last executing test programs: 1m7.575895787s ago: executing program 0 (id=1728): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000140), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c480000", @ANYRES16=0x0, @ANYBLOB="010000000008000000001200000007"], 0x1c}}, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}}, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000280)={0x2a, 0x4, 0x8000}, 0xc) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a0) unshare(0x42000000) 1m7.36761304s ago: executing program 0 (id=1736): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = getpid() (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) r6 = syz_pidfd_open(r2, 0x0) setns(r6, 0x80) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r1) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000000000000000000d7d0d7634cd865fa566c3c6a144ab9a9beb5ce4b7813eb821b1c0c56def393af1c24894c963a2f539cd653fe358f2c9ec7870d154564f14e8d6fd9bd8deac0ea98dda4e5d3dfc3acd59b3c048b70b2ccf8217b99449d90c522933f40bffe603cb41a4b9c30e5b5ace3642ada84b84fa67ace65003a27744029f3c8a654665d421c6bd5100d21d56168bf74dc599662501339f057e45bc4b93bd69aed017889e2749ea4ba050e55c094e71ae8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shmctl$IPC_RMID(0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1b}, 0x94) (async) process_madvise(r7, &(0x7f0000000800)=[{&(0x7f0000000200)="3802c96f819dc37781179cee8ae36c9dd5475466a4e74787e7", 0x19}, {&(0x7f00000003c0)="30f095c5ba58829befb19fb3829ce5eb92efd66b57e627e1657ee968db800bf67e43736cffa0acc5f94b89289f024458e9dba37d0ed66212eb612fb77b9c0568ee26eab4a1777cf6f37956b9146ddc96c918e5decbc8168b0b14840fe7bc66bd8c0addc46254ddf2083c8868af7c8d9c4e11db98510d9005b4322b1d24", 0x7d}, {&(0x7f0000000680)="7808da377245e7f1684078399d45e183d339e090a33fbd842fab3c009d61e51dba2d224276c7b208af906d41bee1715372a3f61f1cfd109c8606aad74e77a6b16b3d39cc2d1d9a3e70439b71ecbffdef99d1c35e07f31798a778450780682c6bd591e3f66b36691f743a9df882fae3a373c7f00bd56fd9a5468f827c2d7d2dc257864776895b1a83328bc28e6e84df0650ef5da1d2366969c31aeab225c92985ad3f842bc87ec9a81153c6b4", 0xac}, {&(0x7f0000000740)="f966797ccd20778fd13f98551bf51c8ee5c5b58dd90e5422e386e1ea1cdbcbca6fbf9ec3ba1b381b7dc04df0ec9739a7a0cea1de56925d42bddeb5dce1e3952b8fd72ce1ad9cc6a1b5580293f4a41990d755f7d090669d85a3f1374d472a7bedb5402724fec0bedb2221bcdc4e8c9b7a71b07101689eb98521767d39abda5beed0dda4c5ffe75c9b92cc5b6509", 0x8d}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f00000004c0)}], 0x6, 0x11, 0x0) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x5aa) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) (async) creat(&(0x7f0000000380)='./file0\x00', 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000040)=0x11, 0x4) 1m7.314548121s ago: executing program 0 (id=1738): r0 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0800000001000000ffffff7f04000000000a0000", @ANYRES32=0x1, @ANYBLOB="8300e47337c41d", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02000000050000000300"/25], 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000000840)=""/120, 0x78}], 0x2, &(0x7f00000008c0)=""/210, 0xd2}, 0x60) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000580)=@newtaction={0x1f0, 0x30, 0x216822a75a8bdd29, 0x70bd25, 0x0, {}, [{0x1dc, 0x1, [@m_sample={0x0, 0x5, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x0, 0x3, 0x7ff}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0x2, 0x8, 0x8, 0x2, 0x5}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP, @TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0x3, 0x3, 0x6, 0x8}}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0x9, 0x6, 0x0, 0x2, 0x5}}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0x8000, 0x8001, 0x6, 0x9, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0x7, 0x8, 0xffffffffffffffff, 0x1ff, 0x4937}}]}, {0x0, 0x6, "15fe6ad0eff89a1a0e1981e3d29ce91eca9b2c49ebdb4bef475964a9b6e6c6e78493f5f905eb3c0c1f30754324b5986e685c292bf1a4a5d0394fa8c67235ed1ab0689be3a2a7071ce03e45be42ca4f1dd89b39efead98ae6eb10989f7b599748cd66714b"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xffffffffffffff92}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x144, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x115, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1f0}}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) socket(0x28, 0x800, 0x0) 1m7.286960721s ago: executing program 0 (id=1741): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@min_batch_time}, {@noload}, {@grpquota}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000040000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1, 0x0, 0x9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000a40)='svcsock_new_socket\x00', r1, 0x0, 0xfffffffffffffa4a}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000017ab418fd693e93645162f383b0ce300010081a000fe000000009500000000000000"], &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069112855000000008510000002000000850000000500000095000000000000009500a5d0a2000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') r3 = socket$key(0xf, 0x3, 0x2) ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000000a00)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r4, 0x0, 0x0, 0x712, 0x0, 0x0) shutdown(r4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000001c0)="040007000300", 0x0, 0x0, 0x2, 0x0, 0x0}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000ac0)={0x0, 0x18, 0xfa00, {0xffffffffff7fffff, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x1080000001}}}, 0xfffffeb8) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) 1m7.221576633s ago: executing program 0 (id=1743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x4, &(0x7f0000000440)=""/223, 0xdf) 1m7.025186946s ago: executing program 0 (id=1749): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48c0}, 0x4040015) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0xe0, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xa4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x84, 0x1, [@m_ctinfo={0x80, 0x1b, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m7.004653076s ago: executing program 32 (id=1749): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48c0}, 0x4040015) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0xe0, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xa4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x84, 0x1, [@m_ctinfo={0x80, 0x1b, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 42.102657462s ago: executing program 3 (id=2361): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24060400) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') lseek(r2, 0xf3, 0x7ffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0xfff, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x9, 0x4, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) 42.071438552s ago: executing program 3 (id=2363): mount(0x0, 0x0, 0x0, 0xc2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x4, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 42.006335103s ago: executing program 3 (id=2365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 41.959278884s ago: executing program 3 (id=2366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x10000000000ac6}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r6, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x10000}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="8fa25bfc83f54cce79168961c7c2dfd3af9e5a31f2e53ff05ce32b40dd981da3fb83f169b7c7a3a8d1f4e0da092a992c5e6c610c78ae50f34ad99e3c643f36009326349fa4ee3e659c666766404bddb5a198c273bbce285d3dbd4257ebe2bc21379d692e904e0ebc755ad3583cc233576b9b9ef976d934f58059fd13901aa80cbb1b95ce7cb46112900bc71e3359f8d2a1f0f8a1c65a5eb78c836396b2934308d139553d75b355563d6f8ce8c0", @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f2, &(0x7f0000000b00)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji3pNDU1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpO4CU0iJ8PwmZw9x7eu9tB3LuhGHrzuvH+aylZfWyBKNKAiIi2yKjEhRPwD0GnTgiu72Qi0PfPv5/6+69G6l0empWqenU3KWkUmpk7N2TZzG32/qgbI4+2Pqa/LL59+a/Wz/nHuUslbNUoVhWupovfi7r86ahFnNWXlNqxjR0y1C5gmWU6u3FenvWLC4tVZVeWByOL5UMy1J6oaryRlWVi6pcqqrQQz1XUJqmqeG44CCZldlZPdVh8kKXJ4NjUiql9JCIxNpaMit9mRAAAOir1vo/KKqb9f/quY3y0O21Ebf+X4/41f+XP9Vfq6n+j4qIb/3vje9b/+uHq//bK6Kz5Uj1P06GsUjbqUAjrDWWUnrc/fl1vLy/Ou4E1P8AAAAAAAAAAAAAAAAAAAAAAPwJtm07Ydt2wjt6X4MiEhUR73uf1JCIXO3DlNFFR/j8cQo0HtwLj4iYryqZSqZ+dDtsiIgphoxLQn4414OrFntPHqmaUXlvLrv5y5VMyGlJZSXn5E9IYkBa8217+np6akLVNecPSHx3flIS8pd/frItf3C5konIhfO78jVJyIcFKYopi848GvnPJ5S6djPdMn7M6QcAAAAAwGmgqR2++3dN26u9nr+zv269PxBq7K/Hfff3Yfkv3N+1AwAAAABwVljVp3ndNI3SPkFMDu7TeRA+plf2Vvi7Wd7fMhzfSvcJvMGbmqLuya6/LYFDvC17BEHpJGusthp11FV4t4326iMzk737BJum8c+bt9+7N8SVtegBK+08CO1/AQz07BcQAAAAgJ5pFP3emcn+TggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDOoF/8mrd9rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6KXwEAAP//ziYEEA==") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 41.838029456s ago: executing program 3 (id=2369): r0 = openat$rfkill(0xffffff9c, 0x0, 0xc81, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0800000001000000ffffff7f04000000000a0000", @ANYRES32=0x1, @ANYBLOB="8300e47337c41d", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02000000050000000300"/25], 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000000840)=""/120, 0x78}], 0x2, &(0x7f00000008c0)=""/210, 0xd2}, 0x60) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000580)=@newtaction={0x1f0, 0x30, 0x216822a75a8bdd29, 0x70bd25, 0x0, {}, [{0x1dc, 0x1, [@m_sample={0x0, 0x5, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x0, 0x3, 0x7ff}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0x2, 0x8, 0x8, 0x2, 0x5}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP, @TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0x3, 0x3, 0x6, 0x8}}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0x9, 0x6, 0x0, 0x2, 0x5}}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0x8000, 0x8001, 0x6, 0x9, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0x7, 0x8, 0xffffffffffffffff, 0x1ff, 0x4937}}]}, {0x0, 0x6, "15fe6ad0eff89a1a0e1981e3d29ce91eca9b2c49ebdb4bef475964a9b6e6c6e78493f5f905eb3c0c1f30754324b5986e685c292bf1a4a5d0394fa8c67235ed1ab0689be3a2a7071ce03e45be42ca4f1dd89b39efead98ae6eb10989f7b599748cd66714b"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xffffffffffffff92}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x144, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x115, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1f0}}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) socket(0x28, 0x800, 0x0) 41.623476219s ago: executing program 3 (id=2370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000700f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES64], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) syslog(0xb, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x104, 0x3}) listen(r1, 0x5) r3 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000440)) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x3, 0x2}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) io_setup(0x3c, &(0x7f0000000180)) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) setitimer(0x0, &(0x7f00000002c0), &(0x7f0000000380)) 41.623046839s ago: executing program 33 (id=2370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000700f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES64], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) syslog(0xb, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x104, 0x3}) listen(r1, 0x5) r3 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000440)) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x3, 0x2}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) io_setup(0x3c, &(0x7f0000000180)) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) setitimer(0x0, &(0x7f00000002c0), &(0x7f0000000380)) 3.595645068s ago: executing program 1 (id=3302): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000980)='$', 0x4b9ab3bf308af5f7, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {}, {0x9, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x48, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) sync() syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) write$selinux_load(r9, &(0x7f0000000000)=ANY=[], 0x44f0) r11 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r11, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 3.364491831s ago: executing program 1 (id=3307): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2712, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x886f312590a62a03}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, r2}, 0x94) socket(0x840000000002, 0x3, 0x100) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000580)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) 3.087857655s ago: executing program 4 (id=3314): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2712, 0x0, &(0x7f00000000c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x886f312590a62a03}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x19, 0x20000000000003c3, &(0x7f0000000440)=ANY=[@ANYBLOB="446357d9649d8a7b0bef8e7f1800000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000000e3800000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, r2}, 0x94) socket(0x840000000002, 0x3, 0x100) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000580)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3.087192165s ago: executing program 1 (id=3315): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_io_uring_setup(0x20fe, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x80, 0x20, 0x0, 0x10000, {{0x16, 0x4, 0x0, 0x6, 0x58, 0x66, 0x0, 0xed, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@end, @ra={0x94, 0x4}, @generic={0x44, 0x3, "8d"}, @lsrr={0x83, 0x1b, 0x31, [@loopback, @private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback, @local]}, @ssrr={0x89, 0x1f, 0x59, [@multicast2, @multicast2, @broadcast, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000480)={@dev, @local}, &(0x7f0000000580)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x7f, 0x9, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x8, 0x7, 0xf512, 0x5}}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000680)={@empty}, &(0x7f00000006c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x4, 0xffffffff, 0x41, @local, @private0, 0x1, 0x80, 0x9, 0x5}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d40)={r2, 0x58, &(0x7f0000001cc0)}, 0x10) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001d80)={0x0, @empty, @remote}, &(0x7f0000001dc0)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005a00)={r0, 0xe0, &(0x7f0000005900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000005740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000005780)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000057c0)=[0x0], 0x0, 0xba, &(0x7f0000005800)=[{}], 0x8, 0x10, &(0x7f0000005840), &(0x7f0000005880), 0x8, 0x40, 0x8, 0x8, &(0x7f00000058c0)}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0x2}, 0x18) close(r8) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7}, 0x14) 3.059063146s ago: executing program 4 (id=3316): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r5, r5, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_clone3(&(0x7f0000001f40)={0x804800, &(0x7f0000000500), &(0x7f00000005c0)=0x0, &(0x7f0000000e80), {0x2}, &(0x7f0000000ec0)=""/4096, 0x1000, &(0x7f0000001ec0), &(0x7f0000001f00)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) setresuid(0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setregid(r10, r11) r12 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001fc0), 0x400400, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r13, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r13, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r13, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) sendmsg$netlink(r0, &(0x7f0000002140)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc, &(0x7f0000000480)=[{&(0x7f00000002c0)={0xbc, 0x27, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x23, 0xd5, 0x0, 0x1, [@generic="b79edbff43f77303773ff53c8612b2ac1bdcfe5b08490a", @typed={0x8, 0x143, 0x0, 0x0, @pid=r4}]}, @generic="0de5f771ad4e2814a320f9448020a71120e257baa1c11ca9269d673c85759e18d6f980cdc70d6c52db2ada3f4adae614a041490aeeb5952275a34dc83a195e9399f1c93637af5fd109ebeb69eb26932ef136908abf6baedf8117b39c5c498e35bbc2528781fe34d125692b5385e8c0b79dfe6bd9007d442c962fe9e7ae4bbd53eb281c158fd10043"]}, 0xbc}, {&(0x7f0000000380)={0xe0, 0x1b, 0x8, 0xffff, 0x25dfdbff, "", [@nested={0xcd, 0x87, 0x0, 0x1, [@generic="e8b6c9eeaae9276f6aad8bd3cd1379e7c0267abb7df83a6656f569061029b02c1b85fcba117c86713c498be646da8983805c25ba3ff9a62c267ed3154318a2588fa86e35ce878c0ef82e1b4cc131658ba0aaf5c094105174926d86ec5efab964182bb7277b971b2410f02b26f29c351ba16d993623c03ed89e27fcd7816691cc8cb6c7bb0bda77cdaffa830595ae0aace639cea3ac9ddbbf01d0d55d7e0b64edd93351237a38fc915a1bd9ffc17ccdc3f6cdb4582d50b916e0", @typed={0x8, 0x6a, 0x0, 0x0, @u32=0xfddf}, @generic, @typed={0x6, 0x142, 0x0, 0x0, @str='.