] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 92.422808][ T6536] RBP: 00007f3be7a51090 R08: 0000000000000000 R09: 0000000000000000 [ 92.430822][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.438782][ T6536] R13: 0000000000000000 R14: 00007f3be95d5fa0 R15: 00007ffe88194928 [ 92.446746][ T6536] [ 92.462224][ T6538] process 'syz.0.845' launched './file1' with NULL argv: empty string added [ 92.529046][ T6548] FAULT_INJECTION: forcing a failure. [ 92.529046][ T6548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.542169][ T6548] CPU: 1 UID: 0 PID: 6548 Comm: syz.3.849 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 92.542196][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.542209][ T6548] Call Trace: [ 92.542215][ T6548] [ 92.542223][ T6548] dump_stack_lvl+0xf2/0x150 [ 92.542332][ T6548] dump_stack+0x15/0x1a [ 92.542357][ T6548] should_fail_ex+0x223/0x230 [ 92.542378][ T6548] should_fail+0xb/0x10 [ 92.542395][ T6548] should_fail_usercopy+0x1a/0x20 [ 92.542470][ T6548] strncpy_from_user+0x25/0x210 [ 92.542549][ T6548] ? audit_log_end+0x1d0/0x1e0 [ 92.542590][ T6548] path_setxattrat+0xed/0x310 [ 92.542665][ T6548] __x64_sys_setxattr+0x6e/0x90 [ 92.542693][ T6548] x64_sys_call+0x2247/0x2dc0 [ 92.542714][ T6548] do_syscall_64+0xc9/0x1c0 [ 92.542742][ T6548] ? clear_bhb_loop+0x55/0xb0 [ 92.542816][ T6548] ? clear_bhb_loop+0x55/0xb0 [ 92.542840][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.542973][ T6548] RIP: 0033:0x7f3be93e5d29 [ 92.542990][ T6548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.543008][ T6548] RSP: 002b:00007f3be7a51038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 92.543029][ T6548] RAX: ffffffffffffffda RBX: 00007f3be95d5fa0 RCX: 00007f3be93e5d29 [ 92.543059][ T6548] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000020000080 [ 92.543073][ T6548] RBP: 00007f3be7a51090 R08: 0000000000000000 R09: 0000000000000000 [ 92.543087][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.543100][ T6548] R13: 0000000000000000 R14: 00007f3be95d5fa0 R15: 00007ffe88194928 [ 92.543197][ T6548] [ 92.578737][ T6552] tmpfs: Unknown parameter '(öÑ¿BŸ½‰˜ñU9b/' [ 92.580779][ T6552] netlink: 'syz.3.851': attribute type 10 has an invalid length. [ 92.581714][ T6546] loop1: detected capacity change from 0 to 4096 [ 92.698186][ T6556] xt_hashlimit: max too large, truncated to 1048576 [ 92.780663][ T6560] loop2: detected capacity change from 0 to 1024 [ 92.783295][ T6552] team0: Port device geneve1 added [ 92.787871][ T6560] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 92.903136][ T6569] loop3: detected capacity change from 0 to 164 [ 92.914867][ T6569] ISOFS: unable to read i-node block [ 92.920163][ T6569] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 92.985123][ T6578] loop3: detected capacity change from 0 to 512 [ 93.124674][ T6593] loop0: detected capacity change from 0 to 2048 [ 93.147695][ T6593] Cannot find set identified by id 0 to match [ 93.194962][ T6601] loop0: detected capacity change from 0 to 164 [ 93.201930][ T6601] ISOFS: unable to read i-node block [ 93.207313][ T6601] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 93.278632][ T6605] loop0: detected capacity change from 0 to 1024 [ 93.285366][ T6605] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 93.316629][ T6607] FAULT_INJECTION: forcing a failure. [ 93.316629][ T6607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.329714][ T6607] CPU: 0 UID: 0 PID: 6607 Comm: syz.0.867 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 93.340373][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.350489][ T6607] Call Trace: [ 93.353852][ T6607] [ 93.356814][ T6607] dump_stack_lvl+0xf2/0x150 [ 93.361477][ T6607] dump_stack+0x15/0x1a [ 93.365666][ T6607] should_fail_ex+0x223/0x230 [ 93.370369][ T6607] should_fail+0xb/0x10 [ 93.374517][ T6607] should_fail_usercopy+0x1a/0x20 [ 93.379615][ T6607] _copy_from_iter+0xd5/0xd00 [ 93.384298][ T6607] ? kmalloc_reserve+0x16e/0x190 [ 93.389226][ T6607] ? __build_skb_around+0x196/0x1f0 [ 93.394521][ T6607] ? __alloc_skb+0x21f/0x310 [ 93.399100][ T6607] ? __virt_addr_valid+0x1ed/0x250 [ 93.404295][ T6607] ? __check_object_size+0x364/0x520 [ 93.409574][ T6607] netlink_sendmsg+0x460/0x6e0 [ 93.414337][ T6607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.419638][ T6607] __sock_sendmsg+0x140/0x180 [ 93.424396][ T6607] ____sys_sendmsg+0x312/0x410 [ 93.429155][ T6607] __sys_sendmsg+0x19d/0x230 [ 93.433835][ T6607] __x64_sys_sendmsg+0x46/0x50 [ 93.438627][ T6607] x64_sys_call+0x2734/0x2dc0 [ 93.443323][ T6607] do_syscall_64+0xc9/0x1c0 [ 93.447914][ T6607] ? clear_bhb_loop+0x55/0xb0 [ 93.452664][ T6607] ? clear_bhb_loop+0x55/0xb0 [ 93.457333][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.463263][ T6607] RIP: 0033:0x7f0da2595d29 [ 93.467667][ T6607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.487368][ T6607] RSP: 002b:00007f0da0c01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.495773][ T6607] RAX: ffffffffffffffda RBX: 00007f0da2785fa0 RCX: 00007f0da2595d29 [ 93.503764][ T6607] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 93.511757][ T6607] RBP: 00007f0da0c01090 R08: 0000000000000000 R09: 0000000000000000 [ 93.519718][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.527680][ T6607] R13: 0000000000000000 R14: 