last executing test programs: 1m32.241281308s ago: executing program 3 (id=1196): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m31.887992094s ago: executing program 3 (id=1200): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000000000bf090000000000005509010000000000852000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f00000000c0)={0x357}, &(0x7f0000000140)) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x2100, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f00000001c0)='./file0\x00', 0x0) 1m31.725079597s ago: executing program 3 (id=1204): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x501001, 0x0) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) 1m30.83910769s ago: executing program 3 (id=1212): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = epoll_create1(0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x10000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000046, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpjquota}, {@oldalloc}, {@errors_remount}, {@orlov}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x622}}]}, 0x1, 0x56c, &(0x7f0000001a00)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MHQUvfCmctKTLmuTJttiUs3nA6e87zknfc+bc543z5uTkACG1kT2pxDxfER8kUQcjogk3zYa+caJjf3WHl6fzZYk1tc//C2p75fVG/+r8biDeeW5iPjps4iThe3tVldWF0rlcrqU1ydri1cmqyurpy4tlubT+fTy9MzMmddnpt96842e9fWV839+/cHdd898fnztqx/uH7mdxNk4lG9r7sczuNFcmYiJ/DkZi7NbdpzqQWO7STLoA+CpjORxPhbZGHA4RvKoB/77Po2IdWBIJeIfhlQjD2jM7XeeB/+/T1lJ/zx4Z2MCtL3/oxvvjcS++tzowFry2Mwom++O96D9rI0ff71zO1uid+9DAHR042ZEnB4d3T7+Jfn4t4MOb/qdbr16X3NlaxvGP+ifu1n+82qr/KdQj83f83Ddmv8cbBG7T6Nz/Bfu96CZtrL87+2W+e/mTavxkbz2v3rON5ZcvFROT+fZ8IkY25vVd7qfc2bt3nq7bc35X7Zk7Tdywfw47o/uffwxc6Va6Vn63OzBzYgXWua/yWb+m7Q4/9nzcb7LNo6ld15qt61z//9Z699FvNzy/D96cUt2vj85Wb8eJhtXxXZ/3Dr2c7v2B93/7Pwf2Ln/40nz/drqk7fx7b6/0nbbHut/dH/970k+qpf35OuulWq1pamIPcn729dPP3pso97YP+v/iePtx7921//+iPi4y/7fOvr9i131f0Dnf+6Jzv+TF+6998k37drvbvx7rV46ka/pZvzr9gCf5bkDAAAAAACA3aYQEYciKRQ3y4VCsbjx+Y6jcaBQrlRrJy9Wli/PRf27suMxVmjc6T7c9HmIqfzzsI369Jb6TEQciYgvR/bX68XZSnlu0J0HAAAAAAAAAAAAAAAAAACAXeJg/Tv/I5v1xvf/M7+MDO64gD7xk98wvDrGfy9+6QnYlbz+w/AS/zC8xD8ML/EPw0v8w/AS/zC8uoj/Qj+OA+g/r/8AAAAAAAAAAAAAAAAAAAAAAAAAAADQU+fPncuW9bWH12ez+tzVleWFytVTc2l1obi4PFucrSxdKc5XKvPltDhbWez0/8qVypWp6Vi+NllLq7XJ6srqhcXK8uXahUuLpfn0QjrWl14BAAAAAAAAAAAAAAAAAADAv0t1ZXWhVC6nSwoKT1UY3R2HodDjwqBHJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB45O8AAAD//8A2OIo=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x641, 0x1c3) fallocate(r3, 0x10, 0x3, 0x7c27) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000000153"]) socket$kcm(0x2, 0xa, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00'}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="080008000700020000101400000045ffffffff329700"/36], 0x24) 1m30.302741989s ago: executing program 3 (id=1219): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m28.346200539s ago: executing program 3 (id=1240): r0 = fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x4, &(0x7f0000000080)={0x0, 0x3, 0x1, @tid=r0}, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000280)=0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xdeb9065d, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80800) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000240)={r7, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={r7, 0x400}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) 1m28.345936039s ago: executing program 32 (id=1240): r0 = fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x4, &(0x7f0000000080)={0x0, 0x3, 0x1, @tid=r0}, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000280)=0x13) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xdeb9065d, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80800) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000240)={r7, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={r7, 0x400}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) 3.394901756s ago: executing program 5 (id=2331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}]}, 0x44}}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 3.373084216s ago: executing program 0 (id=2332): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_clone3(&(0x7f00000002c0)={0x44100000, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.044515222s ago: executing program 5 (id=2334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) getrusage(0x0, &(0x7f0000000280)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = epoll_create(0x3ff) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000280)={0x2000000}) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 2.396317802s ago: executing program 1 (id=2342): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffd4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa4910075ad2b986dd604dd7080018060020010000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="606d0583dee8fd831e3102a9c46b02006e2738a8afb36c9996"], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x44) socket$kcm(0xa, 0x2, 0x73) socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0xe0, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xa, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xb4, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8a}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x40}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x1f}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x7fff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xe}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x1ff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x562, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}]}}]}, 0xe0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)=' ', 0x1}], 0x1) r7 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r7, 0x5452, &(0x7f0000001840)=0x5d4) 2.151531446s ago: executing program 1 (id=2346): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffd4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa4910075ad2b986dd604dd7080018060020010000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="606d0583dee8fd831e3102a9c46b02006e2738a8afb36c9996"], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r5 = syz_open_pts(r0, 0x0) r6 = dup3(r5, r0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) 1.978428569s ago: executing program 0 (id=2348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r0, 0x5400}, 0x38) 1.839591991s ago: executing program 0 (id=2351): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.804747271s ago: executing program 1 (id=2352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x8001, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000004c0)={@random="cf599d3baed5", @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f200", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x8}], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1000}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110000"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xffffffff}, 0x1c) shutdown(r4, 0x1) splice(r4, 0x0, r2, 0x0, 0x400000107ffff000, 0x0) 1.804158061s ago: executing program 2 (id=2353): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r0 = syz_io_uring_setup(0x124a, &(0x7f00000000c0)={0x0, 0x2172, 0x1, 0x1, 0x1c5}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x121940, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x10, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r6], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='percpu_free_percpu\x00', r7, 0x0, 0x1}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x6}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$TIOCCBRK(r11, 0x5428) socket$nl_netfilter(0x10, 0x3, 0xc) 1.662669874s ago: executing program 1 (id=2354): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) read$char_usb(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000004c0)={@random="cf599d3baed5", @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f200", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x8}], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1000}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xffffffff}, 0x1c) 1.660829614s ago: executing program 5 (id=2355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) getrusage(0x0, &(0x7f0000000280)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x18) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = epoll_create(0x3ff) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000280)={0x2000000}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 1.394626058s ago: executing program 2 (id=2356): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r0 = syz_io_uring_setup(0x124a, &(0x7f00000000c0)={0x0, 0x2172, 0x1, 0x1, 0x1c5}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x121940, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x10, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r6], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='percpu_free_percpu\x00', r7, 0x0, 0x1}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x6}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000000040)=0x6, 0x4) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$TIOCCBRK(r12, 0x5428) socket$nl_netfilter(0x10, 0x3, 0xc) 1.355183118s ago: executing program 0 (id=2357): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffd4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa4910075ad2b986dd604dd7080018060020010000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="606d0583dee8fd831e3102a9c46b02006e2738a8afb36c9996"], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x44) socket$kcm(0xa, 0x2, 0x73) socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0xe0, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xa, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xb4, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8a}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x40}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x1f}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x7fff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xe}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x1ff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x562, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}]}}]}, 0xe0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)=' ', 0x1}], 0x1) r7 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r7, 0x5452, &(0x7f0000001840)=0x5d4) 1.191412411s ago: executing program 2 (id=2363): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) 1.022817334s ago: executing program 2 (id=2364): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x8001, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000004c0)={@random="cf599d3baed5", @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f200", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x8}], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1000}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110000"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xffffffff}, 0x1c) shutdown(r4, 0x1) splice(r4, 0x0, r2, 0x0, 0x400000107ffff000, 0x0) 964.965644ms ago: executing program 0 (id=2365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) getrusage(0x0, &(0x7f0000000280)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = epoll_create(0x3ff) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000280)={0x2000000}) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 937.459735ms ago: executing program 2 (id=2366): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}, 0x0, {0x6a, 0x5}, 0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x6b0f, &(0x7f00000003c0)={0x0, 0xfefffffe, 0x80, 0x5, 0x2e7}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./cgroup/pids.max/../file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x2dbe, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa20f8c200000086dd62561699001000fffc000000000000000000000000000001200100000000000000023b00000000000000c2040001"], 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r10, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r10, 0x10f, 0x88) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) 857.487726ms ago: executing program 1 (id=2368): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 812.291227ms ago: executing program 5 (id=2369): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffffffffffe}) signalfd4(r0, &(0x7f00000000c0)={[0x401]}, 0x8, 0x80000) 746.633968ms ago: executing program 5 (id=2370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = gettid() r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_pts(r4, 0x40841) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000e00)={0x9, {"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", 0xdfb}}, 0x1006) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd28, 0x21dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, 0x0, 0x4008040) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000040)=r3) r9 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r9, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') read(r9, &(0x7f0000000740)=""/236, 0xec) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r9, 0x7a5bc000) sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x0) 746.416238ms ago: executing program 5 (id=2371): socket$inet6(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x434, &(0x7f0000000ec0)="$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") syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000000900010073797a3000000000090002"], 0x2c}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone3(&(0x7f00000002c0)={0x44100000, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x80) connect$inet(0xffffffffffffffff, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() 581.544261ms ago: executing program 4 (id=2375): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffd4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa4910075ad2b986dd604dd7080018060020010000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="606d0583dee8fd831e3102a9c46b02006e2738a8afb36c9996"], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x44) socket$kcm(0xa, 0x2, 0x73) socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0xe0, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xa, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xb4, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8a}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x40}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x1f}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x7fff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xe}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x1ff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x562, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}]}}]}, 0xe0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)=' ', 