\x00'}]}]}, 0xe0}, {&(0x7f0000000680)={0x544, 0x1d, 0x100, 0x70bd27, 0x25dfdbfb, "", [@nested={0x11e, 0x13b, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xa0, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0xfb, 0x0, 0x0, @uid=r5}, @generic="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", @nested={0x4, 0xe2}]}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@empty}, @nested={0x92, 0xfb, 0x0, 0x1, [@generic="b4a35f0a5a20b5b1edbdbaf46deae84e5c83f79de4ae90397dac420eedf1f82526be20c15586b05ab3b64de57f778d94b0533c64b8da2572e5c220b2e99192e1793c62721c43c24dcbda38f33d3b33946019f8b95d05f2f52a3327c3c41db9fe59e065dc1e8fdf684107b24d683058c46493ad4394f76fb2b44d78586c1e9c14560b0bf0934734eb2e0a40c41c40"]}, @nested={0x246, 0x25, 0x0, 0x1, [@generic="6bb97e82bfc66dc2f95918f1eb971e1601c194e1f0674435851686eb12088e7d0c3f0c3fef4a9ea45c3cec18318d58f3e38f22530d11f32929e5179ba6c8716526b31fcbb2ce71a7ed2857f426b4618787f8fb0b87c2d53671f7458f1aa6cdae5536bb3a5f830e7c210ca0f9b5c8df839aaec4bd5e8a801c02", @generic="ff0bc0abeb78733f7e486c88b650265ce017479f33817fd9a84c7688f0ea6ae2b4e9651e5f372c16b111fcf5c3d674e4a5566931c387184133a649936a242c54062b5833a2ebab675a04a6889b08c057250465b4da29", @generic="befe21bcab6e260dc3ca1c14d97249d82a3b622717df8d270cc66b1abbfa0ce1981d6fff70e119760ca08e57ef7c5f5cba15ba710112bc16e0d46367b7239cee4a3eed429ba5722d8373d0ff98ffb4f3a5601ae66f9082b23315b843eaeaa1db9ba48597b88ab87af46ca7babbfa413675d4afec0bf9f21497b3989441ce8142370b65e7f481f164be45dee8e6238e9915bf530937b2a2ea84b4149e7130e0a11c251aa2af01409b3e6eb10d74290400c057d198e7f95d3f3cbf84e6123dfdb420dc5b7297b4fef4768ac3505ee72ffab6385baac33691aac5d75096dbfb14edf75f47c4cd897534898a27bf", @generic="4b8dc6fe4458e1e74973164082ff6ea3043fb337c218b4036513f55dda00e8ac2a4145ae7b7061bb0b8c3a57b1c42caead900460d50dda003f119e584d94f75c7ffedbe0bdcb4a190db447d322b8087518b9c007af9b343a80dafe8d62c19788790cda1e5584a358c096b3cc94632cadf7879dcfcd9abd", @typed={0x8, 0x93, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x143}, @nested={0x4, 0x1f}]}, @nested={0x12d, 0xfc, 0x0, 0x1, [@typed={0xcb, 0x7a, 0x0, 0x0, @binary="13f5dd4b446a9023c4ab7801c154abb0202a3fc082568ec832cef332514030c83715f3ea80b6af839f25b0a1e63806deefcc25c7ca84ca8cdbb356fe11bc4c6a6ff1d0edaa52f052513878732d8651155b98fc74805465c73e3d140c25d583358902cbaac9c3b0aee0f20a1f01b9f53fedeb71c76987e974951badb328de5ada91f9a1ca3599e55216a470ab9a8fdddaddbfa985c8374af28056a84262e066d52b02c8914604e920514565e7eabfce1f637abf425b0f70f35a3ee58fd8b7ef2a8347772d96c9c3"}, @typed={0xc, 0x125, 0x0, 0x0, @u64=0x6}, @typed={0xb, 0x128, 0x0, 0x0, @str='batadv\x00'}, @nested={0x4, 0x99}, @generic="94ee35381f79d574b0b2d7869c3da0657213f0fc53d4df9f31bab956f831b4fa12d5f7c13045ab3f4d8cbbcfc4583be04742263a9a", @nested={0x4, 0x66}, @typed={0x8, 0x74, 0x0, 0x0, @uid}]}]}, 0x544}, {&(0x7f0000000c00)={0xec, 0x1d, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xba, 0x11a, 0x0, 0x1, [@generic="8f0613f6f2f30dc7cc3a003ce7690ca5710487c689d44732fd75f8cf77fddc7cc141768bf2c8d51ff14a96c0c02609e1d002d90bde20b9c9c7d69ee6d06ac45ba56ae92d7124a22df60473c474586e33436ad9a09b54c58c26a8072b7eb73d57e2638cd2b55a95dc92bfd2c1ac67f5b4f9d800642325d469909cad936cedee1ef14844a5ae5f21da0103c4396f15c933c5823b6dfd29bfb1a4f2c144be32aaa3c8e8380b4c28425626c5cc7103eef54872fd", @nested={0x4, 0x5e}]}, @typed={0xb, 0x135, 0x0, 0x0, @str='batadv\x00'}, @nested={0x14, 0xfd, 0x0, 0x1, [@typed={0xc, 0x5f, 0x0, 0x0, @u64=0x87}, @nested={0x4, 0xf6}]}]}, 0xec}, {&(0x7f0000000d00)={0x164, 0x3a, 0x100, 0x7, 0x25dfdbfb, "", [@generic="0ab62d50f1367ba535dc50654b21af764faa47938be68ac4499f45af5dfffd3b1606a6860f95e0ec63928b874dc7c374e45c5e5f291a5d956a977eeee85a8f06215b22c4b33195f68fc2bf8e5a422327e9f2714167af75041ba4ca09c54103103816d93ed68f26ee66af9586cde4b152d608b0176408281e63351174b794adfa590c7d7165f044a0ed486eb56cf5dabd5c6c6eeee510245b2d1b0d72f456198f80b5dfc48577c390da80ef88ff3882e2ffe7838f197fb550eb8cf3fb435439", @typed={0x26, 0x124, 0x0, 0x0, @binary="b9623fc8441f73967aac26db02aa899adac000e61d5a210bdc932cba907c4eec3aae"}, @nested={0x10, 0x2f, 0x0, 0x1, [@typed={0x4, 0x109}, @nested={0x4, 0xfe}, @nested={0x4, 0x5d}]}, @generic="48db5fcf9b55c07caa0030a0a60e44df3a89a54347953be57603ea7054521c282562a497bad55166347825e3e94e8879c7f304ba8f05581ea0e92b68fd332f8494f5653b8bc9ec4ae4e03af0e51df648f0b63c4e7c5737a80cf840f2de"]}, 0x164}], 0x5, &(0x7f0000002040)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, r1, r1, r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r0, r6, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, r11}}}, @rights={{0x20, 0x1, 0x1, [r12, r1, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0xd8, 0x20000080}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.154568329s ago: executing program 4 (id=3327): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.576674587s ago: executing program 6 (id=3338): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000240)={0x2, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='mm_page_alloc\x00', r0, 0x0, 0x7}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bind$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.252088752s ago: executing program 4 (id=3344): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.214313643s ago: executing program 1 (id=3346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2], 0x0, 0x40, 0x0, 0x0, 0x1e00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18050000000000000000000000000000b70800000000022f7b8af8ff00040000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070450e5d16da96f0000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TCSETSW(r8, 0x5403, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='fib6_table_lookup\x00', r7, 0x0, 0x4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46024, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x8}, 0x4000, 0xfffffffffffffffb, 0x0, 0x0, 0x80000001, 0x0, 0x39, 0x0, 0x1fd}, 0x0, 0xb, 0xffffffffffffffff, 0x9) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(r9, 0xffffffffffffffff, 0x400000000000000) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x89f1, &(0x7f0000000080)) 1.027553386s ago: executing program 5 (id=3347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4, 0x0, 0x800000000}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) 1.026314876s ago: executing program 5 (id=3348): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) mbind(&(0x7f0000978000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000000000000, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}}, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010471bc30b00000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r4, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 777.787759ms ago: executing program 1 (id=3350): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000980)='$', 