00007f0da2785fa0 R15: 00007ffd5d751e28 [ 93.535668][ T6607] [ 93.592933][ T6611] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.620002][ T6615] loop0: detected capacity change from 0 to 2048 [ 93.763484][ T6633] loop2: detected capacity change from 0 to 512 [ 93.770234][ T6633] EXT4-fs: Ignoring removed oldalloc option [ 93.788391][ T6633] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.878: Parent and EA inode have the same ino 15 [ 93.815031][ T6633] EXT4-fs (loop2): Remounting filesystem read-only [ 93.821614][ T6633] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5) [ 93.834276][ T6633] EXT4-fs (loop2): 1 orphan inode deleted [ 93.840444][ T6633] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 93.981273][ T6654] __nla_validate_parse: 11 callbacks suppressed [ 93.981289][ T6654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.886'. [ 94.060985][ T6662] loop3: detected capacity change from 0 to 1024 [ 94.069814][ T6662] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 94.087614][ T6664] loop0: detected capacity change from 0 to 2048 [ 94.254048][ T6664] Alternate GPT is invalid, using primary GPT. [ 94.260404][ T6664] loop0: p2 p3 p7 [ 94.369112][ T6664] usb usb4: usbfs: process 6664 (syz.0.892) did not claim interface 0 before use [ 94.381290][ T2998] Alternate GPT is invalid, using primary GPT. [ 94.387695][ T2998] loop0: p2 p3 p7 [ 94.506968][ T6678] loop2: detected capacity change from 0 to 1764 [ 94.574702][ T6683] loop2: detected capacity change from 0 to 2048 [ 94.582164][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.899'. [ 94.639730][ T6696] loop2: detected capacity change from 0 to 2048 [ 94.651164][ T6698] capability: warning: `syz.3.903' uses deprecated v2 capabilities in a way that may be insecure [ 94.680814][ T6703] syz.3.904[6703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.680882][ T6703] syz.3.904[6703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.692404][ T6703] syz.3.904[6703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.707064][ T6703] tipc: Enabling of bearer rejected, failed to enable media [ 94.735556][ T6703] program syz.3.904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.817546][ T24] IPVS: starting estimator thread 0... [ 94.876869][ T6722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.911'. [ 94.922944][ T6723] loop3: detected capacity change from 0 to 256 [ 94.935633][ T6718] IPVS: using max 2880 ests per chain, 144000 per kthread [ 94.937931][ T6725] loop2: detected capacity change from 0 to 1024 [ 94.963931][ T6725] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 95.016420][ T6735] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.082042][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.922'. [ 95.103905][ T6749] netlink: 'syz.2.923': attribute type 2 has an invalid length. [ 95.111512][ T6753] loop1: detected capacity change from 0 to 512 [ 95.119388][ T6753] EXT4-fs: Ignoring removed oldalloc option [ 95.127636][ T6753] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.925: Parent and EA inode have the same ino 15 [ 95.140795][ T6753] EXT4-fs (loop1): Remounting filesystem read-only [ 95.148436][ T6753] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5) [ 95.157543][ T6753] EXT4-fs (loop1): 1 orphan inode deleted [ 95.163626][ T6753] EXT4-fs mount: 78 callbacks suppressed [ 95.163636][ T6753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.181882][ T6753] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 95.190167][ T6753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.387387][ T6781] loop0: detected capacity change from 0 to 1024 [ 95.394377][ T6781] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 95.424447][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 95.486352][ T6785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.935'. [ 95.520151][ T6787] loop0: detected capacity change from 0 to 2048 [ 95.559066][ T6787] Alternate GPT is invalid, using primary GPT. [ 95.565654][ T6787] loop0: p2 p3 p7 [ 95.575852][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 95.601534][ T6787] usb usb4: usbfs: process 6787 (syz.0.936) did not claim interface 0 before use [ 95.633535][ T6791] loop1: detected capacity change from 0 to 4096 [ 95.642592][ T6791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.647567][ T3301] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 95.657066][ T6791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.672779][ T3301] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 96.024330][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 96.024344][ T29] audit: type=1400 audit(96.066:2337): avc: denied { create } for pid=6811 comm="syz.4.