0x1}], 0x1) r7 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r7, 0x5452, &(0x7f0000001840)=0x5d4) 235.627966ms ago: executing program 4 (id=2376): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x8001, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000004c0)={@random="cf599d3baed5", @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f200", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x8}], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1000}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xffffffff}, 0x1c) shutdown(r4, 0x1) splice(r4, 0x0, r2, 0x0, 0x400000107ffff000, 0x0) 192.152727ms ago: executing program 4 (id=2377): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000002c0), 0x1, 0x4100) io_uring_enter(0xffffffffffffffff, 0xce3, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x8, 0x7, 0x5, 0x5d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x8, 0x8, 0x40a, 0x40}}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x9, r4, 0x1, 0x40, 0x6, @multicast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010000304fcffffd02806696a264cf3ea", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 113.720058ms ago: executing program 0 (id=2378): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) read$char_usb(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000004c0)={@random="cf599d3baed5", @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f200", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0x8}], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1000}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xffffffff}, 0x1c) 65.333079ms ago: executing program 2 (id=2379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) getrusage(0x0, &(0x7f0000000280)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x18) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = epoll_create(0x3ff) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000280)={0x2000000}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 22.820589ms ago: executing program 4 (id=2380): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) signalfd4(r0, &(0x7f00000000c0)={[0x401]}, 0x8, 0x80000) 22.40138ms ago: executing program 4 (id=2381): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1) 18.336479ms ago: executing program 4 (id=2382): socket$inet6(0xa, 0x1, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000000900010073797a3000000000090002"], 0x2c}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_clone3(&(0x7f00000002c0)={0x44100000, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x80) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x496, &(0x7f0000000f40)="$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") 0s ago: executing program 1 (id=2383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 0033:0x7f61e60ce969 [ 151.234573][ T7843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.234592][ T7843] RSP: 002b:00007f61e4737038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 151.234620][ T7843] RAX: ffffffffffffffda RBX: 00007f61e62f5fa0 RCX: 00007f61e60ce969 [ 151.234636][ T7843] RDX: 0000000000000005 RSI: 0000200000000000 RDI: ffffffffffffffff [ 151.234652][ T7843] RBP: 00007f61e4737090 R08: 0000000000000000 R09: 0000000000000000 [ 151.234692][ T7843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.234704][ T7843] R13: 0000000000000000 R14: 00007f61e62f5fa0 R15: 00007fff4401ceb8 [ 151.234724][ T7843] [ 151.483316][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 151.483333][ T29] audit: type=1400 audit(1747862189.352:7948): avc: denied { mount } for pid=7850 comm="syz.0.1565" name="/" dev="ramfs" ino=19827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 151.515997][ T7848] 9pnet_fd: Insufficient options for proto=fd [ 151.535181][ T29] audit: type=1400 audit(1747862189.402:7949): avc: denied { create } for pid=7850 comm="syz.0.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 151.535928][ T7851] 9pnet_fd: Insufficient options for proto=fd [ 151.559264][ T29] audit: type=1400 audit(1747862189.432:7950): avc: denied { connect } for pid=7850 comm="syz.0.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 151.610393][ T29] audit: type=1400 audit(1747862189.482:7951): avc: denied { mounton } for pid=7850 comm="syz.0.1565" path="/" dev="ramfs" ino=19827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 151.624064][ T7859] IPv6: Can't replace route, no match found [ 151.656467][ T7861] loop1: detected capacity change from 0 to 2048 [ 151.676900][ T7864] loop0: detected capacity change from 0 to 2048 [ 151.698928][ T7864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.709659][ T7861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.725377][ T7864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.759976][ T29] audit: type=1400 audit(1747862189.632:7952): avc: denied { load_policy } for pid=7860 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 151.766624][ T7861] SELinux: failed to load policy [ 151.850279][ T29] audit: type=1400 audit(1747862189.722:7953): avc: denied { read } for pid=7860 comm="syz.1.1570" path="socket:[19884]" dev="sockfs" ino=19884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.144017][ T7889] 9pnet_fd: Insufficient options for proto=fd [ 152.181216][ T7891] 9pnet_fd: Insufficient options for proto=fd [ 152.236755][ T7897] IPv6: Can't replace route, no match found [ 152.288006][ T7899] loop2: detected capacity change from 0 to 2048 [ 152.300988][ T7899] EXT4-fs: Ignoring removed bh option [ 152.308819][ T7899] EXT4-fs: Mount option(s) incompatible with ext2 [ 152.456485][ T7912] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 152.492538][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.570810][ T7921] 9pnet_fd: Insufficient options for proto=fd [ 152.608448][ T7927] IPv6: Can't replace route, no match found [ 152.616009][ T7923] 9pnet_fd: Insufficient options for proto=fd [ 152.771506][ T7948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7948 comm=syz.4.1602 [ 152.786913][ T29] audit: type=1326 audit(1747862190.652:7954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 152.811920][ T29] audit: type=1326 audit(1747862190.652:7955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 152.842370][ T7946] SELinux: Context Ü is not valid (left unmapped). [ 152.875165][ T29] audit: type=1326 audit(1747862190.712:7956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 152.904085][ T29] audit: type=1326 audit(1747862190.712:7957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 152.917514][ T7950] loop0: detected capacity change from 0 to 128 [ 152.951886][ T7956] 9pnet_fd: Insufficient options for proto=fd [ 152.987850][ T7960] 9pnet_fd: Insufficient options for proto=fd [ 153.080807][ T7970] loop0: detected capacity change from 0 to 512 [ 153.101248][ T7973] xt_hashlimit: size too large, truncated to 1048576 [ 153.116532][ T7970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.171527][ T7970] EXT4-fs (loop0): shut down requested (1) [ 153.180654][ T7970] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 153.192568][ T7970] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 153.204094][ T7970] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 153.317802][ T7985] dvmrp0: entered allmulticast mode [ 153.327205][ T7985] loop4: detected capacity change from 0 to 512 [ 153.329206][ T7986] FAULT_INJECTION: forcing a failure. [ 153.329206][ T7986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 153.348010][ T7986] CPU: 1 UID: 0 PID: 7986 Comm: syz.5.1616 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 153.348039][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.348051][ T7986] Call Trace: [ 153.348058][ T7986] [ 153.348068][ T7986] __dump_stack+0x1d/0x30 [ 153.348096][ T7986] dump_stack_lvl+0xe8/0x140 [ 153.348139][ T7986] dump_stack+0x15/0x1b [ 153.348155][ T7986] should_fail_ex+0x265/0x280 [ 153.348190][ T7986] should_fail_alloc_page+0xf2/0x100 [ 153.348293][ T7986] __alloc_frozen_pages_noprof+0xff/0x360 [ 153.348389][ T7986] alloc_pages_mpol+0xb3/0x250 [ 153.348422][ T7986] vma_alloc_folio_noprof+0x1aa/0x300 [ 153.348455][ T7986] handle_mm_fault+0x1056/0x2ae0 [ 153.348573][ T7986] ? mas_walk+0xf2/0x120 [ 153.348609][ T7986] do_user_addr_fault+0x636/0x1090 [ 153.348731][ T7986] exc_page_fault+0x54/0xc0 [ 153.348757][ T7986] asm_exc_page_fault+0x26/0x30 [ 153.348784][ T7986] RIP: 0033:0x7fe8e387bf6b [ 153.348803][ T7986] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 153.348827][ T7986] RSP: 002b:00007fe8e1f13e10 EFLAGS: 00010246 [ 153.348919][ T7986] RAX: 00007fe8e1f15f30 RBX: 00007fe8e3ac3620 RCX: 0000000000000000 [ 153.348935][ T7986] RDX: 00007fe8e1f15f78 RSI: 00007fe8e392dbf8 RDI: 00007fe8e1f13e30 [ 153.348953][ T7986] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 153.348970][ T7986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.348987][ T7986] R13: 0000000000000001 R14: 00007fe8e3af6080 R15: 00007fff2ed1b398 [ 153.349015][ T7986] [ 153.349030][ T7986] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 153.381811][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.573807][ T7985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.597690][ T7994] loop5: detected capacity change from 0 to 128 [ 153.606239][ T7985] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.642624][ T7985] dvmrp0: left allmulticast mode [ 153.673793][ T8003] loop5: detected capacity change from 0 to 764 [ 153.706772][ T8009] loop2: detected capacity change from 0 to 512 [ 153.733781][ T8009] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.735138][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.778285][ T8009] EXT4-fs (loop2): 1 truncate cleaned up [ 153.784489][ T8009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.884128][ T8021] 9pnet_fd: Insufficient options for proto=fd [ 154.080070][ T8029] lo speed is unknown, defaulting to 1000 [ 154.121348][ T8032] xt_hashlimit: size too large, truncated to 1048576 [ 154.591138][ T8035] hub 2-0:1.0: USB hub found [ 154.600984][ T8035] hub 2-0:1.0: 8 ports detected [ 154.888673][ T8054] 9pnet_fd: Insufficient options for proto=fd [ 154.950504][ T8058] __nla_validate_parse: 11 callbacks suppressed [ 154.950528][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 155.017870][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 155.058463][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 155.072842][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 155.111402][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 155.135042][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 155.217145][ T8065] capability: warning: `syz.4.1645' uses 32-bit capabilities (legacy support in use) [ 155.243187][ T8068] xt_hashlimit: size too large, truncated to 1048576 [ 155.421012][ T8072] IPv6: Can't replace route, no match found [ 155.471736][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.618221][ T8089] Cannot find add_set index 0 as target [ 155.624663][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 155.639678][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 155.650538][ T8091] xt_hashlimit: size too large, truncated to 1048576 [ 155.659791][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 155.670864][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 155.811799][ T8103] loop0: detected capacity change from 0 to 2048 [ 155.870220][ T8103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.885947][ T8103] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.029643][ T8110] loop5: detected capacity change from 0 to 512 [ 156.038094][ T3418] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 345: padding at end of block bitmap is not set [ 156.073011][ T8113] IPv6: Can't replace route, no match found [ 156.098056][ T8110] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 156.110183][ T3418] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 210 with error 117 [ 156.123830][ T3418] EXT4-fs (loop0): This should not happen!! Data will be lost [ 156.123830][ T3418] [ 156.147756][ T8110] EXT4-fs (loop5): 1 truncate cleaned up [ 156.154609][ T8110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.406195][ T8123] loop2: detected capacity change from 0 to 512 [ 156.461874][ T8123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.495796][ T8123] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.512938][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 156.512979][ T29] audit: type=1326 audit(1747862194.382:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4247dd2d0 code=0x7ffc0000 [ 156.529335][ T8123] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6 [ 156.553697][ T29] audit: type=1326 audit(1747862194.382:8155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa4247dd6b7 code=0x7ffc0000 [ 156.588034][ T29] audit: type=1326 audit(1747862194.382:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4247dd2d0 code=0x7ffc0000 [ 156.589624][ T8123] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 156.613745][ T29] audit: type=1326 audit(1747862194.382:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 156.652636][ T29] audit: type=1326 audit(1747862194.382:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 156.681489][ T29] audit: type=1326 audit(1747862194.382:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 156.711455][ T29] audit: type=1326 audit(1747862194.382:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 156.720347][ T8123] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 1 [ 156.734968][ T29] audit: type=1326 audit(1747862194.382:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 156.761591][ T8132] lo speed is unknown, defaulting to 1000 [ 156.840409][ T8141] FAULT_INJECTION: forcing a failure. [ 156.840409][ T8141] name failslab, interval 1, probability 0, space 0, times 0 [ 156.853122][ T8143] 9pnet_fd: Insufficient options for proto=fd [ 156.854285][ T8141] CPU: 1 UID: 0 PID: 8141 Comm: syz.1.1670 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 156.854326][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.854343][ T8141] Call Trace: [ 156.854353][ T8141] [ 156.854365][ T8141] __dump_stack+0x1d/0x30 [ 156.854395][ T8141] dump_stack_lvl+0xe8/0x140 [ 156.854445][ T8141] dump_stack+0x15/0x1b [ 156.854548][ T8141] should_fail_ex+0x265/0x280 [ 156.854595][ T8141] ? proc_self_get_link+0x97/0x110 [ 156.854631][ T8141] should_failslab+0x8c/0xb0 [ 156.854675][ T8141] __kmalloc_cache_noprof+0x4c/0x320 [ 156.854742][ T8141] ? __pfx_proc_self_get_link+0x10/0x10 [ 156.854780][ T8141] proc_self_get_link+0x97/0x110 [ 156.854860][ T8141] pick_link+0x4d2/0x820 [ 156.854906][ T8141] step_into+0x7b6/0x820 [ 156.854948][ T8141] ? inode_permission+0xb5/0x300 [ 156.855017][ T8141] link_path_walk+0x545/0x8b0 [ 156.855065][ T8141] path_openat+0x1de/0x2170 [ 156.855097][ T8141] ? _parse_integer_limit+0x170/0x190 [ 156.855230][ T8141] do_filp_open+0x109/0x230 [ 156.855303][ T8141] do_sys_openat2+0xa6/0x110 [ 156.855366][ T8141] __x64_sys_openat+0xf2/0x120 [ 156.855468][ T8141] x64_sys_call+0x1af/0x2fb0 [ 156.855496][ T8141] do_syscall_64+0xd0/0x1a0 [ 156.855531][ T8141] ? clear_bhb_loop+0x40/0x90 [ 156.855619][ T8141] ? clear_bhb_loop+0x40/0x90 [ 156.855649][ T8141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.855679][ T8141] RIP: 0033:0x7f973504d2d0 [ 156.855699][ T8141] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 156.855724][ T8141] RSP: 002b:00007f97336b6f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 156.855817][ T8141] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f973504d2d0 [ 156.855835][ T8141] RDX: 0000000000000000 RSI: 00007f97350d0bc9 RDI: 00000000ffffff9c [ 156.855852][ T8141] RBP: 00007f97350d0bc9 R08: 0000000000000000 R09: 0000000000000000 [ 156.855870][ T8141] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 156.855886][ T8141] R13: 0000000000000000 R14: 00007f9735275fa0 R15: 00007ffd2a7ea428 [ 156.855984][ T8141] [ 157.106969][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.134211][ T8148] IPv6: Can't replace route, no match found [ 157.330045][ T8103] syz.0.1658 (8103) used greatest stack depth: 7032 bytes left [ 157.340796][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.538480][ T8184] IPv6: Can't replace route, no match found [ 157.778949][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.010165][ T8204] netlink: 'syz.5.1692': attribute type 10 has an invalid length. [ 158.019450][ T8204] netlink: 'syz.5.1692': attribute type 19 has an invalid length. [ 158.401553][ T8217] IPv6: Can't replace route, no match found [ 158.496741][ T8221] loop1: detected capacity change from 0 to 512 [ 158.525759][ T8221] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 158.560162][ T8221] EXT4-fs (loop1): 1 truncate cleaned up [ 158.566606][ T8221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.795597][ T8242] IPv6: Can't replace route, no match found [ 158.953687][ T8243] lo speed is unknown, defaulting to 1000 [ 159.840596][ T8272] IPv6: Can't replace route, no match found [ 159.880537][ T8267] 9pnet_fd: Insufficient options for proto=fd [ 159.906925][ T8278] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8278 comm=syz.4.1718 [ 159.962543][ T8281] __nla_validate_parse: 27 callbacks suppressed [ 159.962577][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 160.008285][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1723'. [ 160.059908][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 160.069550][ T8285] FAULT_INJECTION: forcing a failure. [ 160.069550][ T8285] name failslab, interval 1, probability 0, space 0, times 0 [ 160.082544][ T8285] CPU: 1 UID: 0 PID: 8285 Comm: syz.2.1724 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 160.082630][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.082647][ T8285] Call Trace: [ 160.082654][ T8285] [ 160.082674][ T8285] __dump_stack+0x1d/0x30 [ 160.082705][ T8285] dump_stack_lvl+0xe8/0x140 [ 160.082735][ T8285] dump_stack+0x15/0x1b [ 160.082757][ T8285] should_fail_ex+0x265/0x280 [ 160.082885][ T8285] should_failslab+0x8c/0xb0 [ 160.083011][ T8285] kmem_cache_alloc_noprof+0x50/0x310 [ 160.083039][ T8285] ? skb_clone+0x151/0x1f0 [ 160.083061][ T8285] skb_clone+0x151/0x1f0 [ 160.083086][ T8285] __netlink_deliver_tap+0x2c9/0x500 [ 160.083278][ T8285] netlink_unicast+0x64c/0x670 [ 160.083391][ T8285] netlink_sendmsg+0x58b/0x6b0 [ 160.083426][ T8285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.083453][ T8285] __sock_sendmsg+0x145/0x180 [ 160.083501][ T8285] ____sys_sendmsg+0x31e/0x4e0 [ 160.083583][ T8285] ___sys_sendmsg+0x17b/0x1d0 [ 160.083624][ T8285] __x64_sys_sendmsg+0xd4/0x160 [ 160.083657][ T8285] x64_sys_call+0x2999/0x2fb0 [ 160.083688][ T8285] do_syscall_64+0xd0/0x1a0 [ 160.083728][ T8285] ? clear_bhb_loop+0x40/0x90 [ 160.083753][ T8285] ? clear_bhb_loop+0x40/0x90 [ 160.083857][ T8285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.083955][ T8285] RIP: 0033:0x7fa4247de969 [ 160.083978][ T8285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.084003][ T8285] RSP: 002b:00007fa422e47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.084032][ T8285] RAX: ffffffffffffffda RBX: 00007fa424a05fa0 RCX: 00007fa4247de969 [ 160.084049][ T8285] RDX: 0000000022000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 160.084066][ T8285] RBP: 00007fa422e47090 R08: 0000000000000000 R09: 0000000000000000 [ 160.084081][ T8285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.084097][ T8285] R13: 0000000000000000 R14: 00007fa424a05fa0 R15: 00007ffc22e75c48 [ 160.084120][ T8285] [ 160.307351][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 160.316487][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 160.325803][ T8285] geneve1: entered allmulticast mode [ 160.421230][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 160.430426][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 160.527892][ T8305] IPv6: Can't replace route, no match found [ 160.625005][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.689770][ T8314] loop1: detected capacity change from 0 to 1024 [ 160.696562][ T8314] EXT4-fs: Ignoring removed orlov option [ 160.702735][ T8314] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 160.716103][ T8315] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1727'. [ 160.727583][ T8314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.774395][ T8320] FAULT_INJECTION: forcing a failure. [ 160.774395][ T8320] name failslab, interval 1, probability 0, space 0, times 0 [ 160.787385][ T8320] CPU: 0 UID: 0 PID: 8320 Comm: syz.0.1735 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 160.787470][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.787486][ T8320] Call Trace: [ 160.787495][ T8320] [ 160.787504][ T8320] __dump_stack+0x1d/0x30 [ 160.787532][ T8320] dump_stack_lvl+0xe8/0x140 [ 160.787557][ T8320] dump_stack+0x15/0x1b [ 160.787659][ T8320] should_fail_ex+0x265/0x280 [ 160.787701][ T8320] should_failslab+0x8c/0xb0 [ 160.787739][ T8320] kmem_cache_alloc_noprof+0x50/0x310 [ 160.787764][ T8320] ? skb_clone+0x151/0x1f0 [ 160.787793][ T8320] skb_clone+0x151/0x1f0 [ 160.787849][ T8320] __netlink_deliver_tap+0x2c9/0x500 [ 160.787879][ T8320] netlink_unicast+0x64c/0x670 [ 160.787964][ T8320] netlink_sendmsg+0x58b/0x6b0 [ 160.787992][ T8320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.788149][ T8320] __sock_sendmsg+0x145/0x180 [ 160.788185][ T8320] ____sys_sendmsg+0x31e/0x4e0 [ 160.788283][ T8320] ___sys_sendmsg+0x17b/0x1d0 [ 160.788331][ T8320] __x64_sys_sendmsg+0xd4/0x160 [ 160.788363][ T8320] x64_sys_call+0x2999/0x2fb0 [ 160.788443][ T8320] do_syscall_64+0xd0/0x1a0 [ 160.788474][ T8320] ? clear_bhb_loop+0x40/0x90 [ 160.788504][ T8320] ? clear_bhb_loop+0x40/0x90 [ 160.788531][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.788576][ T8320] RIP: 0033:0x7f61e60ce969 [ 160.788596][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.788620][ T8320] RSP: 002b:00007f61e4737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.788645][ T8320] RAX: ffffffffffffffda RBX: 00007f61e62f5fa0 RCX: 00007f61e60ce969 [ 160.788660][ T8320] RDX: 0000000022000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 160.788677][ T8320] RBP: 00007f61e4737090 R08: 0000000000000000 R09: 0000000000000000 [ 160.788691][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.788738][ T8320] R13: 0000000000000000 R14: 00007f61e62f5fa0 R15: 00007fff4401ceb8 [ 160.788763][ T8320] [ 161.006004][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.150667][ T8334] xt_hashlimit: size too large, truncated to 1048576 [ 161.332188][ T8346] loop1: detected capacity change from 0 to 512 [ 161.348687][ T8346] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.377347][ T8346] EXT4-fs (loop1): 1 truncate cleaned up [ 161.383498][ T8346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.447057][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1745'. [ 161.486622][ T8355] netlink: 'syz.5.1748': attribute type 3 has an invalid length. [ 161.508249][ T8349] loop0: detected capacity change from 0 to 512 [ 161.518331][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 161.518348][ T29] audit: type=1400 audit(1747862199.392:8649): avc: denied { read } for pid=8352 comm="syz.2.1747" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 161.564919][ T29] audit: type=1326 audit(1747862199.392:8650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f61e60cd5ca code=0x7ffc0000 [ 161.588826][ T29] audit: type=1326 audit(1747862199.392:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f61e60cd5ca code=0x7ffc0000 [ 161.612392][ T29] audit: type=1326 audit(1747862199.392:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f61e60cd1d7 code=0x7ffc0000 [ 161.622390][ T8349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.636870][ T29] audit: type=1326 audit(1747862199.392:8653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f61e60d010a code=0x7ffc0000 [ 161.636910][ T29] audit: type=1400 audit(1747862199.432:8654): avc: denied { open } for pid=8352 comm="syz.2.1747" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 161.701163][ T8349] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.714880][ T29] audit: type=1400 audit(1747862199.462:8655): avc: denied { ioctl } for pid=8352 comm="syz.2.1747" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 161.741815][ T29] audit: type=1326 audit(1747862199.582:8656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61e60cd2d0 code=0x7ffc0000 [ 161.765816][ T29] audit: type=1326 audit(1747862199.582:8657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f61e60cd6b7 code=0x7ffc0000 [ 161.790409][ T29] audit: type=1326 audit(1747862199.582:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.0.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61e60cd2d0 code=0x7ffc0000 [ 161.819553][ T8369] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 161.854506][ T8367] lo speed is unknown, defaulting to 1000 [ 162.262023][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.299757][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 162.416482][ T8384] loop5: detected capacity change from 0 to 512 [ 162.444995][ T8384] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 162.456144][ T8392] IPv4: Oversized IP packet from 127.202.26.0 [ 162.465856][ T8389] IPv6: Can't replace route, no match found [ 162.483706][ T8384] EXT4-fs (loop5): orphan cleanup on readonly fs [ 162.499016][ T8384] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1755: invalid indirect mapped block 256 (level 2) [ 162.547663][ T8384] EXT4-fs (loop5): 2 truncates cleaned up [ 162.564190][ T8384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.657306][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.721542][ T8403] xt_hashlimit: size too large, truncated to 1048576 [ 162.862685][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.058405][ T8412] FAULT_INJECTION: forcing a failure. [ 163.058405][ T8412] name failslab, interval 1, probability 0, space 0, times 0 [ 163.071191][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.5.1767 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 163.071344][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.071362][ T8412] Call Trace: [ 163.071376][ T8412] [ 163.071387][ T8412] __dump_stack+0x1d/0x30 [ 163.071416][ T8412] dump_stack_lvl+0xe8/0x140 [ 163.071436][ T8412] dump_stack+0x15/0x1b [ 163.071481][ T8412] should_fail_ex+0x265/0x280 [ 163.071521][ T8412] ? sctp_add_bind_addr+0x71/0x1e0 [ 163.071561][ T8412] should_failslab+0x8c/0xb0 [ 163.071593][ T8412] __kmalloc_cache_noprof+0x4c/0x320 [ 163.071616][ T8412] sctp_add_bind_addr+0x71/0x1e0 [ 163.071653][ T8412] sctp_copy_local_addr_list+0x199/0x220 [ 163.071773][ T8412] sctp_copy_one_addr+0x7f/0x280 [ 163.071806][ T8412] sctp_bind_addr_copy+0x79/0x290 [ 163.071902][ T8412] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 163.071958][ T8412] sctp_connect_new_asoc+0x1c3/0x3a0 [ 163.071988][ T8412] sctp_sendmsg+0xf10/0x18d0 [ 163.072023][ T8412] ? selinux_socket_sendmsg+0xf1/0x1b0 [ 163.072057][ T8412] ? __pfx_sctp_sendmsg+0x10/0x10 [ 163.072146][ T8412] inet_sendmsg+0xc2/0xd0 [ 163.072183][ T8412] __sock_sendmsg+0x102/0x180 [ 163.072275][ T8412] __sys_sendto+0x268/0x330 [ 163.072325][ T8412] __x64_sys_sendto+0x76/0x90 [ 163.072393][ T8412] x64_sys_call+0x2eb6/0x2fb0 [ 163.072422][ T8412] do_syscall_64+0xd0/0x1a0 [ 163.072454][ T8412] ? clear_bhb_loop+0x40/0x90 [ 163.072481][ T8412] ? clear_bhb_loop+0x40/0x90 [ 163.072560][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.072586][ T8412] RIP: 0033:0x7fe8e38ce969 [ 163.072606][ T8412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.072631][ T8412] RSP: 002b:00007fe8e1f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 163.072655][ T8412] RAX: ffffffffffffffda RBX: 00007fe8e3af5fa0 RCX: 00007fe8e38ce969 [ 163.072667][ T8412] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000005 [ 163.072725][ T8412] RBP: 00007fe8e1f37090 R08: 0000200000000140 R09: 000000000000001c [ 163.072761][ T8412] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 163.072850][ T8412] R13: 0000000000000000 R14: 00007fe8e3af5fa0 R15: 00007fff2ed1b398 [ 163.072875][ T8412] [ 163.374255][ T8418] FAULT_INJECTION: forcing a failure. [ 163.374255][ T8418] name failslab, interval 1, probability 0, space 0, times 0 [ 163.387784][ T8418] CPU: 0 UID: 0 PID: 8418 Comm: syz.5.1769 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 163.387822][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.387845][ T8418] Call Trace: [ 163.387875][ T8418] [ 163.387882][ T8418] __dump_stack+0x1d/0x30 [ 163.387904][ T8418] dump_stack_lvl+0xe8/0x140 [ 163.387926][ T8418] dump_stack+0x15/0x1b [ 163.387988][ T8418] should_fail_ex+0x265/0x280 [ 163.388035][ T8418] should_failslab+0x8c/0xb0 [ 163.388128][ T8418] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 163.388160][ T8418] ? __request_module+0x1c4/0x3e0 [ 163.388191][ T8418] ? __request_module+0x1df/0x3e0 [ 163.388220][ T8418] ? should_failslab+0x8c/0xb0 [ 163.388261][ T8418] kstrdup+0x3e/0xd0 [ 163.388287][ T8418] __request_module+0x1df/0x3e0 [ 163.388322][ T8418] ? should_failslab+0x8c/0xb0 [ 163.388429][ T8418] snd_timer_open+0x333/0xa10 [ 163.388469][ T8418] snd_seq_timer_open+0x18f/0x330 [ 163.388572][ T8418] ? snd_timer_instance_free+0x5f/0x70 [ 163.388614][ T8418] ? snd_timer_instance_free+0x5f/0x70 [ 163.388646][ T8418] snd_seq_queue_timer_open+0x85/0xe0 [ 163.388688][ T8418] snd_seq_ioctl_set_queue_timer+0x14b/0x170 [ 163.388777][ T8418] snd_seq_ioctl+0x17a/0x2e0 [ 163.388812][ T8418] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 163.388887][ T8418] __se_sys_ioctl+0xcb/0x140 [ 