0x4b9ab3bf308af5f7, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {}, {0x9, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000000805000001000000000000006ae6cf7fe1bbbf137fe5b4c38430e1895dbda5978316866420e9b9bd81a8e17c7c971d8f0c3a494155700388c4abe86cfb82445b07aec19bfd03803198e4a094ce7427fcc245941b4c331cc006940245c0ba2fd397634dee66693c321e9e55ea3abb0b23ffd093159a9b87686d7c1d5da602247c90cd67fcbeb539ae6028e4b1facdb44b69c8f3ac72acae465a4454b36c902a8032fbc414f7d253e93dcc95ada2fa13542a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sync() syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x44f0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r8, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 669.976381ms ago: executing program 2 (id=3352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000380)) fsmount(0xffffffffffffffff, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) signalfd(r3, &(0x7f0000000180)={[0x4]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r4 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000540)=""/68, 0x44}, {&(0x7f00000005c0)=""/180, 0xb4}, {&(0x7f00000007c0)=""/138, 0x8a}, {&(0x7f0000000880)=""/125, 0x7d}, {&(0x7f0000000900)=""/252, 0xfc}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/143, 0x8f}], 0x9) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 582.144032ms ago: executing program 5 (id=3353): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000540)=""/239, 0xef) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r2 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) ptrace(0x8, r2) ptrace(0x4207, r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) pwritev(r1, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000280)="580bc70f4db4297316c17c2c0e0d54d3c52fbb3a57bb12c8afec2fbde602bd95dde038d7146d8813bdb1ad571d1ad84f14dcb746f1234e4cfde5a7d1eb9934ad1ef7a2935cf0d95fdafba102b28cd4a307b4e0529f75c364e075db12e3c3244e0d56f2538b2c3f9fd8bbf56d1668c2273661044663f0d8c860731e29cadef296b17f4e2a83f114", 0x87}, {&(0x7f0000000380)}], 0x3, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x10000}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0077efebe468df0ad6b13fc639560000180100002020702500000000002020207b1af8ff00000000bf9400000000000007010000f8ffffffb702000005000000b7030000b800000000850000007200000095cea76ad1ca21af264d144e020d3f1248899804576b189ca051861f10292eee74eddb8f0021f33bf064fd98e3b5c64873830705e7ae972084f902000000000000001c480de40f00867f96ef8daee22eb9b4e69e0476eeb6c4e9ca9ed4230d90b160c7bddd111942cb9696042a00"/225], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32], 0x50}, 0x1, 0xba01}, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e7465720004"], 0x118}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a3100"], 0xe8}, 0x1, 0x0, 0x0, 0x40040080}, 0x0) setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f0000000b80)=0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='f2fs_readdir\x00', r3, 0x0, 0x6}, 0x1b) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000140)='f2fs_direct_IO_enter\x00', r4, 0x0, 0x4d8}, 0x18) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 558.403602ms ago: executing program 2 (id=3354): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@min_batch_time}, {@noload}, {@grpquota}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x78}, 0x1, 0x7}, 0x0) 436.517674ms ago: executing program 1 (id=3355): socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) setresuid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 435.408224ms ago: executing program 6 (id=3356): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000919e9e44fecedd6bc9fd213938b749b821c6210e055020f7c807b6ed02b51d9e0a31d92113789bd1a01519c9ce2ed37fc1b5ae8b6b36ff39b423964659c52f64c02c1087a7d887758f2516d5a098285555a5026fa38244855b3e0aad203f7e4c5b6424b4c775aa6d237746", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x400) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_getevents(0x0, 0x7f, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 426.446824ms ago: executing program 4 (id=3357): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000980)='$', 0x4b9ab3bf308af5f7, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {}, {0x9, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x48, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) sync() syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) write$selinux_load(r9, &(0x7f0000000000)=ANY=[], 0x44f0) r11 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r11, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 417.116605ms ago: executing program 2 (id=3358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 349.623266ms ago: executing program 5 (id=3359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r3}}, 0x18) 332.698736ms ago: executing program 6 (id=3360): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000016000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffde}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 321.879426ms ago: executing program 5 (id=3361): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000980)='$', 0x4b9ab3bf308af5f7, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {}, {0x9, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000000805000001000000000000006ae6cf7fe1bbbf137fe5b4c38430e1895dbda5978316866420e9b9bd81a8e17c7c971d8f0c3a494155700388c4abe86cfb82445b07aec19bfd03803198e4a094ce7427fcc245941b4c331cc006940245c0ba2fd397634dee66693c321e9e55ea3abb0b23ffd093159a9b87686d7c1d5da602247c90cd67fcbeb539ae6028e4b1facdb44b69c8f3ac72acae465a4454b36c902a8032fbc414f7d253e93dcc95ada2fa13542a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sync() syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x44f0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r8, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 302.887156ms ago: executing program 2 (id=3362): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) 253.757647ms ago: executing program 2 (id=3363): r0 = socket(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x1, 0x10000, 0xfffffffa, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x58}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14200000000a030000000000000000000700000030fdffff090a01040000000000000000"], 0x58}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x4e22, @private=0xa010100}}}, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES16=0x0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000409) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28f72148a2f889f6, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r9 = dup(r8) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) 229.711108ms ago: executing program 6 (id=3364): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) mbind(&(0x7f0000978000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000000000000, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}}, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010471bc30b00000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r5, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000002c0)='./file0\x00', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 166.517768ms ago: executing program 5 (id=3365): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") utime(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r2) syz_emit_ethernet(0x2a, 0x0, 0x0) setgroups(0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0]) r4 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xfd, 