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 96.059807][ T6801] chnl_net:caif_netlink_parms(): no params data found [ 96.076086][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 96.114552][ T6801] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.121622][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.145455][ T6801] bridge_slave_0: entered allmulticast mode [ 96.156261][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'. [ 96.165660][ T6801] bridge_slave_0: entered promiscuous mode [ 96.172367][ T6801] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.179582][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.187655][ T6801] bridge_slave_1: entered allmulticast mode [ 96.194349][ T6801] bridge_slave_1: entered promiscuous mode [ 96.213754][ T6801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.230828][ T6801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.237020][ T6827] loop2: detected capacity change from 0 to 512 [ 96.248633][ T6827] EXT4-fs: Ignoring removed oldalloc option [ 96.256413][ T6827] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.949: Parent and EA inode have the same ino 15 [ 96.270805][ T6827] EXT4-fs (loop2): Remounting filesystem read-only [ 96.272789][ T6801] team0: Port device team_slave_0 added [ 96.277590][ T6827] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5) [ 96.293273][ T6827] EXT4-fs (loop2): 1 orphan inode deleted [ 96.294697][ T6801] team0: Port device team_slave_1 added [ 96.299674][ T6827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.319391][ T6827] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 96.326342][ T6827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.326872][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.342297][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.368190][ T6801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.435237][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.442247][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.468224][ T6801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.576131][ T6801] hsr_slave_0: entered promiscuous mode [ 96.584262][ T6801] hsr_slave_1: entered promiscuous mode [ 96.592367][ T6801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.601866][ T6801] Cannot create hsr debugfs directory [ 96.708844][ T6831] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.949'. [ 96.741723][ T6801] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.750326][ T6801] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.760517][ T6801] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.769942][ T6801] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.820303][ T6801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.833899][ T6801] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.845788][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.852946][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.871516][ T6801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.881935][ T6801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.910797][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.917870][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.926924][ T6839] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 96.926924][ T6839] n'º|$@OOݱµ’-®+·el' [ 96.968454][ T6801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.041090][ T29] audit: type=1400 audit(97.076:2338): avc: denied { write } for pid=6852 comm="syz.4.954" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 97.071283][ T6854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6854 comm=syz.4.954 [ 97.120604][ T6801] veth0_vlan: entered promiscuous mode [ 97.128618][ T6801] veth1_vlan: entered promiscuous mode [ 97.147518][ T6801] veth0_macvtap: entered promiscuous mode [ 97.156873][ T6801] veth1_macvtap: entered promiscuous mode [ 97.168120][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.178657][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.188779][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.199209][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.209218][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.219678][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.222045][ T6866] tmpfs: Unknown parameter '(öÑ¿BŸ½‰˜ñU9b/' [ 97.229776][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.246018][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.257000][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.269052][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.279609][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.289464][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.299994][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.309899][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.320403][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.330312][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.340760][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.350590][ T6801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.361125][ T6801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.365431][ T6873] loop0: detected capacity change from 0 to 2048 [ 97.372169][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.386441][ T6801] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.395210][ T6801] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.403952][ T6801] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.412642][ T6801] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.431647][ T29] audit: type=1400 audit(97.466:2339): avc: denied { mount } for pid=6801 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.453689][ T29] audit: type=1400 audit(97.466:2340): avc: denied { mounton } for pid=6801 comm="syz-executor" path="/root/syzkaller.qf4p5x/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 97.489593][ T6873] Alternate GPT is invalid, using primary GPT. [ 97.496116][ T6873] loop0: p2 p3 p7 [ 97.503267][ T6873] usb usb4: usbfs: process 6873 (syz.0.959) did not claim interface 0 before use [ 97.515309][ T6884] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.526152][ T2998] Alternate GPT is invalid, using primary GPT. [ 97.532610][ T2998] loop0: p2 p3 p7 [ 97.555306][ T29] audit: type=1326 audit(97.596:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 97.578013][ T29] audit: type=1326 audit(97.596:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 97.600989][ T29] audit: type=1326 audit(97.596:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 97.623599][ T29] audit: type=1326 audit(97.596:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 97.646518][ T29] audit: type=1326 audit(97.596:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 97.669155][ T29] audit: type=1326 audit(97.596:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da2595d29 code=0x7ffc0000 [ 97.917969][ T6908] loop5: detected capacity change from 0 to 512 [ 97.925135][ T6908] ext4: Unknown parameter 'appraise' [ 98.016707][ T6915] loop5: detected capacity change from 0 to 1024 [ 98.038968][ T6915] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 98.056086][ T6915] EXT4-fs (loop5): mount failed [ 98.088936][ T6919] IPv6: Can't replace route, no match found [ 98.257798][ T6943] loop0: detected capacity change from 0 to 512 [ 98.267358][ T6943] EXT4-fs: Ignoring removed oldalloc option [ 98.277633][ T6943] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.987: Parent and EA inode have the same ino 15 [ 98.298181][ T6943] EXT4-fs (loop0): Remounting filesystem read-only [ 98.304798][ T6943] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -5) [ 98.314118][ T6943] EXT4-fs (loop0): 1 orphan inode deleted [ 98.320383][ T6943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.332435][ T6943] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 98.342935][ T6954] FAULT_INJECTION: forcing a failure. [ 98.342935][ T6954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.356040][ T6954] CPU: 0 UID: 0 PID: 6954 Comm: syz.5.990 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 98.366623][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.376674][ T6954] Call Trace: [ 98.379411][ T6943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.380007][ T6954] [ 98.380017][ T6954] dump_stack_lvl+0xf2/0x150 [ 98.396612][ T6954] dump_stack+0x15/0x1a [ 98.400786][ T6954] should_fail_ex+0x223/0x230 [ 98.405541][ T6954] should_fail+0xb/0x10 [ 98.409753][ T6954] should_fail_usercopy+0x1a/0x20 [ 98.414820][ T6954] _copy_to_user+0x20/0xa0 [ 98.419235][ T6954] simple_read_from_buffer+0xa0/0x110 [ 98.424698][ T6954] proc_fail_nth_read+0xf9/0x140 [ 98.429687][ T6954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.435254][ T6954] vfs_read+0x1a2/0x700 [ 98.439514][ T6954] ? __rcu_read_unlock+0x4e/0x70 [ 98.444450][ T6954] ? __fget_files+0x17c/0x1c0 [ 98.449181][ T6954] ksys_read+0xe8/0x1b0 [ 98.453400][ T6954] __x64_sys_read+0x42/0x50 [ 98.457900][ T6954] x64_sys_call+0x2874/0x2dc0 [ 98.462608][ T6954] do_syscall_64+0xc9/0x1c0 [ 98.467102][ T6954] ? clear_bhb_loop+0x55/0xb0 [ 98.471775][ T6954] ? clear_bhb_loop+0x55/0xb0 [ 98.476497][ T6954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.482694][ T6954] RIP: 0033:0x7f700406473c [ 98.487161][ T6954] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 98.506772][ T6954] RSP: 002b:00007f70026d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.515176][ T6954] RAX: ffffffffffffffda RBX: 00007f7004255fa0 RCX: 00007f700406473c [ 98.523136][ T6954] RDX: 000000000000000f RSI: 00007f70026d10a0 RDI: 0000000000000006 [ 98.531098][ T6954] RBP: 00007f70026d1090 R08: 0000000000000000 R09: 0000000000000000 [ 98.539092][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.547093][ T6954] R13: 0000000000000000 R14: 00007f7004255fa0 R15: 00007fff585d7e28 [ 98.555060][ T6954] [ 98.684635][ T6968] loop5: detected capacity change from 0 to 4096 [ 98.693366][ T6968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.732799][ T6973] loop1: detected capacity change from 0 to 512 [ 98.740677][ T6973] EXT4-fs: Ignoring removed oldalloc option [ 98.765007][ T6973] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.997: Parent and EA inode have the same ino 15 [ 98.796534][ T6973] EXT4-fs (loop1): Remounting filesystem read-only [ 98.803165][ T6973] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5) [ 98.812383][ T6973] EXT4-fs (loop1): 1 orphan inode deleted [ 98.815071][ T6968] xt_hashlimit: max too large, truncated to 1048576 [ 98.819407][ T6973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.825463][ T6968] Cannot find set identified by id 0 to match [ 98.836693][ T6973] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 98.854604][ T6973] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.881710][ T6801] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.044435][ T6990] loop2: detected capacity change from 0 to 512 [ 99.061685][ T6990] EXT4-fs: Ignoring removed oldalloc option [ 99.079445][ T6992] loop5: detected capacity change from 0 to 128 [ 99.091713][ T6992] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.112716][ T6992] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.131085][ T6990] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1003: Parent and EA inode have the same ino 15 [ 99.159798][ T6990] EXT4-fs (loop2): Remounting filesystem read-only [ 99.188864][ T6990] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5) [ 99.203888][ T6990] EXT4-fs (loop2): 1 orphan inode deleted [ 99.210674][ T6990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.222959][ T6990] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 99.231422][ T6990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.256164][ T7000] FAULT_INJECTION: forcing a failure. [ 99.256164][ T7000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.269239][ T7000] CPU: 1 UID: 0 PID: 7000 Comm: syz.0.1007 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 99.279983][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.290036][ T7000] Call Trace: [ 99.293316][ T7000] [ 99.296318][ T7000] dump_stack_lvl+0xf2/0x150 [ 99.297981][ T6973] __nla_validate_parse: 6 callbacks suppressed [ 99.298006][ T6973] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.997'. [ 99.300923][ T7000] dump_stack+0x15/0x1a [ 99.320338][ T7000] should_fail_ex+0x223/0x230 [ 99.325014][ T7000] should_fail+0xb/0x10 [ 99.329233][ T7000] should_fail_usercopy+0x1a/0x20 [ 99.334251][ T7000] _copy_from_iter+0x24b/0xd00 [ 99.339057][ T7000] ? skb_set_owner_w+0x164/0x1b0 [ 99.344042][ T7000] ? __virt_addr_valid+0x1ed/0x250 [ 99.349198][ T7000] ? __check_object_size+0x364/0x520 [ 99.354502][ T7000] skb_copy_datagram_from_iter+0xb3/0x460 [ 99.360311][ T7000] ? skb_put+0xba/0x100 [ 99.364467][ T7000] unix_stream_sendmsg+0x422/0x8a0 [ 99.369574][ T7000] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 99.375214][ T7000] __sock_sendmsg+0x140/0x180 [ 99.379963][ T7000] ____sys_sendmsg+0x312/0x410 [ 99.384834][ T7000] __sys_sendmsg+0x19d/0x230 [ 99.389494][ T7000] __x64_sys_sendmsg+0x46/0x50 [ 99.394291][ T7000] x64_sys_call+0x2734/0x2dc0 [ 99.399041][ T7000] do_syscall_64+0xc9/0x1c0 [ 99.403534][ T7000] ? clear_bhb_loop+0x55/0xb0 [ 99.408260][ T7000] ? clear_bhb_loop+0x55/0xb0 [ 99.412927][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.418826][ T7000] RIP: 0033:0x7f0da2595d29 [ 99.423227][ T7000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.442897][ T7000] RSP: 002b:00007f0da0c01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.451373][ T7000] RAX: ffffffffffffffda RBX: 00007f0da2785fa0 RCX: 00007f0da2595d29 [ 99.459404][ T7000] RDX: 0000000000020001 RSI: 0000000020000d40 RDI: 0000000000000003 [ 99.467381][ T7000] RBP: 00007f0da0c01090 R08: 0000000000000000 R09: 0000000000000000 [ 99.475343][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.483397][ T7000] R13: 0000000000000000 R14: 00007f0da2785fa0 R15: 00007ffd5d751e28 [ 99.491374][ T7000] [ 99.504662][ T7002] loop5: detected capacity change from 0 to 2048 [ 99.546507][ T7002] loop5: p1 < > p4 [ 99.550869][ T7002] loop5: p4 size 8388608 extends beyond EOD, truncated [ 99.724973][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 99.745135][ T3531] udevd[3531]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 99.752965][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 99.759155][ T7025] IPv6: Can't replace route, no match found [ 99.876526][ T7030] loop5: detected capacity change from 0 to 128 [ 100.070161][ T7033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1019'. [ 100.079271][ T7033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1019'. [ 100.106632][ T3531] udevd[3531]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 100.119371][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 100.188023][ T7038] syz.4.1021 uses obsolete (PF_INET,SOCK_PACKET) [ 100.213494][ T7042] loop1: detected capacity change from 0 to 512 [ 100.220480][ T7042] EXT4-fs: Ignoring removed oldalloc option [ 100.229870][ T7042] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1024: Parent and EA inode have the same ino 15 [ 100.242295][ T7042] EXT4-fs (loop1): Remounting filesystem read-only [ 100.248902][ T7042] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5) [ 100.257885][ T7042] EXT4-fs (loop1): 1 orphan inode deleted [ 100.263960][ T7042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.276083][ T7042] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 100.285222][ T7042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.315142][ T7053] IPv6: Can't replace route, no match found [ 100.385331][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 100.434363][ T7066] FAULT_INJECTION: forcing a failure. [ 100.434363][ T7066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.447528][ T7066] CPU: 0 UID: 0 PID: 7066 Comm: syz.2.1034 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 100.458243][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.468300][ T7066] Call Trace: [ 100.471575][ T7066] [ 100.474524][ T7066] dump_stack_lvl+0xf2/0x150 [ 100.479284][ T7066] dump_stack+0x15/0x1a [ 100.483551][ T7066] should_fail_ex+0x223/0x230 [ 100.488221][ T7066] should_fail+0xb/0x10 [ 100.492417][ T7066] should_fail_usercopy+0x1a/0x20 [ 100.497434][ T7066] _copy_from_user+0x1e/0xb0 [ 100.502083][ T7066] copy_msghdr_from_user+0x54/0x2a0 [ 100.507358][ T7066] ? __fget_files+0x17c/0x1c0 [ 100.512037][ T7066] __sys_sendmsg+0x13e/0x230 [ 100.516627][ T7066] __x64_sys_sendmsg+0x46/0x50 [ 100.521400][ T7066] x64_sys_call+0x2734/0x2dc0 [ 