163.388913][ T8418] __x64_sys_ioctl+0x43/0x50 [ 163.388934][ T8418] x64_sys_call+0x19a8/0x2fb0 [ 163.388985][ T8418] do_syscall_64+0xd0/0x1a0 [ 163.389018][ T8418] ? clear_bhb_loop+0x40/0x90 [ 163.389046][ T8418] ? clear_bhb_loop+0x40/0x90 [ 163.389123][ T8418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.389151][ T8418] RIP: 0033:0x7fe8e38ce969 [ 163.389170][ T8418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.389195][ T8418] RSP: 002b:00007fe8e1f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.389290][ T8418] RAX: ffffffffffffffda RBX: 00007fe8e3af5fa0 RCX: 00007fe8e38ce969 [ 163.389307][ T8418] RDX: 0000200000001280 RSI: 0000000040605346 RDI: 0000000000000005 [ 163.389324][ T8418] RBP: 00007fe8e1f37090 R08: 0000000000000000 R09: 0000000000000000 [ 163.389414][ T8418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.389429][ T8418] R13: 0000000000000000 R14: 00007fe8e3af5fa0 R15: 00007fff2ed1b398 [ 163.389448][ T8418] [ 163.391779][ T8416] IPv6: Can't replace route, no match found [ 163.437407][ T8418] ALSA: seq fatal error: cannot create timer (-19) [ 163.510202][ T8419] netlink: 'syz.1.1765': attribute type 3 has an invalid length. [ 163.692998][ T8430] loop0: detected capacity change from 0 to 1024 [ 163.700594][ T8430] EXT4-fs: inline encryption not supported [ 163.701768][ T8435] xt_hashlimit: max too large, truncated to 1048576 [ 163.707731][ T8430] EXT4-fs: Ignoring removed i_version option [ 163.721879][ T8430] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.736344][ T8430] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.1775: lblock 2 mapped to illegal pblock 2 (length 1) [ 163.751523][ T8430] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.1775: lblock 0 mapped to illegal pblock 48 (length 1) [ 163.767902][ T8430] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1775: Failed to acquire dquot type 0 [ 163.783414][ T8430] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 163.794468][ T8430] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.1775: mark_inode_dirty error [ 163.806645][ T8430] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 163.818149][ T8430] EXT4-fs (loop0): 1 orphan inode deleted [ 163.824511][ T8430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.837886][ T12] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 163.857596][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 0 [ 163.869186][ T8430] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm syz.0.1775: lblock 1 mapped to illegal pblock 1 (length 1) [ 163.884703][ T8430] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1775: Failed to acquire dquot type 0 [ 163.950716][ T8445] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #2: block 16: comm syz.0.1775: lblock 0 mapped to illegal pblock 16 (length 1) [ 164.135103][ T8447] xt_hashlimit: size too large, truncated to 1048576 [ 164.268397][ T8451] netlink: 'syz.1.1778': attribute type 3 has an invalid length. [ 164.484488][ T8464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.493288][ T8464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.530640][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.542996][ T3317] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 164.556643][ T3317] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 164.576019][ T3317] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 164.762303][ T8506] netlink: 'syz.5.1788': attribute type 3 has an invalid length. [ 165.120244][ T8550] xt_hashlimit: size too large, truncated to 1048576 [ 165.705942][ T8580] loop1: detected capacity change from 0 to 2048 [ 165.716412][ T8599] lo speed is unknown, defaulting to 1000 [ 165.835089][ T8580] loop1: p2 p3 p7 [ 165.978201][ T8626] __nla_validate_parse: 28 callbacks suppressed [ 165.978224][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1797'. [ 166.006386][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1797'. [ 166.053868][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1797'. [ 166.066628][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1797'. [ 166.103866][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1797'. [ 166.116934][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1797'. [ 166.155188][ T8641] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.1799'. [ 166.245416][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 166.420737][ T8667] FAULT_INJECTION: forcing a failure. [ 166.420737][ T8667] name failslab, interval 1, probability 0, space 0, times 0 [ 166.434406][ T8667] CPU: 0 UID: 0 PID: 8667 Comm: syz.0.1807 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 166.434510][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.434526][ T8667] Call Trace: [ 166.434535][ T8667] [ 166.434544][ T8667] __dump_stack+0x1d/0x30 [ 166.434572][ T8667] dump_stack_lvl+0xe8/0x140 [ 166.434640][ T8667] dump_stack+0x15/0x1b [ 166.434663][ T8667] should_fail_ex+0x265/0x280 [ 166.434711][ T8667] should_failslab+0x8c/0xb0 [ 166.434793][ T8667] kmem_cache_alloc_noprof+0x50/0x310 [ 166.434818][ T8667] ? audit_log_start+0x365/0x6c0 [ 166.434864][ T8667] audit_log_start+0x365/0x6c0 [ 166.434904][ T8667] audit_seccomp+0x48/0x100 [ 166.434939][ T8667] ? __seccomp_filter+0x68c/0x10d0 [ 166.435012][ T8667] __seccomp_filter+0x69d/0x10d0 [ 166.435035][ T8667] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 166.435090][ T8667] ? vfs_write+0x75e/0x8d0 [ 166.435192][ T8667] __secure_computing+0x82/0x150 [ 166.435222][ T8667] syscall_trace_enter+0xcf/0x1e0 [ 166.435254][ T8667] do_syscall_64+0xaa/0x1a0 [ 166.435286][ T8667] ? clear_bhb_loop+0x40/0x90 [ 166.435314][ T8667] ? clear_bhb_loop+0x40/0x90 [ 166.435405][ T8667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.435497][ T8667] RIP: 0033:0x7f61e60ce969 [ 166.435524][ T8667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.435548][ T8667] RSP: 002b:00007f61e4737038 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 166.435572][ T8667] RAX: ffffffffffffffda RBX: 00007f61e62f5fa0 RCX: 00007f61e60ce969 [ 166.435589][ T8667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005d555ede6000 [ 166.435614][ T8667] RBP: 00007f61e4737090 R08: 0000000000000000 R09: 0000000000000000 [ 166.435703][ T8667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.435719][ T8667] R13: 0000000000000000 R14: 00007f61e62f5fa0 R15: 00007fff4401ceb8 [ 166.435746][ T8667] [ 166.642885][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 166.642904][ T29] audit: type=1400 audit(1747862204.512:8703): avc: denied { relabelfrom } for pid=8668 comm="syz.1.1808" name="" dev="pipefs" ino=21377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 166.643520][ T8669] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 166.681436][ T29] audit: type=1400 audit(1747862204.562:8704): avc: denied { relabelto } for pid=8668 comm="syz.1.1808" name="" dev="pipefs" ino=21377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 166.715658][ T8669] serio: Serial port ptm0 [ 166.851510][ T8673] IPv6: Can't replace route, no match found [ 166.900485][ T8677] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 166.943046][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'. [ 166.954170][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'. [ 167.401302][ T8702] lo speed is unknown, defaulting to 1000 [ 167.941793][ T8713] IPv6: Can't replace route, no match found [ 167.980316][ T8715] 9pnet_fd: Insufficient options for proto=fd [ 168.098880][ T8733] netlink: 'syz.2.1829': attribute type 18 has an invalid length. [ 168.141551][ T8739] xt_hashlimit: size too large, truncated to 1048576 [ 168.174802][ T8743] IPv6: Can't replace route, no match found [ 168.234365][ T8748] 9pnet_fd: Insufficient options for proto=fd [ 168.410941][ T8759] lo speed is unknown, defaulting to 1000 [ 168.474173][ T29] audit: type=1400 audit(1747862206.342:8705): avc: denied { read write } for pid=8766 comm="syz.1.1842" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 168.498844][ T8767] loop1: detected capacity change from 0 to 1024 [ 168.499764][ T29] audit: type=1400 audit(1747862206.342:8706): avc: denied { open } for pid=8766 comm="syz.1.1842" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 168.527343][ T8767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.548692][ T8767] EXT4-fs: Mount option(s) incompatible with ext2 [ 168.598284][ T8767] x_tables: duplicate underflow at hook 1 [ 168.605980][ T10] lo speed is unknown, defaulting to 1000 [ 168.761890][ T8781] 9pnet_fd: Insufficient options for proto=fd [ 168.810526][ T8785] IPv6: Can't replace route, no match found [ 168.845596][ T8767] sctp: [Deprecated]: syz.1.1842 (pid 8767) Use of int in max_burst socket option deprecated. [ 168.845596][ T8767] Use struct sctp_assoc_value instead [ 168.946233][ T8797] loop4: detected capacity change from 0 to 1024 [ 168.953897][ T8797] EXT4-fs: inline encryption not supported [ 168.959820][ T8797] EXT4-fs: Ignoring removed i_version option [ 168.966228][ T8797] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.980169][ T8797] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.1855: lblock 2 mapped to illegal pblock 2 (length 1) [ 168.994549][ T8797] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 169.002827][ T8797] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.1855: lblock 0 mapped to illegal pblock 48 (length 1) [ 169.018286][ T8797] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 169.027173][ T8797] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1855: Failed to acquire dquot type 0 [ 169.039144][ T8797] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 169.048797][ T8797] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.1855: mark_inode_dirty error [ 169.061710][ T8797] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 169.072855][ T8797] EXT4-fs (loop4): 1 orphan inode deleted [ 169.080163][ T8797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.092876][ T31] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 169.114460][ T31] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 169.123018][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 169.123055][ T8797] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm syz.4.1855: lblock 1 mapped to illegal pblock 1 (length 1) [ 169.149781][ T8797] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 1 [ 169.158874][ T8797] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 60928 [ 169.169504][ T8797] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1855: Failed to acquire dquot type 0 [ 169.201559][ T8807] xt_hashlimit: size too large, truncated to 1048576 [ 169.230946][ T8797] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 16: comm syz.4.1855: lblock 0 mapped to illegal pblock 16 (length 1) [ 169.420043][ T8811] 9pnet_fd: Insufficient options for proto=fd [ 169.455504][ T8817] IPv6: Can't replace route, no match found [ 169.789892][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.799307][ T3320] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 169.812919][ T3320] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 169.815364][ T8839] 9pnet_fd: Insufficient options for proto=fd [ 169.823973][ T3320] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 169.871268][ T8843] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.936473][ T8843] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.981917][ T8846] xt_hashlimit: size too large, truncated to 1048576 [ 170.082557][ T8843] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.203788][ T8843] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.276616][ T8843] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.285363][ T8853] IPv6: Can't replace route, no match found [ 170.295199][ T8843] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.308252][ T8843] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.320389][ T8843] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.375898][ T8861] 9pnet_fd: Insufficient options for proto=fd [ 170.390872][ T29] audit: type=1326 audit(1747862208.262:8707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8862 comm="syz.0.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e60ce969 code=0x7ffc0000 [ 170.414875][ T8863] loop0: detected capacity change from 0 to 512 [ 170.439448][ T8863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.452354][ T8863] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.479690][ T8870] 9pnet_fd: Insufficient options for proto=fd [ 170.514946][ T8872] loop5: detected capacity change from 0 to 1024 [ 170.522602][ T8872] EXT4-fs: inline encryption not supported [ 170.528633][ T8872] EXT4-fs: Ignoring removed i_version option [ 170.535304][ T8872] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.551730][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.563742][ T8872] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 2: comm syz.5.1882: lblock 2 mapped to illegal pblock 2 (length 1) [ 170.580048][ T8872] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 48: comm syz.5.1882: lblock 0 mapped to illegal pblock 48 (length 1) [ 170.581894][ T8879] IPv6: Can't replace route, no match found [ 170.610179][ T8872] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1882: Failed to acquire dquot type 0 [ 170.626705][ T8872] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 170.636385][ T8872] EXT4-fs error (device loop5): ext4_evict_inode:259: inode #11: comm syz.5.1882: mark_inode_dirty error [ 170.649747][ T8872] EXT4-fs warning (device loop5): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 170.660467][ T8872] EXT4-fs (loop5): 1 orphan inode deleted [ 170.668287][ T8872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.680608][ T8258] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 170.696168][ T8258] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 0 [ 170.707746][ T8872] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm syz.5.1882: lblock 1 mapped to illegal pblock 1 (length 1) [ 170.723401][ T8872] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1882: Failed to acquire dquot type 0 [ 170.740556][ T8890] 9pnet_fd: Insufficient options for proto=fd [ 170.801516][ T8891] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #2: block 16: comm syz.5.1882: lblock 0 mapped to illegal pblock 16 (length 1) [ 170.817143][ T8899] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.878681][ T8899] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.928564][ T8899] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.979450][ T8899] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.001436][ T8911] loop4: detected capacity change from 0 to 512 [ 171.008840][ T8911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.015615][ T8911] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.022531][ T8911] EXT4-fs: inline encryption not