0x386, &(0x7f00000007c0)="$eJzs3c9rI2UYwPFn0jQ/WrbJQRQF6YNe3MvQVs9qkS4IBZfuRtwVFma3Uw0dkzITKhGx8eRVvPkPCC578LDgoaD+A714Wy9ePG0vC4IuIo7MryTTnSZNmqXp9vuB3bzJ+z6Z950f5XkD887hB19/sr3lmVtWS3Klh2KIiDwWqUpOEkb0UpAMnb3L838+ePnajZtFEVnbUL2yev31FVVdWPzp08/LcbP9ohxUbx0+Wvnj4PmDFw//u/5x3dO6p41mSy293fy9Zd12bN2se9um6lXHtjxb6w3PdqP6ZlS/5TR3dtpqNTYvze24tuep1Wjrtt3WVlNbblutj6x6Q03T1EtzWd2NFQfUnVelMWJqdzc2rNUxN3hnzDhM2j++7w+odt1Va0bEDC7GTqqmdvep9w0AAEyddP6v3yYJe1Vy3YTSiOcChbCcngZ05PJ8Ul5fX9vQYLLQy//vvfJLa/79+wv7QcZ963C/kJX/v/FbFJ/K/4OtTzz///7I+/LkduS02Bul8anyf0yHxfQV+bA3Y48F+X9wNXRn9F9+eG8pLJD/AwAAAAAAAAAAAAAAAAAAAABwHjz2/Yrv+5XkNfnXu4Ugfh8yOgNvNMa5k5Ps41+MVxTong94Jl27cVNK4Y17+QUR56vd2m4teo3rk4ZLUpF/w/MhFi04Ea0noIGq/Ozs7dZm44CZ8P/Vgqg4YsuyVKSaig/LV95dX1vWSBQfbn9vt2bk54L4LamH8StSkeey41cy4wvy2qt98aZU5Nc70hRHNsPzuhf/xbLqO++tH4kvh+2yvPV0DwkAAAAAABNnqpbi6XM1Pf+N5u+mqZpVL9VoDc3u/PrJ3we68+ulzPl5vvJS/owHDwAAAADABeEVPtu2HMd2vfaxhbIMa5M8T2Pw92QX8qM0DgoPwsLsoDYzfSM86TcX4idojNB5GW2kluP8VZTMnZks4ZqqKp1ir1pOMv4TNC6NeghcLzf62G3XWwz6o2MNp6+Q/GwUfTLzxK6Tq8eF/2AkUaNtNFk5d1jjF7757u/xxmXEq/b2V715v5Qa6THhxpFPOkNO2ke+P7Q/s9l/LX4c5yEzAAAAAKZEkvSXveSTt8+2QwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXECnW4ntZIWzHiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLf4PAAD//5QI8Zs=") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000c083a35e496b6b1300"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x2000000000000264, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f88f7", 0x12}, {&(0x7f0000000040)="dd7fb78fb52ae97c75f16d067e11415380270996f3f4b616b45322a4415fdf5d003b", 0x22}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x2b) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x5, &(0x7f0000000540)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xdfffbfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000080)='./file0\x00', r8}, 0x18) keyctl$search(0xa, r3, &(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, r2) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000540)="816d2b6103973e0df257a8ea7bc273dfaeab96850806", 0x16, 0x48080, &(0x7f0000000200)={0x11, 0x15, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x32d800, 0x182) renameat2(r0, &(0x7f0000000240)='./file2\x00', r4, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 165.150738ms ago: executing program 4 (id=3366): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)) r1 = syz_io_uring_setup(0x42e6, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x4, 0x25d, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 120.105889ms ago: executing program 2 (id=3367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000240)={0x2, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='mm_page_alloc\x00', r0, 0x0, 0x7}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bind$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 94.772069ms ago: executing program 6 (id=3368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 0s ago: executing program 6 (id=3369): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000540)=""/239, 0xef) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r2 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) ptrace(0x8, r2) ptrace(0x4207, r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) pwritev(r1, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000280)="580bc70f4db4297316c17c2c0e0d54d3c52fbb3a57bb12c8afec2fbde602bd95dde038d7146d8813bdb1ad571d1ad84f14dcb746f1234e4cfde5a7d1eb9934ad1ef7a2935cf0d95fdafba102b28cd4a307b4e0529f75c364e075db12e3c3244e0d56f2538b2c3f9fd8bbf56d1668c22736610446", 0x74}, {&(0x7f0000000380)}], 0x3, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x10000}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0077efebe468df0ad6b13fc639560000180100002020702500000000002020207b1af8ff00000000bf9400000000000007010000f8ffffffb702000005000000b7030000b800000000850000007200000095cea76ad1ca21af264d144e020d3f1248899804576b189ca051861f10292eee74eddb8f0021f33bf064fd98e3b5c64873830705e7ae972084f902000000000000001c480de40f00867f96ef8daee22eb9b4e69e0476eeb6c4e9ca9ed4230d90b160c7bddd111942cb9696042a00"/225], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32], 0x50}, 0x1, 0xba01}, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e7465720004"], 0x118}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a3100"], 0xe8}, 0x1, 0x0, 0x0, 0x40040080}, 0x0) setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f0000000b80)=0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='f2fs_readdir\x00', r3, 0x0, 0x6}, 0x1b) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000140)='f2fs_direct_IO_enter\x00', r4, 0x0, 0x4d8}, 0x18) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) kernel console output (not intermixed with test programs): it: type=1326 audit(1751049094.237:13238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.2.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fb1be929 code=0x7ffc0000 [ 134.372589][ T29] audit: type=1326 audit(1751049094.237:13239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.2.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92fb1be929 code=0x7ffc0000 [ 134.396273][ T29] audit: type=1326 audit(1751049094.237:13240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.2.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fb1be929 code=0x7ffc0000 [ 134.397717][T11333] SELinux: failed to load policy [ 134.420701][ T29] audit: type=1326 audit(1751049094.237:13241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.2.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92fb1be929 code=0x7ffc0000 [ 134.449989][T11340] SELinux: failed to load policy [ 134.513710][T11350] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 134.523954][T11351] xt_TPROXY: Can be used only with -p tcp or -p udp [ 134.528375][T11356] loop1: detected capacity change from 0 to 512 [ 134.531643][T11351] xt_hashlimit: max too large, truncated to 1048576 [ 134.555038][T11356] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.566326][T11353] FAULT_INJECTION: forcing a failure. [ 134.566326][T11353] name failslab, interval 1, probability 0, space 0, times 0 [ 134.579014][T11353] CPU: 1 UID: 0 PID: 11353 Comm: syz.5.2659 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 134.579039][T11353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.579097][T11353] Call Trace: [ 134.579141][T11353] [ 134.579149][T11353] __dump_stack+0x1d/0x30 [ 134.579168][T11353] dump_stack_lvl+0xe8/0x140 [ 134.579184][T11353] dump_stack+0x15/0x1b [ 134.579197][T11353] should_fail_ex+0x265/0x280 [ 134.579267][T11353] should_failslab+0x8c/0xb0 [ 134.579288][T11353] __kmalloc_cache_node_noprof+0x54/0x320 [ 134.579332][T11353] ? __get_vm_area_node+0x106/0x1d0 [ 134.579492][T11353] __get_vm_area_node+0x106/0x1d0 [ 134.579522][T11353] __vmalloc_node_range_noprof+0x273/0xe00 [ 134.579557][T11353] ? sel_write_load+0x158/0x380 [ 134.579662][T11353] ? __rcu_read_unlock+0x4f/0x70 [ 134.579687][T11353] ? sel_write_load+0x158/0x380 [ 134.579726][T11353] vmalloc_noprof+0x82/0xc0 [ 134.579754][T11353] ? sel_write_load+0x158/0x380 [ 134.579780][T11353] sel_write_load+0x158/0x380 [ 134.579870][T11353] ? __pfx_sel_write_load+0x10/0x10 [ 134.579897][T11353] vfs_write+0x266/0x8e0 [ 134.579945][T11353] ? __rcu_read_unlock+0x4f/0x70 [ 134.579968][T11353] ? __fget_files+0x184/0x1c0 [ 134.579997][T11353] ksys_write+0xda/0x1a0 [ 134.580023][T11353] __x64_sys_write+0x40/0x50 [ 134.580050][T11353] x64_sys_call+0x2cdd/0x2fb0 [ 134.580072][T11353] do_syscall_64+0xd2/0x200 [ 134.580154][T11353] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.580246][T11353] ? clear_bhb_loop+0x40/0x90 [ 134.580278][T11353] ? clear_bhb_loop+0x40/0x90 [ 134.580333][T11353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.580353][T11353] RIP: 0033:0x7fbe4cd3e929 [ 134.580368][T11353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.580385][T11353] RSP: 002b:00007fbe4b3a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.580404][T11353] RAX: ffffffffffffffda RBX: 00007fbe4cf65fa0 RCX: 00007fbe4cd3e929 [ 134.580414][T11353] RDX: 000000000000fdb7 RSI: 0000200000000000 RDI: 0000000000000006 [ 134.580529][T11353] RBP: 00007fbe4b3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.580541][T11353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.580551][T11353] R13: 0000000000000000 R14: 00007fbe4cf65fa0 R15: 00007ffe3fe750a8 [ 134.580567][T11353] [ 134.581391][T11356] EXT4-fs (loop1): 1 truncate cleaned up [ 134.593111][T11353] warn_alloc: 2 callbacks