100.526064][ T7066] do_syscall_64+0xc9/0x1c0 [ 100.530584][ T7066] ? clear_bhb_loop+0x55/0xb0 [ 100.535261][ T7066] ? clear_bhb_loop+0x55/0xb0 [ 100.539927][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.545887][ T7066] RIP: 0033:0x7f0350d45d29 [ 100.550385][ T7066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.569989][ T7066] RSP: 002b:00007f034f3b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.578394][ T7066] RAX: ffffffffffffffda RBX: 00007f0350f35fa0 RCX: 00007f0350d45d29 [ 100.586384][ T7066] RDX: 00000000200048cc RSI: 0000000020000240 RDI: 0000000000000008 [ 100.594347][ T7066] RBP: 00007f034f3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 100.602353][ T7066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.610368][ T7066] R13: 0000000000000000 R14: 00007f0350f35fa0 R15: 00007ffe9c161128 [ 100.618333][ T7066] [ 100.802658][ T7042] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1024'. [ 100.807014][ T7077] loop2: detected capacity change from 0 to 512 [ 100.849568][ T7077] EXT4-fs: Ignoring removed oldalloc option [ 100.859556][ T7083] IPv6: Can't replace route, no match found [ 100.870219][ T7077] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1039: Parent and EA inode have the same ino 15 [ 100.916127][ T7077] EXT4-fs (loop2): Remounting filesystem read-only [ 100.922712][ T7077] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -5) [ 100.933111][ T7088] syz.5.1045[7088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.933251][ T7088] syz.5.1045[7088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.936232][ T7077] EXT4-fs (loop2): 1 orphan inode deleted [ 100.964737][ T7077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.977145][ T7077] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 100.984665][ T7088] syz.5.1045[7088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.996423][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'. [ 101.014540][ T7088] loop5: detected capacity change from 0 to 164 [ 101.034140][ T7088] syz.5.1045: attempt to access beyond end of device [ 101.034140][ T7088] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 101.037202][ T7077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.060003][ T7088] syz.5.1045: attempt to access beyond end of device [ 101.060003][ T7088] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 101.107108][ T7101] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 101.125862][ T7096] ªªªªªª: renamed from vlan0 (while UP) [ 101.132360][ T7088] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1045'. [ 101.141554][ T7088] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1045'. [ 101.150574][ T7088] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1045'. [ 101.174866][ T7103] loop0: detected capacity change from 0 to 128 [ 101.181564][ T7103] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.194254][ T7103] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.241743][ T7109] loop0: detected capacity change from 0 to 164 [ 101.265350][ T7109] ISOFS: unable to read i-node block [ 101.270678][ T7109] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 101.341885][ T7118] loop0: detected capacity change from 0 to 512 [ 101.358624][ T7118] EXT4-fs: Ignoring removed oldalloc option [ 101.388259][ T7118] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1057: Parent and EA inode have the same ino 15 [ 101.410876][ T7118] EXT4-fs (loop0): Remounting filesystem read-only [ 101.441114][ T7118] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -5) [ 101.488871][ T7118] EXT4-fs (loop0): 1 orphan inode deleted [ 101.513131][ T7118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.536080][ T7110] loop1: detected capacity change from 0 to 512 [ 101.552616][ T7118] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 101.591897][ T7129] usb usb4: usbfs: process 7129 (syz.5.1061) did not claim interface 0 before use [ 101.601523][ T7118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.666270][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 101.666283][ T29] audit: type=1326 audit(101.706:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7004065d29 code=0x7ffc0000 [ 101.705513][ T29] audit: type=1326 audit(101.736:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7004065d29 code=0x7ffc0000 [ 101.728229][ T29] audit: type=1326 audit(101.736:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7004065d29 code=0x7ffc0000 [ 101.751058][ T29] audit: type=1326 audit(101.736:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f7004065d29 code=0x7ffc0000 [ 101.773998][ T29] audit: type=1326 audit(101.736:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7004065d29 code=0x7ffc0000 [ 101.797264][ T29] audit: type=1326 audit(101.736:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7004065d29 code=0x7ffc0000 [ 101.820179][ T29] audit: type=1326 audit(101.736:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7004065d29 code=0x7ffc0000 [ 101.843099][ T29] audit: type=1326 audit(101.746:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f7004065d29 code=0x7ffc0000 [ 101.865882][ T29] audit: type=1326 audit(101.746:2731): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7004065d29 code=0x7ffc0000 [ 101.889515][ T29] audit: type=1326 audit(101.746:2732): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7004065d29 