supported [ 171.030246][ T8911] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 171.036315][ T8899] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.039913][ T8911] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 171.050235][ T8899] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.057091][ T8911] EXT4-fs (loop4): 1 truncate cleaned up [ 171.067044][ T8899] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.071403][ T8911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.080442][ T8899] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.106905][ T8911] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 4: comm syz.4.1897: lblock 0 mapped to illegal pblock 4 (length 1) [ 171.138360][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.165747][ T8916] IPv6: Can't replace route, no match found [ 171.311228][ T8923] 9pnet_fd: Insufficient options for proto=fd [ 171.365691][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.393458][ T6893] EXT4-fs error (device loop5): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 171.410810][ T6893] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 171.425510][ T8933] __nla_validate_parse: 33 callbacks suppressed [ 171.425526][ T8933] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.1905'. [ 171.442321][ T6893] EXT4-fs error (device loop5): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 171.459985][ T8934] netlink: 'syz.2.1908': attribute type 3 has an invalid length. [ 171.489481][ T8940] IPv6: Can't replace route, no match found [ 171.515279][ T8942] loop0: detected capacity change from 0 to 1024 [ 171.522721][ T8942] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.529896][ T8942] EXT4-fs: Mount option(s) incompatible with ext2 [ 171.538956][ T8942] x_tables: duplicate underflow at hook 1 [ 171.546170][ T8942] FAULT_INJECTION: forcing a failure. [ 171.546170][ T8942] name failslab, interval 1, probability 0, space 0, times 0 [ 171.558907][ T8942] CPU: 1 UID: 0 PID: 8942 Comm: syz.0.1911 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 171.558945][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.558961][ T8942] Call Trace: [ 171.558970][ T8942] [ 171.558987][ T8942] __dump_stack+0x1d/0x30 [ 171.559014][ T8942] dump_stack_lvl+0xe8/0x140 [ 171.559069][ T8942] dump_stack+0x15/0x1b [ 171.559091][ T8942] should_fail_ex+0x265/0x280 [ 171.559163][ T8942] should_failslab+0x8c/0xb0 [ 171.559204][ T8942] kmem_cache_alloc_noprof+0x50/0x310 [ 171.559286][ T8942] ? skb_clone+0x151/0x1f0 [ 171.559342][ T8942] skb_clone+0x151/0x1f0 [ 171.559364][ T8942] __netlink_deliver_tap+0x2c9/0x500 [ 171.559464][ T8942] netlink_unicast+0x64c/0x670 [ 171.559507][ T8942] netlink_sendmsg+0x58b/0x6b0 [ 171.559536][ T8942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.559562][ T8942] __sock_sendmsg+0x145/0x180 [ 171.559674][ T8942] ____sys_sendmsg+0x31e/0x4e0 [ 171.559706][ T8942] ___sys_sendmsg+0x17b/0x1d0 [ 171.559821][ T8942] __x64_sys_sendmsg+0xd4/0x160 [ 171.559848][ T8942] x64_sys_call+0x2999/0x2fb0 [ 171.559911][ T8942] do_syscall_64+0xd0/0x1a0 [ 171.559952][ T8942] ? clear_bhb_loop+0x40/0x90 [ 171.560055][ T8942] ? clear_bhb_loop+0x40/0x90 [ 171.560080][ T8942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.560102][ T8942] RIP: 0033:0x7f61e60ce969 [ 171.560126][ T8942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.560145][ T8942] RSP: 002b:00007f61e4737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.560169][ T8942] RAX: ffffffffffffffda RBX: 00007f61e62f5fa0 RCX: 00007f61e60ce969 [ 171.560186][ T8942] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000a [ 171.560202][ T8942] RBP: 00007f61e4737090 R08: 0000000000000000 R09: 0000000000000000 [ 171.560218][ T8942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.560250][ T8942] R13: 0000000000000000 R14: 00007f61e62f5fa0 R15: 00007fff4401ceb8 [ 171.560275][ T8942] [ 171.560860][ T8942] lo: entered promiscuous mode [ 171.770871][ T8942] lo: entered allmulticast mode [ 171.886757][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 171.886777][ T29] audit: type=1326 audit(1747862209.752:8740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8949 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 171.917208][ T29] audit: type=1326 audit(1747862209.752:8741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8949 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 171.940671][ T29] audit: type=1326 audit(1747862209.762:8742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8949 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 171.964937][ T29] audit: type=1326 audit(1747862209.762:8743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8949 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 171.989737][ T29] audit: type=1326 audit(1747862209.792:8744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8949 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 172.222817][ T8953] serio: Serial port ptm0 [ 172.316581][ T8958] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.1923'. [ 172.499170][ T8965] 9pnet_fd: Insufficient options for proto=fd [ 172.620485][ T8969] lo speed is unknown, defaulting to 1000 [ 173.044407][ T8980] IPv6: Can't replace route, no match found [ 173.084877][ T8982] xt_hashlimit: size too large, truncated to 1048576 [ 173.196421][ T8988] netlink: 'syz.1.1925': attribute type 3 has an invalid length. [ 173.236311][ T29] audit: type=1326 audit(1747862211.102:8745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8989 comm="syz.1.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 173.260669][ T29] audit: type=1326 audit(1747862211.102:8746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8989 comm="syz.1.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 173.345614][ T29] audit: type=1326 audit(1747862211.162:8747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8989 comm="syz.1.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 173.369154][ T29] audit: type=1326 audit(1747862211.162:8748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8989 comm="syz.1.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 173.392592][ T29] audit: type=1326 audit(1747862211.162:8749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8989 comm="syz.1.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 173.418915][ T8998] 9pnet_fd: Insufficient options for proto=fd [ 173.479800][ T9000] FAULT_INJECTION: forcing a failure. [ 173.479800][ T9000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.493001][ T9000] CPU: 0 UID: 0 PID: 9000 Comm: syz.4.1931 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 173.493071][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.493087][ T9000] Call Trace: [ 173.493097][ T9000] [ 173.493107][ T9000] __dump_stack+0x1d/0x30 [ 173.493135][ T9000] dump_stack_lvl+0xe8/0x140 [ 173.493161][ T9000] dump_stack+0x15/0x1b [ 173.493243][ T9000] should_fail_ex+0x265/0x280 [ 173.493280][ T9000] should_fail+0xb/0x20 [ 173.493337][ T9000] should_fail_usercopy+0x1a/0x20 [ 173.493401][ T9000] _copy_from_user+0x1c/0xb0 [ 173.493424][ T9000] __sys_connect+0xd0/0x2b0 [ 173.493468][ T9000] __x64_sys_connect+0x3f/0x50 [ 173.493572][ T9000] x64_sys_call+0x1daa/0x2fb0 [ 173.493600][ T9000] do_syscall_64+0xd0/0x1a0 [ 173.493626][ T9000] ? clear_bhb_loop+0x40/0x90 [ 173.493647][ T9000] ? clear_bhb_loop+0x40/0x90 [ 173.493712][ T9000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.493740][ T9000] RIP: 0033:0x7ffadcfce969 [ 173.493756][ T9000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.493774][ T9000] RSP: 002b:00007ffadb637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 173.493792][ T9000] RAX: ffffffffffffffda RBX: 00007ffadd1f5fa0 RCX: 00007ffadcfce969 [ 173.493835][ T9000] RDX: 000000000000001e RSI: 0000200000000340 RDI: 0000000000000005 [ 173.493852][ T9000] RBP: 00007ffadb637090 R08: 0000000000000000 R09: 0000000000000000 [ 173.493865][ T9000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.493885][ T9000] R13: 0000000000000000 R14: 00007ffadd1f5fa0 R15: 00007ffffb224628 [ 173.493912][ T9000] [ 173.705063][ T9011] loop4: detected capacity change from 0 to 512 [ 173.787730][ T9011] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.799961][ T9011] EXT4-fs (loop4): 1 truncate cleaned up [ 173.806036][ T9011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.175067][ T9016] lo speed is unknown, defaulting to 1000 [ 174.333196][ T9021] program syz.0.1937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.344817][ T9019] netlink: 'syz.2.1936': attribute type 3 has an invalid length. [ 174.377015][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 174.386259][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 174.408155][ T9028] xt_hashlimit: size too large, truncated to 1048576 [ 174.530430][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 174.570220][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 174.594980][ T9030] lo speed is unknown, defaulting to 1000 [ 174.644295][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 174.658077][ T9041] 9pnet_fd: Insufficient options for proto=fd [ 174.692748][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 174.865833][ T9049] IPv6: Can't replace route, no match found [ 174.934665][ T9059] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 174.947085][ T9059] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 175.037906][ T9061] lo speed is unknown, defaulting to 1000 [ 175.488487][ T9066] netlink: 'syz.5.1949': attribute type 3 has an invalid length. [ 175.756538][ T9072] 9pnet_fd: Insufficient options for proto=fd [ 176.091520][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.201086][ T9093] IPv6: Can't replace route, no match found [ 176.340588][ T9107] xt_hashlimit: size too large, truncated to 1048576 [ 176.585383][ T9122] __nla_validate_parse: 10 callbacks suppressed [ 176.585402][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 176.631456][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 176.684751][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 176.713976][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 176.763213][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 176.777374][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 176.845801][ T9135] loop0: detected capacity change from 0 to 512 [ 176.856329][ T9135] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.876425][ T9135] EXT4-fs (loop0): 1 truncate cleaned up [ 176.892834][ T9135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.051978][ T9140] IPv6: Can't replace route, no match found [ 177.257916][ T9146] lo speed is unknown, defaulting to 1000 [ 177.381084][ T9154] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.1973'. [ 177.412544][ T9155] lo speed is unknown, defaulting to 1000 [ 177.483586][ T9157] loop1: detected capacity change from 0 to 512 [ 177.496194][ T9157] EXT4-fs (loop1): bad s_min_extra_isize: 65528 [ 177.948590][ T9163] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 177.981271][ T9163] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 178.009259][ T9163] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 178.092025][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 178.092043][ T29] audit: type=1326 audit(1747862215.962:8824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.5.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e38ce969 code=0x7ffc0000 [ 178.129245][ T29] audit: type=1326 audit(1747862215.962:8825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.5.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e38ce969 code=0x7ffc0000 [ 178.152794][ T29] audit: type=1326 audit(1747862216.002:8826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.5.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fe8e38ce969 code=0x7ffc0000 [ 178.177296][ T29] audit: type=1326 audit(1747862216.002:8827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.5.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e38ce969 code=0x7ffc0000 [ 178.200855][ T29] audit: type=1326 audit(1747862216.002:8828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9159 comm="syz.5.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e38ce969 code=0x7ffc0000 [ 178.246136][ T29] audit: type=1326 audit(1747862216.102:8829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 178.270532][ T29] audit: type=1326 audit(1747862216.102:8830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 178.294113][ T29] audit: type=1326 audit(1747862216.102:8831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 178.318355][ T29] audit: type=1326 audit(1747862216.102:8832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 178.341823][ T29] audit: type=1326 audit(1747862216.102:8833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.2.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 178.556876][ T9184] netlink: 'syz.5.1983': attribute type 3 has an invalid length. [ 178.681857][ T9188] lo speed is unknown, defaulting to 1000 [ 179.166259][ T9187] SELinux: failed to load policy [ 179.175930][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.414381][ T9218] IPv6: Can't replace route, no match found [ 179.854233][ T9246] lo speed is unknown, defaulting to 1000 [ 180.535218][ T9290] lo speed is unknown, defaulting to 1000 [ 181.546048][ T9316] loop4: detected capacity change from 0 to 2048 [ 181.576990][ T9316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.591812][ T9316] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.660847][ T9313] hub 2-0:1.0: USB hub found [ 181.667635][ T9313] hub 2-0:1.0: 8 ports detected [ 181.686218][ T9313] __nla_validate_parse: 29 callbacks suppressed [ 181.686258][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'. [ 181.764463][ T9326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.840207][ T9326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.885121][ T3418] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 345: padding at end of block bitmap is not set [ 181.911850][ T9326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.961318][ T3418] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 641 with error 117 [ 181.974841][ T3418] EXT4-fs (loop4): This should not happen!! Data will be lost [ 181.974841][ T3418] [ 181.999555][ T9326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.055965][ T9326] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.072489][ T9326] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.085391][ T9337] loop5: detected capacity change from 0 to 512 [ 182.095181][ T9337] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 182.114449][ T9326] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.158744][ T9326] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.193587][ T9337] EXT4-fs (loop5): 1 truncate cleaned up [ 182.201358][ T9337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.462494][ T9348] lo speed is unknown, defaulting to 1000 [ 182.776464][ T9358] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.2039'. [ 182.828462][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.099016][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 183.099039][ T29] audit: type=1326 audit(1747862220.972:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9735045927 code=0x7ffc0000 [ 183.149234][ T29] audit: type=1326 audit(1747862220.972:9151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9734feab39 code=0x7ffc0000 [ 183.173375][ T29] audit: type=1326 audit(1747862220.972:9152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 183.196862][ T29] audit: type=1326 audit(1747862220.992:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9735045927 code=0x7ffc0000 [ 183.220937][ T29] audit: type=1326 audit(1747862220.992:9154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9734feab39 code=0x7ffc0000 [ 183.244407][ T29] audit: type=1326 audit(1747862220.992:9155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 183.268568][ T29] audit: type=1326 audit(1747862220.992:9156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9735045927 code=0x7ffc0000 [ 183.291912][ T29] audit: type=1326 audit(1747862220.992:9157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9734feab39 code=0x7ffc0000 [ 183.315990][ T29] audit: type=1326 audit(1747862220.992:9158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 183.340120][ T29] audit: type=1326 audit(1747862221.002:9159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.1.