suppressed [ 134.593121][T11353] syz.5.2659: vmalloc error: size 64951, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 134.655437][T11356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.658688][T11353] ,cpuset=/,mems_allowed=0 [ 134.692775][T11364] loop4: detected capacity change from 0 to 2048 [ 134.697215][T11353] CPU: 1 UID: 0 PID: 11353 Comm: syz.5.2659 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 134.697359][T11353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.697373][T11353] Call Trace: [ 134.697381][T11353] [ 134.697390][T11353] __dump_stack+0x1d/0x30 [ 134.697449][T11353] dump_stack_lvl+0xe8/0x140 [ 134.697469][T11353] dump_stack+0x15/0x1b [ 134.697485][T11353] warn_alloc+0x12b/0x1a0 [ 134.697523][T11353] __vmalloc_node_range_noprof+0x297/0xe00 [ 134.697626][T11353] ? __rcu_read_unlock+0x4f/0x70 [ 134.697651][T11353] ? sel_write_load+0x158/0x380 [ 134.697677][T11353] vmalloc_noprof+0x82/0xc0 [ 134.697704][T11353] ? sel_write_load+0x158/0x380 [ 134.697790][T11353] sel_write_load+0x158/0x380 [ 134.697815][T11353] ? __pfx_sel_write_load+0x10/0x10 [ 134.697869][T11353] vfs_write+0x266/0x8e0 [ 134.697898][T11353] ? __rcu_read_unlock+0x4f/0x70 [ 134.697918][T11353] ? __fget_files+0x184/0x1c0 [ 134.697941][T11353] ksys_write+0xda/0x1a0 [ 134.698077][T11353] __x64_sys_write+0x40/0x50 [ 134.698197][T11353] x64_sys_call+0x2cdd/0x2fb0 [ 134.698218][T11353] do_syscall_64+0xd2/0x200 [ 134.698235][T11353] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.698311][T11353] ? clear_bhb_loop+0x40/0x90 [ 134.698331][T11353] ? clear_bhb_loop+0x40/0x90 [ 134.698353][T11353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.698388][T11353] RIP: 0033:0x7fbe4cd3e929 [ 134.698404][T11353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.698420][T11353] RSP: 002b:00007fbe4b3a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.698439][T11353] RAX: ffffffffffffffda RBX: 00007fbe4cf65fa0 RCX: 00007fbe4cd3e929 [ 134.698452][T11353] RDX: 000000000000fdb7 RSI: 0000200000000000 RDI: 0000000000000006 [ 134.698464][T11353] RBP: 00007fbe4b3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.698552][T11353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.698564][T11353] R13: 0000000000000000 R14: 00007fbe4cf65fa0 R15: 00007ffe3fe750a8 [ 134.698582][T11353] [ 134.698588][T11353] Mem-Info: [ 134.705222][T11367] loop2: detected capacity change from 0 to 128 [ 134.706180][T11353] active_anon:21017 inactive_anon:2 isolated_anon:0 [ 134.706180][T11353] active_file:10808 inactive_file:13256 isolated_file:0 [ 134.706180][T11353] unevictable:0 dirty:374 writeback:0 [ 134.706180][T11353] slab_reclaimable:3249 slab_unreclaimable:16020 [ 134.706180][T11353] mapped:30660 shmem:17372 pagetables:1134 [ 134.706180][T11353] sec_pagetables:0 bounce:0 [ 134.706180][T11353] kernel_misc_reclaimable:0 [ 134.706180][T11353] free:1862392 free_pcp:15108 free_cma:0 [ 134.715815][T11356] FAULT_INJECTION: forcing a failure. [ 134.715815][T11356] name failslab, interval 1, probability 0, space 0, times 0 [ 134.716104][T11353] Node 0 active_anon:84068kB inactive_anon:8kB active_file:43232kB inactive_file:53024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122640kB dirty:1496kB writeback:0kB shmem:69488kB writeback_tmp:0kB kernel_stack:3248kB pagetables:4536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.720519][T11356] CPU: 0 UID: 0 PID: 11356 Comm: syz.1.2662 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 134.720594][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.720606][T11356] Call Trace: [ 134.720614][T11356] [ 134.720622][T11356] __dump_stack+0x1d/0x30 [ 134.720643][T11356] dump_stack_lvl+0xe8/0x140 [ 134.720662][T11356] dump_stack+0x15/0x1b [ 134.720707][T11356] should_fail_ex+0x265/0x280 [ 134.720737][T11356] should_failslab+0x8c/0xb0 [ 134.720760][T11356] kmem_cache_alloc_noprof+0x50/0x310 [ 134.720795][T11356] ? getname_flags+0x80/0x3b0 [ 134.720818][T11356] getname_flags+0x80/0x3b0 [ 134.720840][T11356] do_sys_openat2+0x60/0x110 [ 134.720867][T11356] __x64_sys_open+0xe6/0x110 [ 134.720917][T11356] x64_sys_call+0x14d4/0x2fb0 [ 134.720943][T11356] do_syscall_64+0xd2/0x200 [ 134.721030][T11356] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.721056][T11356] ? clear_bhb_loop+0x40/0x90 [ 134.721076][T11356] ? clear_bhb_loop+0x40/0x90 [ 134.721096][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.721232][T11356] RIP: 0033:0x7f97c5e6e929 [ 134.721248][T11356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.721262][T11356] RSP: 002b:00007f97c44d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 134.721295][T11356] RAX: ffffffffffffffda RBX: 00007f97c6095fa0 RCX: 00007f97c5e6e929 [ 134.721307][T11356] RDX: 0000000000000021 RSI: 0000000000000280 RDI: 0000200000000640 [ 134.721319][T11356] RBP: 00007f97c44d7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.721331][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.721343][T11356] R13: 0000000000000000 R14: 00007f97c6095fa0 R15: 00007ffecf8f5588 [ 134.721361][T11356] [ 134.741358][T11364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.741830][T11353] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.390990][T11353] lowmem_reserve[]: 0 2882 7860 7860 [ 135.396336][T11353] Node 0 DMA32 free:2947828kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 135.426406][T11353] lowmem_reserve[]: 0 0 4978 4978 [ 135.431507][T11353] Node 0 Normal free:4486380kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:84068kB inactive_anon:8kB active_file:43232kB inactive_file:53140kB unevictable:0kB writepending:1612kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:56728kB local_pcp:32756kB free_cma:0kB [ 135.463568][T11353] lowmem_reserve[]: 0 0 0 0 [ 135.468160][T11353] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 135.480821][T11353] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947828kB [ 135.497039][T11353] Node 0 Normal: 1029*4kB (UME) 608*8kB (UME) 296*16kB (UME) 280*32kB (UME) 130*64kB (UME) 56*128kB (UM) 66*256kB (UM) 29*512kB (UM) 13*1024kB (UM) 6*2048kB (UME) 1072*4096kB (UM) = 4486420kB [ 135.516075][T11353] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 135.525445][T11353] 41406 total pagecache pages [ 135.530112][T11353] 2 pages in swap cache [ 135.534239][T11353] Free swap = 124988kB [ 135.538424][T11353] Total swap = 124996kB [ 135.542593][T11353] 2097051 pages RAM [ 135.546377][T11353] 0 pages HighMem/MovableOnly [ 135.551042][T11353] 80812 pages reserved [ 135.564294][T11364] SELinux: policydb version 0 does not match my version range 15-34 [ 135.573901][T11364] SELinux: failed to load policy [ 135.603400][T11375] __nla_validate_parse: 21 callbacks suppressed [ 135.603415][T11375] netlink: 472 bytes leftover after parsing attributes in process `syz.5.2667'. [ 135.629810][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.640374][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.673696][T11382] xt_TPROXY: Can be used only with -p tcp or -p udp [ 135.675547][T11386] netem: change failed [ 135.697833][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2670'. [ 135.711724][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2671'. [ 135.725053][T11385] loop5: detected capacity change from 0 to 512 [ 135.729915][T11390] loop2: detected capacity change from 0 to 2048 [ 135.740712][T11385] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 135.758513][T11394] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 135.778005][T11385] EXT4-fs (loop5): mount failed [ 135.779880][T11390] loop2: p1 < > p4 [ 135.789913][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2671'. [ 135.798814][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2671'. [ 135.809140][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2671'. [ 135.821495][T11390] loop2: p4 size 8388608 extends beyond EOD, truncated [ 135.874721][T11373] SELinux: ebitmap: truncated map [ 135.879755][T11404] netem: change failed [ 