code=0x7ffc0000 [ 101.921858][ T7141] loop2: detected capacity change from 0 to 512 [ 101.928693][ T7141] ext4: Unknown parameter 'appraise' [ 101.955335][ T7145] loop1: detected capacity change from 0 to 164 [ 101.978648][ T7145] ISOFS: unable to read i-node block [ 101.984248][ T7145] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 102.149380][ T7170] loop1: detected capacity change from 0 to 2048 [ 102.209959][ T7170] Alternate GPT is invalid, using primary GPT. [ 102.216254][ T7170] loop1: p2 p3 p7 [ 102.221546][ T7168] loop2: detected capacity change from 0 to 8192 [ 102.234491][ T7170] usb usb4: usbfs: process 7170 (syz.1.1076) did not claim interface 0 before use [ 102.276405][ T7168] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 102.276405][ T7168] n'º|$@OOݱµ’-®+·el' [ 102.361074][ T7184] loop2: detected capacity change from 0 to 128 [ 102.381697][ T7184] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.400156][ T7184] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 102.425545][ T7187] loop5: detected capacity change from 0 to 8192 [ 102.463011][ T7187] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 102.463011][ T7187] n'º|$@OOݱµ’-®+·el' [ 102.519473][ T7198] FAULT_INJECTION: forcing a failure. [ 102.519473][ T7198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.532849][ T7198] CPU: 0 UID: 0 PID: 7198 Comm: syz.2.1088 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 102.543579][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.553695][ T7198] Call Trace: [ 102.556970][ T7198] [ 102.559923][ T7198] dump_stack_lvl+0xf2/0x150 [ 102.564542][ T7198] dump_stack+0x15/0x1a [ 102.568707][ T7198] should_fail_ex+0x223/0x230 [ 102.573389][ T7198] should_fail+0xb/0x10 [ 102.577584][ T7198] should_fail_usercopy+0x1a/0x20 [ 102.582888][ T7198] _copy_to_user+0x20/0xa0 [ 102.587372][ T7198] simple_read_from_buffer+0xa0/0x110 [ 102.592777][ T7198] proc_fail_nth_read+0xf9/0x140 [ 102.597709][ T7198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.603248][ T7198] vfs_read+0x1a2/0x700 [ 102.607396][ T7198] ? __rcu_read_unlock+0x4e/0x70 [ 102.612372][ T7198] ? __fget_files+0x17c/0x1c0 [ 102.617096][ T7198] ksys_read+0xe8/0x1b0 [ 102.621247][ T7198] __x64_sys_read+0x42/0x50 [ 102.625803][ T7198] x64_sys_call+0x2874/0x2dc0 [ 102.630479][ T7198] do_syscall_64+0xc9/0x1c0 [ 102.635030][ T7198] ? clear_bhb_loop+0x55/0xb0 [ 102.639788][ T7198] ? clear_bhb_loop+0x55/0xb0 [ 102.644456][ T7198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.650444][ T7198] RIP: 0033:0x7f0350d4473c [ 102.654882][ T7198] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.674537][ T7198] RSP: 002b:00007f034f3b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.682937][ T7198] RAX: ffffffffffffffda RBX: 00007f0350f35fa0 RCX: 00007f0350d4473c [ 102.690970][ T7198] RDX: 000000000000000f RSI: 00007f034f3b10a0 RDI: 0000000000000003 [ 102.698951][ T7198] RBP: 00007f034f3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 102.706934][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.714924][ T7198] R13: 0000000000000001 R14: 00007f0350f35fa0 R15: 00007ffe9c161128 [ 102.722961][ T7198] [ 102.775155][ T7202] loop2: detected capacity change from 0 to 512 [ 102.782136][ T7202] ext4: Unknown parameter 'appraise' [ 102.867410][ T7213] veth1_macvtap: left promiscuous mode [ 102.872976][ T7213] macsec0: entered promiscuous mode [ 102.906258][ T7213] bond1: entered promiscuous mode [ 102.911324][ T7213] bond1: entered allmulticast mode [ 102.926545][ T7213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.942613][ T7213] bond1 (unregistering): Released all slaves [ 102.951452][ T7219] loop2: detected capacity change from 0 to 128 [ 102.975720][ T7219] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.026132][ T7219] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.182795][ T7239] loop2: detected capacity change from 0 to 256 [ 103.221838][ T7242] FAULT_INJECTION: forcing a failure. [ 103.221838][ T7242] name failslab, interval 1, probability 0, space 0, times 0 [ 103.234473][ T7242] CPU: 0 UID: 0 PID: 7242 Comm: syz.0.1104 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 103.245221][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.255280][ T7242] Call Trace: [ 103.258622][ T7242] [ 103.261549][ T7242] dump_stack_lvl+0xf2/0x150 [ 103.266153][ T7242] dump_stack+0x15/0x1a [ 103.270386][ T7242] should_fail_ex+0x223/0x230 [ 103.275064][ T7242] should_failslab+0x8f/0xb0 [ 103.279707][ T7242] kmem_cache_alloc_node_noprof+0x59/0x320 [ 103.285583][ T7242] ? perf_event_alloc+0x157/0x12e0 [ 103.290765][ T7242] perf_event_alloc+0x157/0x12e0 [ 103.295759][ T7242] ? __fget_files+0x17c/0x1c0 [ 103.300481][ T7242] __se_sys_perf_event_open+0x5ac/0x2230 [ 103.306174][ T7242] ? proc_fail_nth_write+0x12a/0x150 [ 103.311466][ T7242] ? vfs_write+0x551/0x920 [ 103.316006][ T7242] ? putname+0xcf/0xf0 [ 103.320080][ T7242] __x64_sys_perf_event_open+0x67/0x80 [ 103.325563][ T7242] x64_sys_call+0x1deb/0x2dc0 [ 103.330305][ T7242] do_syscall_64+0xc9/0x1c0 [ 103.334805][ T7242] ? clear_bhb_loop+0x55/0xb0 [ 103.339489][ T7242] ? clear_bhb_loop+0x55/0xb0 [ 103.344163][ T7242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.350071][ T7242] RIP: 0033:0x7f0da2595d29 [ 103.354479][ T7242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.374117][ T7242] RSP: 002b:00007f0da0c01038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 103.383002][ T7242] RAX: ffffffffffffffda RBX: 00007f0da2785fa0 RCX: 00007f0da2595d29 [ 103.390981][ T7242] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000400 [ 103.399020][ T7242] RBP: 00007f0da0c01090 R08: 0000000000000000 R09: 0000000000000000 [ 103.406999][ T7242] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 103.414966][ T7242] R13: 0000000000000000 R14: 00007f0da2785fa0 R15: 00007ffd5d751e28 [ 103.423006][ T7242] [ 103.438133][ T7243] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 103.588321][ T7253] loop2: detected capacity change from 0 to 512 [ 103.611470][ T7249] ref_ctr_offset mismatch. inode: 0x48b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 103.674632][ T7261] loop0: detected capacity change from 0 to 128 [ 103.684359][ T7261] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.714399][ T7261] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.727326][ T7265] loop1: detected capacity change from 0 to 512 [ 103.734648][ T7265] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.747775][ T7265] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.776941][ T7265] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1115: corrupted in-inode xattr: e_name out of bounds [ 103.813805][ T7265] EXT4-fs (loop1): Remounting filesystem read-only [ 103.820364][ T7265] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.833797][ T7265] EXT4-fs (loop1): 1 truncate cleaned up [ 103.843963][ T7265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.863902][ T7265] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 103.885105][ T7265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.895915][ T7269] loop0: detected capacity change from 0 to 8192 [ 103.910629][ T7269] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 103.910629][ T7269] n'º|$@OOݱµ’-®+·el' [ 103.976343][ T7274] loop1: detected capacity change from 0 to 512 [ 104.005478][ T7274] EXT4-fs: Ignoring removed oldalloc option [ 104.020846][ T3531] ================================================================== [ 104.028930][ T3531] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 104.036313][ T3531] [ 104.038625][ T3531] write to 0xffff888100630a6e of 1 bytes by task 7274 on cpu 0: [ 104.046240][ T3531] set_blocksize+0x218/0x270 [ 104.050819][ T3531] sb_min_blocksize+0x63/0xe0 [ 104.055482][ T3531] ext4_fill_super+0x38b/0x3a10 [ 104.060326][ T3531] get_tree_bdev_flags+0x29f/0x310 [ 104.065432][ T3531] get_tree_bdev+0x1f/0x30 [ 104.069894][ T3531] ext4_get_tree+0x1c/0x30 [ 104.074301][ T3531] vfs_get_tree+0x56/0x1e0 [ 104.078709][ T3531] do_new_mount+0x227/0x690 [ 104.083205][ T3531] path_mount+0x49b/0xb30 [ 104.087528][ T3531] __se_sys_mount+0x27c/0x2d0 [ 104.092199][ T3531] __x64_sys_mount+0x67/0x80 [ 104.096782][ T3531] x64_sys_call+0x2c84/0x2dc0 [ 104.101446][ T3531] do_syscall_64+0xc9/0x1c0 [ 104.105936][ T3531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.111825][ T3531] [ 104.114135][ T3531] read to 0xffff888100630a6e of 1 bytes by task 3531 on cpu 1: [ 104.121663][ T3531] do_mpage_readpage+0x55/0xcb0 [ 104.126509][ T3531] mpage_readahead+0x1ad/0x2d0 [ 104.131269][ T3531] blkdev_readahead+0x1c/0x30 [ 104.135937][ T3531] read_pages+0xa0/0x540 [ 104.140174][ T3531] page_cache_ra_unbounded+0x2b8/0x310 [ 104.145626][ T3531] page_cache_sync_ra+0x252/0x670 [ 104.150637][ T3531] filemap_get_pages+0x2c1/0x10e0 [ 104.155649][ T3531] filemap_read+0x221/0x6a0 [ 104.160140][ T3531] blkdev_read_iter+0x20e/0x2c0 [ 104.164981][ T3531] vfs_read+0x5dc/0x700 [ 104.169129][ T3531] ksys_read+0xe8/0x1b0 [ 104.173278][ T3531] __x64_sys_read+0x42/0x50 [ 104.177775][ T3531] x64_sys_call+0x2874/0x2dc0 [ 104.182439][ T3531] do_syscall_64+0xc9/0x1c0 [ 104.186927][ T3531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.192820][ T3531] [ 104.195130][ T3531] value changed: 0x0c -> 0x0a [ 104.199784][ T3531] [ 104.202116][ T3531] Reported by Kernel Concurrency Sanitizer on: [ 104.208250][ T3531] CPU: 1 UID: 0 PID: 3531 Comm: udevd Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 104.218475][ T3531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.228527][ T3531] ================================================================== [ 104.259961][ T7279] loop2: detected capacity change from 0 to 2048 [ 104.261300][ T7274] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1118: Parent and EA inode have the same ino 15 [ 104.279367][ T7274] EXT4-fs (loop1): Remounting filesystem read-only [ 104.286025][ T7274] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5) [ 104.295007][ T7274] EXT4-fs (loop1): 1 orphan inode deleted [ 104.301086][ T7274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.301516][ T7279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.313112][ T7274] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 104.333058][ T7274] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.568815][ T7274] __nla_validate_parse: 7 callbacks suppressed [ 104.568832][ T7274] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1118'. [ 105.168262][ T7282] syz.2.1119 (7282) used greatest stack depth: 9496 bytes left [ 105.177832][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.