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9735045927 code=0x7ffc0000 [ 183.610990][ T9376] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.662295][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.673269][ T9376] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.709343][ T9376] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.788775][ T9376] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.876425][ T9376] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.888461][ T9376] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.901342][ T9376] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.915711][ T9376] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.956672][ T9404] netlink: 'syz.4.2056': attribute type 3 has an invalid length. [ 184.001615][ T9409] ip6erspan0: entered promiscuous mode [ 184.010712][ T9411] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.2059'. [ 184.144866][ T9417] loop0: detected capacity change from 0 to 512 [ 184.153376][ T9417] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.164934][ T9417] EXT4-fs (loop0): 1 truncate cleaned up [ 184.173840][ T9417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.420537][ T9420] lo speed is unknown, defaulting to 1000 [ 185.025600][ T9438] lo speed is unknown, defaulting to 1000 [ 185.677555][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 185.694412][ T9448] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.706337][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 185.724602][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 185.734072][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 185.734538][ T9448] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.771746][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 185.782090][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 185.793152][ T9448] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.898534][ T9448] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.948736][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.995899][ T9448] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.981811][ T9448] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.032985][ T9448] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.048350][ T9448] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.078373][ T9465] lo speed is unknown, defaulting to 1000 [ 187.114511][ T9467] lo speed is unknown, defaulting to 1000 [ 187.138345][ T9466] loop0: detected capacity change from 0 to 512 [ 187.170972][ T9466] EXT4-fs (loop0): bad s_min_extra_isize: 65528 [ 187.178878][ T9472] netlink: 'syz.5.2074': attribute type 3 has an invalid length. [ 187.883511][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 187.897239][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 187.931826][ T9498] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.2083'. [ 187.974935][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 188.029068][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 188.056155][ T9504] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.110160][ T9504] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.116210][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 188.144460][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 188.170264][ T9504] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.202689][ T9509] netlink: 'syz.5.2088': attribute type 3 has an invalid length. [ 188.216429][ T9513] xt_hashlimit: size too large, truncated to 1048576 [ 188.269274][ T9504] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.472453][ T9521] xt_hashlimit: size too large, truncated to 1048576 [ 188.700612][ T9530] netlink: 'syz.2.2094': attribute type 3 has an invalid length. [ 189.012327][ T9549] xt_hashlimit: size too large, truncated to 1048576 [ 189.595273][ T9576] lo speed is unknown, defaulting to 1000 [ 189.993281][ T9589] xt_hashlimit: size too large, truncated to 1048576 [ 190.097697][ T1040] page_pool_release_retry() stalled pool shutdown: id 75, 2 inflight 60 sec [ 190.241427][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 190.254974][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 190.272723][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 190.327249][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 190.327268][ T29] audit: type=1326 audit(1747862228.202:9280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 190.367667][ T29] audit: type=1326 audit(1747862228.202:9281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 190.391201][ T29] audit: type=1326 audit(1747862228.202:9282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 190.414732][ T29] audit: type=1326 audit(1747862228.242:9283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9597 comm="syz.2.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 190.805738][ T9633] xt_hashlimit: size too large, truncated to 1048576 [ 191.078350][ T10] page_pool_release_retry() stalled pool shutdown: id 76, 2 inflight 60 sec [ 191.177682][ T9652] lo speed is unknown, defaulting to 1000 [ 191.408055][ T9657] loop0: detected capacity change from 0 to 512 [ 191.450450][ T9658] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.526380][ T9657] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 191.545484][ T9657] EXT4-fs (loop0): 1 truncate cleaned up [ 191.558987][ T9658] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.570901][ T9657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.681168][ T9658] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.707949][ T9504] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.722409][ T9504] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.732861][ T9658] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.752276][ T9504] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.785594][ T9504] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.804396][ T9658] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.816318][ T9658] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.828643][ T9658] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.840480][ T9658] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.858351][ T9667] lo speed is unknown, defaulting to 1000 [ 192.009488][ T9680] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.028174][ T9685] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.068404][ T9680] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.099011][ T9690] IPv6: Can't replace route, no match found [ 192.119289][ T9685] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.158780][ T9680] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.179782][ T9694] IPv6: Can't replace route, no match found [ 192.189346][ T9685] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.281177][ T9680] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.319775][ T9685] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.341185][ T9702] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.441348][ T9707] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.453938][ T9702] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.508860][ T9707] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.535257][ T9702] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.579388][ T9707] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.608463][ T9702] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.649092][ T9707] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.668581][ T9702] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.680079][ T9702] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.692130][ T9702] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.703939][ T9702] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.715754][ T9707] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.728088][ T9707] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.740059][ T9707] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.752007][ T9707] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.811197][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.064627][ T9724] __nla_validate_parse: 24 callbacks suppressed [ 193.064642][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2158'. [ 193.080735][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2158'. [ 193.098630][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2158'. [ 193.107719][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2158'. [ 193.131636][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2158'. [ 193.140820][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2158'. [ 193.167704][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2159'. [ 193.387017][ T9732] lo speed is unknown, defaulting to 1000 [ 193.560060][ T9732] loop5: detected capacity change from 0 to 512 [ 193.572251][ T9732] EXT4-fs (loop5): bad s_min_extra_isize: 65528 [ 193.746777][ T9739] IPv6: Can't replace route, no match found [ 193.863445][ T9747] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.898307][ T9747] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.939674][ T9747] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.998677][ T9747] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.569853][ T9752] loop5: detected capacity change from 0 to 512 [ 194.577333][ T9752] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 194.588989][ T9752] EXT4-fs (loop5): 1 truncate cleaned up [ 194.595249][ T9752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.610265][ T9752] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2165'. [ 194.676316][ T9757] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.769302][ T9757] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.808683][ T9757] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.834310][ T9762] lo speed is unknown, defaulting to 1000 [ 194.858552][ T9757] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.928899][ T9757] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.942194][ T9757] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.954019][ T9757] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.967796][ T9757] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.148805][ T9767] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.2168'. [ 195.442672][ T29] audit: type=1326 audit(1747862233.312:9284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e60ce969 code=0x7ffc0000 [ 195.493937][ T29] audit: type=1326 audit(1747862233.332:9285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e60ce969 code=0x7ffc0000 [ 195.517709][ T29] audit: type=1326 audit(1747862233.342:9286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e60ce969 code=0x7ffc0000 [ 195.541145][ T29] audit: type=1326 audit(1747862233.342:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e60ce969 code=0x7ffc0000 [ 195.564638][ T29] audit: type=1326 audit(1747862233.342:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e60ce969 code=0x7ffc0000 [ 195.588162][ T29] audit: type=1326 audit(1747862233.342:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f61e60ce969 code=0x7ffc0000 [ 195.611676][ T29] audit: type=1326 audit(1747862233.342:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61e60ce9a3 code=0x7ffc0000 [ 195.635072][ T29] audit: type=1326 audit(1747862233.342:9291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61e60ce9a3 code=0x7ffc0000 [ 195.658380][ T29] audit: type=1326 audit(1747862233.342:9292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e60ce969 code=0x7ffc0000 [ 195.681832][ T29] audit: type=1326 audit(1747862233.342:9293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9770 comm="syz.0.