135.880193][T11373] SELinux: failed to load policy [ 135.928366][T11410] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 135.970231][T11414] netlink: 'syz.4.2675': attribute type 1 has an invalid length. [ 136.236970][T11423] loop2: detected capacity change from 0 to 8192 [ 136.281526][T11427] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 136.295969][T11427] loop2: detected capacity change from 0 to 164 [ 136.304238][T11427] Unable to read rock-ridge attributes [ 136.316194][T11427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.324115][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2687'. [ 136.325148][T11427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.341984][T11431] loop6: detected capacity change from 0 to 512 [ 136.352643][T11431] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.367535][T11431] EXT4-fs (loop6): mount failed [ 136.374085][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2687'. [ 136.383068][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2687'. [ 136.392092][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2687'. [ 136.499014][T11437] netlink: 'syz.6.2688': attribute type 1 has an invalid length. [ 136.715066][T11449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11449 comm=syz.4.2692 [ 136.732751][T11450] loop5: detected capacity change from 0 to 2048 [ 136.739256][T11449] loop4: detected capacity change from 0 to 2048 [ 136.779846][T11450] loop5: p1 < > p4 [ 136.779960][T11449] loop4: p1 < > p4 [ 136.788229][T11449] loop4: p4 size 8388608 extends beyond EOD, truncated [ 136.794044][T11450] loop5: p4 size 8388608 extends beyond EOD, truncated [ 136.823514][T11439] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 136.833994][T11439] SELinux: failed to load policy [ 136.840149][T11449] SELinux: ebitmap: truncated map [ 136.841080][T11454] loop1: detected capacity change from 0 to 128 [ 136.858565][T11449] SELinux: failed to load policy [ 136.918833][T11464] netem: change failed [ 136.924682][T11463] loop5: detected capacity change from 0 to 512 [ 136.939904][T11463] journal_path: Non-blockdev passed as './bus' [ 136.946111][T11463] EXT4-fs: error: could not find journal device path [ 136.956282][T11460] loop4: detected capacity change from 0 to 8192 [ 136.974871][T11466] loop1: detected capacity change from 0 to 512 [ 136.990907][T11466] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 137.007148][T11474] loop5: detected capacity change from 0 to 2048 [ 137.013087][T11466] EXT4-fs (loop1): mount failed [ 137.032465][T11474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.092651][T11474] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2702: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 137.119103][T11474] EXT4-fs (loop5): Remounting filesystem read-only [ 137.139908][ T8534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.153797][T11484] loop1: detected capacity change from 0 to 128 [ 137.219977][T11488] netlink: 'syz.4.2703': attribute type 1 has an invalid length. [ 137.280120][T11486] loop5: detected capacity change from 0 to 8192 [ 137.293802][T11492] xt_TPROXY: Can be used only with -p tcp or -p udp [ 137.302120][T11491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11491 comm=syz.1.2707 [ 137.336961][T11491] loop1: detected capacity change from 0 to 2048 [ 137.391145][T11491] loop1: p1 < > p4 [ 137.395924][T11491] loop1: p4 size 8388608 extends beyond EOD, truncated [ 137.398299][T11503] loop2: detected capacity change from 0 to 512 [ 137.410038][T11503] journal_path: Non-blockdev passed as './bus' [ 137.416221][T11503] EXT4-fs: error: could not find journal device path [ 137.448698][T11491] SELinux: ebitmap: truncated map [ 137.454773][T11491] SELinux: failed to load policy [ 137.495438][T11516] loop1: detected capacity change from 0 to 128 [ 137.524652][T11519] loop1: detected capacity change from 0 to 1024 [ 137.542626][T11519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.585781][T11530] xt_TPROXY: Can be used only with -p tcp or -p udp [ 137.659719][T11527] loop6: detected capacity change from 0 to 2048 [ 137.710049][T11527] loop6: p1 < > p4 [ 137.715250][T11527] loop6: p4 size 8388608 extends beyond EOD, truncated [ 137.738097][T11544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11544 comm=syz.4.2726 [ 137.752983][T11527] SELinux: ebitmap: truncated map [ 137.758993][T11527] SELinux: failed to load policy [ 137.788097][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.797312][T11544] loop4: detected capacity change from 0 to 2048 [ 137.816399][T11548] loop1: detected capacity change from 0 to 512 [ 137.823091][T11548] journal_path: Non-blockdev passed as './bus' [ 137.829495][T11548] EXT4-fs: error: could not find journal device path [ 137.830131][T11544] loop4: p1 < > p4 [ 137.851240][T11544] loop4: p4 size 8388608 extends beyond EOD, truncated [ 137.879760][T11554] xt_TPROXY: Can be used only with -p tcp or -p udp [ 137.887559][T11554] xt_hashlimit: max too large, truncated to 1048576 [ 137.906832][T11544] SELinux: ebitmap: truncated map [ 137.913484][T11544] SELinux: failed to load policy [ 137.947621][T11562] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 137.958343][T11566] loop1: detected capacity change from 0 to 512 [ 137.965146][T11566] journal_path: Non-blockdev passed as './bus' [ 137.971454][T11566] EXT4-fs: error: could not find journal device path [ 138.003796][T11574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11574 comm=syz.1.2740 [ 138.021130][T11571] loop6: detected capacity change from 0 to 1024 [ 138.036787][T11574] loop1: detected capacity change from 0 to 2048 [ 138.050853][T11571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.073190][T11579] loop4: detected capacity change from 0 to 2048 [ 138.080619][T11574] loop1: p1 < > p4 [ 138.085097][T11574] loop1: p4 size 8388608 extends beyond EOD, truncated [ 138.092223][T11576] loop5: detected capacity change from 0 to 2048 [ 138.122910][T11574] SELinux: ebitmap: truncated map [ 138.128802][T11574] SELinux: failed to load policy [ 138.134381][T11579] loop4: p1 < > p4 [ 138.138666][T11579] loop4: p4 size 8388608 extends beyond EOD, truncated [ 138.152636][T11576] loop5: p1 < > p4 [ 138.157201][T11576] loop5: p4 size 8388608 extends beyond EOD, truncated [ 138.203270][T11576] SELinux: ebitmap: truncated map [ 138.209085][T11576] SELinux: failed to load policy [ 138.215871][T11569] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 138.236068][T11569] SELinux: failed to load policy [ 138.259743][T10435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.299896][T11592] xt_TPROXY: Can be used only with -p tcp or -p udp [ 138.307382][T11592] xt_hashlimit: max too large, truncated to 1048576 [ 138.321568][T11590] loop5: detected capacity change from 0 to 2048 [ 138.334939][T11598] loop6: detected capacity change from 0 to 512 [ 138.343195][T11598] journal_path: Non-blockdev passed as './bus' [ 138.349479][T11598] EXT4-fs: error: could not find journal device path [ 138.358716][T11590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.382894][T11590] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2746: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 138.400132][T11590] EXT4-fs (loop5): Remounting filesystem read-only [ 138.418415][ T8534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.448176][T11614] loop5: detected capacity change from 0 to 1024 [ 138.457374][T11614] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 138.472205][T11614] loop5: detected capacity change from 0 to 512 [ 138.478866][T11614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.501073][T11614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.514628][T11614] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.552502][T11621] loop6: detected capacity change from 0 to 512 [ 138.561683][ T8534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.582131][T11621] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 138.599468][T11626] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 138.614937][T11621] EXT4-fs (loop6): mount failed [ 138.671710][T11633] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 138.712407][T11637] loop6: detected capacity change from 0 to 512 [ 138.719061][T11637] journal_path: Non-blockdev passed as './bus' [ 138.725289][T11637] EXT4-fs: error: could not find journal device path [ 138.914624][T11648] loop5: detected capacity change from 0 to 512 [ 138.921375][T11648] journal_path: Non-blockdev passed as './bus' [ 138.927640][T11648] EXT4-fs: error: could not find journal device path [ 138.930098][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 138.930111][ T29] audit: type=1326 audit(1751049098.877:13507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11644 comm="syz.6.