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e60ce969 code=0x7ffc0000 [ 195.730328][ T9776] IPv6: Can't replace route, no match found [ 195.784034][ T9780] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 195.834052][ T9680] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.845967][ T9680] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.857998][ T9680] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.869880][ T9680] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.054552][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.126672][ T9792] lo speed is unknown, defaulting to 1000 [ 196.308002][ T9794] loop4: detected capacity change from 0 to 512 [ 196.315749][ T9794] EXT4-fs (loop4): bad s_min_extra_isize: 65528 [ 196.657572][ T9747] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.682435][ T9747] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.701349][ T9747] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.718597][ T9747] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.738886][ T9685] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.766362][ T9685] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.853627][ T9685] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.866517][ T9685] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.042956][ T9823] lo speed is unknown, defaulting to 1000 [ 197.490839][ T9830] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.560552][ T9830] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.628539][ T9830] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.738215][ T9830] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.807473][ T9844] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.870039][ T9844] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.909435][ T9844] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.969623][ T9844] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.242342][ T9861] lo speed is unknown, defaulting to 1000 [ 199.148631][ T9875] lo speed is unknown, defaulting to 1000 [ 200.476417][ T9900] loop5: detected capacity change from 0 to 1024 [ 200.483347][ T9900] EXT4-fs: Ignoring removed orlov option [ 200.489783][ T9900] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 200.492486][ T9902] __nla_validate_parse: 14 callbacks suppressed [ 200.492586][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 200.515328][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 200.518896][ T9900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.546845][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 200.556088][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 200.580172][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.586302][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 200.598578][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 200.720908][ T9920] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 200.729470][ T9920] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 200.745238][ T9920] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 200.753783][ T9920] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 200.835490][ T9924] lo speed is unknown, defaulting to 1000 [ 200.953622][ T23] page_pool_release_retry() stalled pool shutdown: id 83, 2 inflight 60 sec [ 201.198481][ T9932] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.206271][ T9932] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.832397][ T9830] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.844241][ T9830] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.855691][ T9830] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.867547][ T9830] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.056867][ T9948] loop0: detected capacity change from 0 to 512 [ 202.077023][ T9948] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 202.184001][ T9948] EXT4-fs (loop0): 1 truncate cleaned up [ 202.190273][ T9948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.406089][ T9951] lo speed is unknown, defaulting to 1000 [ 202.672858][ T9844] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.685889][ T9844] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.702243][ T9844] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.722635][ T9844] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.778924][ T9957] loop4: detected capacity change from 0 to 1024 [ 202.800564][ T9957] EXT4-fs: Ignoring removed orlov option [ 202.808766][ T9957] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 202.834860][ T9957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.931053][ T9961] lo speed is unknown, defaulting to 1000 [ 203.042087][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.352244][ T9992] lo speed is unknown, defaulting to 1000 [ 205.152419][ T9995] lo speed is unknown, defaulting to 1000 [ 205.280793][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 205.280812][ T29] audit: type=1326 audit(1747862243.152:9381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 205.312489][ T29] audit: type=1326 audit(1747862243.162:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 205.336135][ T29] audit: type=1326 audit(1747862243.162:9383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 205.359818][ T29] audit: type=1326 audit(1747862243.162:9384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 205.383462][ T29] audit: type=1326 audit(1747862243.162:9385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 205.407529][ T29] audit: type=1326 audit(1747862243.192:9386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f973504e9a3 code=0x7ffc0000 [ 205.432506][ T29] audit: type=1326 audit(1747862243.192:9387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f973504e9a3 code=0x7ffc0000 [ 205.455867][ T29] audit: type=1326 audit(1747862243.192:9388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 205.479443][ T29] audit: type=1326 audit(1747862243.192:9389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 205.502983][ T29] audit: type=1326 audit(1747862243.192:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.1.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 205.637595][T10012] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 205.731685][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.838854][T10023] loop1: detected capacity change from 0 to 2048 [ 205.880453][T10029] loop0: detected capacity change from 0 to 512 [ 205.898382][T10029] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 205.910788][T10023] loop1: p1 < > p4 [ 205.915180][T10027] IPv6: Can't replace route, no match found [ 205.915743][T10023] loop1: p4 size 8388608 extends beyond EOD, truncated [ 205.928387][T10029] EXT4-fs (loop0): 1 truncate cleaned up [ 205.934539][T10029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.952937][T10034] loop4: detected capacity change from 0 to 1024 [ 205.954575][T10029] __nla_validate_parse: 19 callbacks suppressed [ 205.954594][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2247'. [ 205.960499][T10034] EXT4-fs: Ignoring removed orlov option [ 205.996291][T10023] netlink: 'syz.1.2245': attribute type 1 has an invalid length. [ 206.015513][T10034] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 206.033996][T10040] loop5: detected capacity change from 0 to 164 [ 206.045946][T10023] bond1: entered promiscuous mode [ 206.052917][T10023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.102034][T10034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.121283][T10042] bond1: (slave veth3): making interface the new active one [ 206.128693][T10042] veth3: entered promiscuous mode [ 206.137707][T10042] bond1: (slave veth3): Enslaving as an active interface with an up link [ 206.214659][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.236756][T10051] loop4: detected capacity change from 0 to 512 [ 206.244373][T10051] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 206.265656][T10051] EXT4-fs (loop4): 1 truncate cleaned up [ 206.287444][T10051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.454790][T10054] lo speed is unknown, defaulting to 1000 [ 206.529238][T10061] FAULT_INJECTION: forcing a failure. [ 206.529238][T10061] name failslab, interval 1, probability 0, space 0, times 0 [ 206.541996][T10061] CPU: 1 UID: 0 PID: 10061 Comm: syz.5.2255 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 206.542059][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.542129][T10061] Call Trace: [ 206.542136][T10061] [ 206.542143][T10061] __dump_stack+0x1d/0x30 [ 206.542222][T10061] dump_stack_lvl+0xe8/0x140 [ 206.542249][T10061] dump_stack+0x15/0x1b [ 206.542267][T10061] should_fail_ex+0x265/0x280 [ 206.542301][T10061] ? alloc_fs_context+0x44/0x4e0 [ 206.542509][T10061] should_failslab+0x8c/0xb0 [ 206.542571][T10061] __kmalloc_cache_noprof+0x4c/0x320 [ 206.542602][T10061] alloc_fs_context+0x44/0x4e0 [ 206.542637][T10061] fs_context_for_mount+0x22/0x30 [ 206.542664][T10061] do_new_mount+0xe9/0x680 [ 206.542752][T10061] path_mount+0x4a4/0xb20 [ 206.542783][T10061] ? user_path_at+0x109/0x130 [ 206.542814][T10061] __se_sys_mount+0x28f/0x2e0 [ 206.542901][T10061] ? fput+0x8f/0xc0 [ 206.542926][T10061] __x64_sys_mount+0x67/0x80 [ 206.543040][T10061] x64_sys_call+0xd36/0x2fb0 [ 206.543084][T10061] do_syscall_64+0xd0/0x1a0 [ 206.543112][T10061] ? clear_bhb_loop+0x40/0x90 [ 206.543141][T10061] ? clear_bhb_loop+0x40/0x90 [ 206.543279][T10061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.543354][T10061] RIP: 0033:0x7fe8e38ce969 [ 206.543374][T10061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.543393][T10061] RSP: 002b:00007fe8e1f37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.543414][T10061] RAX: ffffffffffffffda RBX: 00007fe8e3af5fa0 RCX: 00007fe8e38ce969 [ 206.543428][T10061] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 206.543441][T10061] RBP: 00007fe8e1f37090 R08: 0000200000000200 R09: 0000000000000000 [ 206.543556][T10061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.543649][T10061] R13: 0000000000000000 R14: 00007fe8e3af5fa0 R15: 00007fff2ed1b398 [ 206.543677][T10061] [ 206.806941][T10068] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.2257'. [ 206.852614][T10062] lo speed is unknown, defaulting to 1000 [ 207.249589][T10076] IPv6: Can't replace route, no match found [ 207.445646][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 207.511214][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 207.582735][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 207.642362][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 207.724761][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 207.733785][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2263'. [ 207.742898][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2263'. [ 207.757000][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 207.824370][T10091] loop1: detected capacity change from 0 to 128 [ 207.866869][T10091] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.872646][T10093] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 207.872646][T10093] program syz.2.2265 not setting count and/or reply_len properly [ 207.904918][T10091] EXT4-fs error (device loop1): __ext4_fill_super:5502: inode #2: comm syz.1.2264: iget: checksum invalid [ 207.930063][T10091] EXT4-fs (loop1): get root inode failed [ 207.935833][T10091] EXT4-fs (loop1): mount failed [ 207.944121][T10093] FAULT_INJECTION: forcing a failure. [ 207.944121][T10093] name failslab, interval 1, probability 0, space 0, times 0 [ 207.956862][T10093] CPU: 0 UID: 0 PID: 10093 Comm: syz.2.2265 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 207.956900][T10093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.956989][T10093] Call Trace: [ 207.956996][T10093] [ 207.957004][T10093] __dump_stack+0x1d/0x30 [ 207.957035][T10093] dump_stack_lvl+0xe8/0x140 [ 207.957055][T10093] dump_stack+0x15/0x1b [ 207.957072][T10093] should_fail_ex+0x265/0x280 [ 207.957114][T10093] should_failslab+0x8c/0xb0 [ 207.957173][T10093] __kmalloc_noprof+0xa5/0x3e0 [ 207.957192][T10093] ? blk_rq_map_user_iov+0x442/0x14a0 [ 207.957226][T10093] blk_rq_map_user_iov+0x442/0x14a0 [ 207.957269][T10093] blk_rq_map_user_io+0x18f/0x260 [ 207.957310][T10093] ? alloc_pages_mpol+0x202/0x250 [ 207.957385][T10093] ? alloc_pages_noprof+0xa9/0x130 [ 207.957416][T10093] ? sg_build_indirect+0x3a5/0x450 [ 207.957460][T10093] sg_common_write+0xb06/0xc30 [ 207.957569][T10093] sg_write+0x6b5/0x750 [ 207.957623][T10093] vfs_writev+0x3eb/0x870 [ 207.957640][T10093] ? __pfx_sg_write+0x10/0x10 [ 207.957728][T10093] do_writev+0xe7/0x210 [ 207.957819][T10093] __x64_sys_writev+0x45/0x50 [ 207.957854][T10093] x64_sys_call+0x2006/0x2fb0 [ 207.957947][T10093] do_syscall_64+0xd0/0x1a0 [ 207.957973][T10093] ? clear_bhb_loop+0x40/0x90 [ 207.957996][T10093] ? clear_bhb_loop+0x40/0x90 [ 207.958024][T10093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.958052][T10093] RIP: 0033:0x7fa4247de969 [ 207.958139][T10093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.958162][T10093] RSP: 002b:00007fa422e47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 207.958192][T10093] RAX: ffffffffffffffda RBX: 00007fa424a05fa0 RCX: 00007fa4247de969 [ 207.958205][T10093] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 207.958221][T10093] RBP: 00007fa422e47090 R08: 0000000000000000 R09: 0000000000000000 [ 207.958238][T10093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.958256][T10093] R13: 0000000000000000 R14: 00007fa424a05fa0 R15: 00007ffc22e75c48 [ 207.958284][T10093] [ 208.185083][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.276356][T10103] loop5: detected capacity change from 0 to 2048 [ 208.280622][T10106] loop4: detected capacity change from 0 to 1024 [ 208.289909][T10106] EXT4-fs: Ignoring removed orlov option [ 208.296025][T10106] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 208.328892][T10103] loop5: p1 < > p4 [ 208.333469][T10106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.346723][T10103] loop5: p4 size 8388608 extends beyond EOD, truncated [ 208.384710][T10103] netlink: 'syz.5.2270': attribute type 1 has an invalid length. [ 208.393389][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.409878][T10103] bond2: entered promiscuous mode [ 208.415478][T10103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.424143][T10103] FAULT_INJECTION: forcing a failure. [ 208.424143][T10103] name failslab, interval 1, probability 0, space 0, times 0 [ 208.436966][T10103] CPU: 1 UID: 0 PID: 10103 Comm: syz.5.2270 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 208.437031][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.437047][T10103] Call Trace: [ 208.437053][T10103] [ 208.437060][T10103] __dump_stack+0x1d/0x30 [ 208.437089][T10103] dump_stack_lvl+0xe8/0x140 [ 208.437116][T10103] dump_stack+0x15/0x1b [ 208.437150][T10103] should_fail_ex+0x265/0x280 [ 208.437248][T10103] ? alloc_netdev_mqs+0x829/0xab0 [ 208.437268][T10103] should_failslab+0x8c/0xb0 [ 208.437299][T10103] __kmalloc_cache_noprof+0x4c/0x320 [ 208.437337][T10103] alloc_netdev_mqs+0x829/0xab0 [ 208.437410][T10103] rtnl_create_link+0x239/0x710 [ 208.437438][T10103] rtnl_newlink_create+0x151/0x630 [ 208.437510][T10103] rtnl_newlink+0xf29/0x12d0 [ 208.437581][T10103] ? nlmon_xmit+0x4f/0x60 [ 208.437648][T10103] ? __pfx_rtnl_newlink+0x10/0x10 [ 208.437683][T10103] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 208.437723][T10103] netlink_rcv_skb+0x123/0x220 [ 208.437801][T10103] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 208.437840][T10103] rtnetlink_rcv+0x1c/0x30 [ 208.437870][T10103] netlink_unicast+0x5a1/0x670 [ 208.437915][T10103] netlink_sendmsg+0x58b/0x6b0 [ 208.437944][T10103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.437987][T10103] __sock_sendmsg+0x145/0x180 [ 208.438070][T10103] ____sys_sendmsg+0x31e/0x4e0 [ 208.438104][T10103] ___sys_sendmsg+0x17b/0x1d0 [ 208.438151][T10103] __x64_sys_sendmsg+0xd4/0x160 [ 208.438186][T10103] x64_sys_call+0x2999/0x2fb0 [ 208.438226][T10103] do_syscall_64+0xd0/0x1a0 [ 208.438316][T10103] ? clear_bhb_loop+0x40/0x90 [ 208.438352][T10103] ? clear_bhb_loop+0x40/0x90 [ 208.438381][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.438409][T10103] RIP: 0033:0x7fe8e38ce969 [ 208.438429][T10103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.438478][T10103] RSP: 002b:00007fe8e1f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.438503][T10103] RAX: ffffffffffffffda RBX: 00007fe8e3af5fa0 RCX: 00007fe8e38ce969 [ 208.438525][T10103] RDX: 000000000000c0b0 RSI: 0000200000000280 RDI: 000000000000000e [ 208.438542][T10103] RBP: 00007fe8e1f37090 R08: 0000000000000000 R09: 0000000000000000 [ 208.438558][T10103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.438573][T10103] R13: 0000000000000000 R14: 00007fe8e3af5fa0 R15: 00007fff2ed1b398 [ 208.438599][T10103] [ 208.775655][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.826250][T10128] 9pnet: Could not find request transport: r [ 208.888707][T10133] loop1: detected capacity change from 0 to 512 [ 208.905726][T10133] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 208.924142][T10133] EXT4-fs (loop1): 1 truncate cleaned up [ 208.933265][T10133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.221213][T10148] lo speed is unknown, defaulting to 1000 [ 209.397193][ T36] page_pool_release_retry() stalled pool shutdown: id 93, 1 inflight 60 sec [ 209.408026][T10156] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 209.408026][T10156] program syz.0.2282 not setting count and/or reply_len properly [ 209.599396][T10155] lo speed is unknown, defaulting to 1000 [ 209.753589][T10167] FAULT_INJECTION: forcing a failure. [ 209.753589][T10167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.766803][T10167] CPU: 1 UID: 0 PID: 10167 Comm: +}[@ Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 209.766845][T10167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.766861][T10167] Call Trace: [ 209.766869][T10167] [ 209.766879][T10167] __dump_stack+0x1d/0x30 [ 209.766908][T10167] dump_stack_lvl+0xe8/0x140 [ 209.766948][T10167] dump_stack+0x15/0x1b [ 209.766970][T10167] should_fail_ex+0x265/0x280 [ 209.767082][T10167] should_fail+0xb/0x20 [ 209.767131][T10167] should_fail_usercopy+0x1a/0x20 [ 209.767230][T10167] _copy_from_user+0x1c/0xb0 [ 209.767271][T10167] ___sys_sendmsg+0xc1/0x1d0 [ 209.767309][T10167] __x64_sys_sendmsg+0xd4/0x160 [ 209.767342][T10167] x64_sys_call+0x2999/0x2fb0 [ 209.767366][T10167] do_syscall_64+0xd0/0x1a0 [ 209.767467][T10167] ? clear_bhb_loop+0x40/0x90 [ 209.767533][T10167] ? clear_bhb_loop+0x40/0x90 [ 209.767561][T10167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.767583][T10167] RIP: 0033:0x7f61e60ce969 [ 209.767599][T10167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.767618][T10167] RSP: 002b:00007f61e4737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.767697][T10167] RAX: ffffffffffffffda RBX: 00007f61e62f5fa0 RCX: 00007f61e60ce969 [ 209.767714][T10167] RDX: 0000000000004004 RSI: 0000200000000000 RDI: 0000000000000003 [ 209.767726][T10167] RBP: 00007f61e4737090 R08: 0000000000000000 R09: 0000000000000000 [ 209.767739][T10167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.767751][T10167] R13: 0000000000000000 R14: 00007f61e62f5fa0 R15: 00007fff4401ceb8 [ 209.767770][T10167] [ 210.557248][T10191] loop5: detected capacity change from 0 to 2048 [ 210.653907][T10201] 9pnet_fd: Insufficient options for proto=fd [ 210.662982][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.672115][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 210.672131][ T29] audit: type=1326 audit(1747862248.532:9540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10200 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8e38ce969 code=0x0 [ 210.713324][T10203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62041 sclass=netlink_route_socket pid=10203 comm=syz.5.2301 [ 210.834049][T10215] lo speed is unknown, defaulting to 1000 [ 211.017228][T10207] __nla_validate_parse: 21 callbacks suppressed [ 211.017306][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 211.038745][T10205] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 211.048816][T10205] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 211.057726][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 211.203562][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 211.243694][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 211.265085][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 211.274250][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 211.304993][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 211.314105][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 211.370422][ T29] audit: type=1326 audit(1747862249.242:9541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10229 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 211.394034][ T29] audit: type=1326 audit(1747862249.242:9542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10229 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 211.419770][ T29] audit: type=1326 audit(1747862249.242:9543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10229 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 211.443497][ T29] audit: type=1326 audit(1747862249.252:9544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10229 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 211.467074][ T29] audit: type=1326 audit(1747862249.252:9545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10229 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 211.490672][ T29] audit: type=1326 audit(1747862249.252:9546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10229 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 211.514405][ T29] audit: type=1326 audit(1747862249.262:9547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10229 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f973504e9a3 code=0x7ffc0000 [ 211.537759][ T29] audit: type=1326 audit(1747862249.262:9548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10229 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f973504e9a3 code=0x7ffc0000 [ 211.561179][ T29] audit: type=1326 audit(1747862249.262:9549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10229 comm="syz.1.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973504e969 code=0x7ffc0000 [ 211.730136][T10245] loop1: detected capacity change from 0 to 512 [ 211.767923][T10245] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 211.821942][T10246] lo speed is unknown, defaulting to 1000 [ 212.125467][T10251] xt_hashlimit: size too large, truncated to 1048576 [ 212.133653][T10245] EXT4-fs (loop1): 1 truncate cleaned up [ 212.153577][T10245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.465373][T10259] lo speed is unknown, defaulting to 1000 [ 213.070358][T10291] loop5: detected capacity change from 0 to 512 [ 213.140633][T10291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.202803][T10291] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.238089][T10295] lo speed is unknown, defaulting to 1000 [ 213.415549][T10296] loop4: detected capacity change from 0 to 512 [ 213.423876][T10296] EXT4-fs (loop4): bad s_min_extra_isize: 65528 [ 213.612517][T10303] xt_hashlimit: size too large, truncated to 1048576 [ 213.775617][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.825109][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.053671][T10326] loop5: detected capacity change from 0 to 1024 [ 214.061885][T10326] EXT4-fs: Ignoring removed orlov option [ 214.068058][T10326] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 214.084381][T10328] loop1: detected capacity change from 0 to 1024 [ 214.091518][T10328] EXT4-fs: Ignoring removed orlov option [ 214.098499][T10328] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 214.108857][T10321] FAULT_INJECTION: forcing a failure. [ 214.108857][T10321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.122001][T10321] CPU: 1 UID: 0 PID: 10321 Comm: syz.2.2328 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 214.122106][T10321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.122120][T10321] Call Trace: [ 214.122129][T10321] [ 214.122138][T10321] __dump_stack+0x1d/0x30 [ 214.122167][T10321] dump_stack_lvl+0xe8/0x140 [ 214.122192][T10321] dump_stack+0x15/0x1b [ 214.122246][T10321] should_fail_ex+0x265/0x280 [ 214.122281][T10321] should_fail+0xb/0x20 [ 214.122363][T10321] should_fail_usercopy+0x1a/0x20 [ 214.122395][T10321] _copy_to_iter+0xcf/0xdd0 [ 214.122427][T10321] ? chacha_block_generic+0x245/0x270 [ 214.122456][T10321] get_random_bytes_user+0x12d/0x290 [ 214.122575][T10321] ? import_ubuf+0xe8/0x120 [ 214.122602][T10321] __x64_sys_getrandom+0xcf/0x1a0 [ 214.122717][T10321] x64_sys_call+0x2bb4/0x2fb0 [ 214.122799][T10321] do_syscall_64+0xd0/0x1a0 [ 214.122824][T10321] ? clear_bhb_loop+0x40/0x90 [ 214.122917][T10321] ? clear_bhb_loop+0x40/0x90 [ 214.122946][T10321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.122992][T10321] RIP: 0033:0x7fa4247de969 [ 214.123008][T10321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.123061][T10321] RSP: 002b:00007fa422e26038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 214.123080][T10321] RAX: ffffffffffffffda RBX: 00007fa424a06080 RCX: 00007fa4247de969 [ 214.123095][T10321] RDX: 0000000000000002 RSI: fffffffffffffdde RDI: 0000200000000040 [ 214.123171][T10321] RBP: 00007fa422e26090 R08: 0000000000000000 R09: 0000000000000000 [ 214.123186][T10321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.123202][T10321] R13: 0000000000000000 R14: 00007fa424a06080 R15: 00007ffc22e75c48 [ 214.123226][T10321] [ 214.309313][T10326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.322370][T10328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.398638][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.410463][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.444180][T10343] lo speed is unknown, defaulting to 1000 [ 214.809709][T10353] xt_hashlimit: size too large, truncated to 1048576 [ 215.575843][T10398] xt_hashlimit: size too large, truncated to 1048576 [ 215.677905][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 215.678021][ T29] audit: type=1326 audit(1747862253.522:9785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 215.707170][ T29] audit: type=1326 audit(1747862253.532:9786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 215.777826][ T29] audit: type=1326 audit(1747862253.582:9787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 215.801004][ T29] audit: type=1326 audit(1747862253.582:9788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 215.824152][ T29] audit: type=1326 audit(1747862253.632:9789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 215.847078][ T29] audit: type=1326 audit(1747862253.632:9790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 215.870248][ T29] audit: type=1326 audit(1747862253.632:9791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 215.893185][ T29] audit: type=1326 audit(1747862253.642:9792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 215.916026][ T29] audit: type=1326 audit(1747862253.642:9793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 215.938958][ T29] audit: type=1326 audit(1747862253.642:9794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4247de969 code=0x7ffc0000 [ 216.245067][T10430] __nla_validate_parse: 47 callbacks suppressed [ 216.245089][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'. [ 216.260477][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'. [ 216.289583][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'. [ 216.306905][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'. [ 216.316603][T10432] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.2362'. [ 216.348894][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'. [ 216.368807][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'. [ 216.507103][T10442] netlink: 'syz.2.2366': attribute type 3 has an invalid length. [ 216.686140][T10459] loop5: detected capacity change from 0 to 512 [ 216.693389][T10459] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.705080][T10459] EXT4-fs (loop5): 1 truncate cleaned up [ 216.712912][T10459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.771965][T10467] loop4: detected capacity change from 0 to 1024 [ 216.779133][T10467] EXT4-fs: Ignoring removed orlov option [ 216.785302][T10467] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 216.798732][T10467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.847216][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.974533][T10476] lo speed is unknown, defaulting to 1000 [ 217.255813][T10482] wireguard0: entered promiscuous mode [ 217.663441][T10498] lo speed is unknown, defaulting to 1000 [ 217.839917][T10500] loop4: detected capacity change from 0 to 512 [ 217.847900][T10500] EXT4-fs (loop4): bad s_min_extra_isize: 65528 [ 218.005596][ T3456] ================================================================== [ 218.013741][ T3456] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 218.021930][ T3456] [ 218.024272][ T3456] read-write to 0xffff888100631e70 of 8 bytes by task 10500 on cpu 0: [ 218.032447][ T3456] __filemap_remove_folio+0x1bc/0x2a0 [ 218.037853][ T3456] __remove_mapping+0x338/0x460 [ 218.042723][ T3456] remove_mapping+0x22/0x90 [ 218.047246][ T3456] mapping_try_invalidate+0x26a/0x3f0 [ 218.052636][ T3456] invalidate_mapping_pages+0x27/0x40 [ 218.058020][ T3456] invalidate_bdev+0x58/0x70 [ 218.062633][ T3456] ext4_fill_super+0x2a6e/0x34e0 [ 218.067584][ T3456] get_tree_bdev_flags+0x28e/0x300 [ 218.072717][ T3456] get_tree_bdev+0x1f/0x30 [ 218.077145][ T3456] ext4_get_tree+0x1c/0x30 [ 218.081581][ T3456] vfs_get_tree+0x57/0x1d0 [ 218.085998][ T3456] do_new_mount+0x207/0x680 [ 218.090504][ T3456] path_mount+0x4a4/0xb20 [ 218.094833][ T3456] __se_sys_mount+0x28f/0x2e0 [ 218.099526][ T3456] __x64_sys_mount+0x67/0x80 [ 218.104128][ T3456] x64_sys_call+0xd36/0x2fb0 [ 218.108723][ T3456] do_syscall_64+0xd0/0x1a0 [ 218.113238][ T3456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.119140][ T3456] [ 218.121468][ T3456] read to 0xffff888100631e70 of 8 bytes by task 3456 on cpu 1: [ 218.129016][ T3456] nr_blockdev_pages+0x7e/0xd0 [ 218.133794][ T3456] si_meminfo+0x87/0xd0 [ 218.137972][ T3456] update_defense_level+0x47/0x5c0 [ 218.143100][ T3456] defense_work_handler+0x1f/0x80 [ 218.148131][ T3456] process_scheduled_works+0x4cb/0x9d0 [ 218.153611][ T3456] worker_thread+0x582/0x770 [ 218.158220][ T3456] kthread+0x486/0x510 [ 218.162299][ T3456] ret_from_fork+0x4b/0x60 [ 218.166709][ T3456] ret_from_fork_asm+0x1a/0x30 [ 218.171473][ T3456] [ 218.173789][ T3456] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 218.180889][ T3456] [ 218.183206][ T3456] Reported by Kernel Concurrency Sanitizer on: [ 218.189352][ T3456] CPU: 1 UID: 0 PID: 3456 Comm: kworker/1:6 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 218.201858][ T3456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.211930][ T3456] Workqueue: events_long defense_work_handler [ 218.218016][ T3456] ================================================================== [ 218.433165][ T6893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.