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 138.964242][ T29] audit: type=1326 audit(1751049098.877:13508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11644 comm="syz.6.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 138.988153][ T29] audit: type=1326 audit(1751049098.877:13509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11644 comm="syz.6.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 139.011825][ T29] audit: type=1326 audit(1751049098.877:13510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11644 comm="syz.6.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 139.014010][T11651] FAULT_INJECTION: forcing a failure. [ 139.014010][T11651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.035380][ T29] audit: type=1326 audit(1751049098.877:13511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11644 comm="syz.6.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 139.035406][ T29] audit: type=1326 audit(1751049098.877:13512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11644 comm="syz.6.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 139.035430][ T29] audit: type=1326 audit(1751049098.877:13513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11644 comm="syz.6.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 139.048438][T11651] CPU: 1 UID: 0 PID: 11651 Comm: syz.5.2766 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 139.048488][T11651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.048560][T11651] Call Trace: [ 139.048567][T11651] [ 139.048575][T11651] __dump_stack+0x1d/0x30 [ 139.048597][T11651] dump_stack_lvl+0xe8/0x140 [ 139.048616][T11651] dump_stack+0x15/0x1b [ 139.048632][T11651] should_fail_ex+0x265/0x280 [ 139.048662][T11651] should_fail+0xb/0x20 [ 139.048687][T11651] should_fail_usercopy+0x1a/0x20 [ 139.048741][T11651] _copy_to_user+0x20/0xa0 [ 139.048768][T11651] simple_read_from_buffer+0xb5/0x130 [ 139.048799][T11651] proc_fail_nth_read+0x100/0x140 [ 139.048893][T11651] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.048923][T11651] vfs_read+0x1a0/0x6f0 [ 139.049019][T11651] ? __rcu_read_unlock+0x4f/0x70 [ 139.049040][T11651] ? __fget_files+0x184/0x1c0 [ 139.049058][T11651] ? __rcu_read_unlock+0x4f/0x70 [ 139.049081][T11651] ksys_read+0xda/0x1a0 [ 139.049112][T11651] __x64_sys_read+0x40/0x50 [ 139.049150][T11651] x64_sys_call+0x2d77/0x2fb0 [ 139.049235][T11651] do_syscall_64+0xd2/0x200 [ 139.049253][T11651] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 139.049277][T11651] ? clear_bhb_loop+0x40/0x90 [ 139.049298][T11651] ? clear_bhb_loop+0x40/0x90 [ 139.049431][T11651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.049455][T11651] RIP: 0033:0x7fbe4cd3d33c [ 139.049471][T11651] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 139.049488][T11651] RSP: 002b:00007fbe4b3a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.049506][T11651] RAX: ffffffffffffffda RBX: 00007fbe4cf65fa0 RCX: 00007fbe4cd3d33c [ 139.049551][T11651] RDX: 000000000000000f RSI: 00007fbe4b3a70a0 RDI: 0000000000000005 [ 139.049562][T11651] RBP: 00007fbe4b3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.049640][T11651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.049652][T11651] R13: 0000000000000000 R14: 00007fbe4cf65fa0 R15: 00007ffe3fe750a8 [ 139.049670][T11651] [ 139.233850][T11659] loop4: detected capacity change from 0 to 512 [ 139.239531][ T29] audit: type=1326 audit(1751049098.877:13514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11644 comm="syz.6.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 139.239560][ T29] audit: type=1326 audit(1751049098.877:13515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11644 comm="syz.6.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 139.252383][T11659] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 139.305714][T11665] loop5: detected capacity change from 0 to 512 [ 139.314025][T11659] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 139.340568][T11665] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 139.386917][T11659] EXT4-fs (loop4): mount failed [ 139.435340][T11665] EXT4-fs (loop5): mount failed [ 139.641285][T11681] loop5: detected capacity change from 0 to 2048 [ 139.647831][T11679] loop2: detected capacity change from 0 to 8192 [ 139.688525][T11681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.705095][T11685] loop2: detected capacity change from 0 to 512 [ 139.718409][T11681] SELinux: policydb version 0 does not match my version range 15-34 [ 139.726669][T11681] SELinux: failed to load policy [ 139.737542][T11685] journal_path: Non-blockdev passed as './bus' [ 139.743870][T11685] EXT4-fs: error: could not find journal device path [ 139.790505][ T8534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.872205][T11701] loop4: detected capacity change from 0 to 164 [ 139.884423][T11697] loop6: detected capacity change from 0 to 512 [ 139.893047][T11701] Unable to read rock-ridge attributes [ 139.899719][T11701] Unable to read rock-ridge attributes [ 139.909992][T11697] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 139.928756][T11707] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 139.938110][T11697] EXT4-fs (loop6): mount failed [ 139.978902][T11713] loop5: detected capacity change from 0 to 128 [ 140.006098][T11715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.013585][T11715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.021464][T11715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.028880][T11715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.095011][T11723] loop5: detected capacity change from 0 to 512 [ 140.102044][T11723] journal_path: Non-blockdev passed as './bus' [ 140.108218][T11723] EXT4-fs: error: could not find journal device path [ 140.133485][T11727] loop6: detected capacity change from 0 to 128 [ 140.140550][T11726] loop5: detected capacity change from 0 to 512 [ 140.147225][T11726] journal_path: Non-blockdev passed as './bus' [ 140.153570][T11726] EXT4-fs: error: could not find journal device path [ 140.259054][T11740] loop5: detected capacity change from 0 to 512 [ 140.285481][T11743] loop6: detected capacity change from 0 to 512 [ 140.301256][T11743] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 140.301454][T11740] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 140.316508][T11743] EXT4-fs (loop6): mount failed [ 140.333400][T11740] EXT4-fs (loop5): mount failed [ 140.346550][T11753] loop4: detected capacity change from 0 to 2048 [ 140.397189][T11755] loop5: detected capacity change from 0 to 2048 [ 140.404245][T11753] loop4: p1 < > p4 [ 140.408592][T11753] loop4: p4 size 8388608 extends beyond EOD, truncated [ 140.418248][T11755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.436375][T11755] SELinux: policydb version 0 does not match my version range 15-34 [ 140.444983][T11755] SELinux: failed to load policy [ 140.496318][T11745] SELinux: ebitmap: truncated map [ 140.503045][ T8534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.559513][T11768] netlink: 'syz.6.2806': attribute type 1 has an invalid length. [ 140.690387][T11783] __nla_validate_parse: 39 callbacks suppressed [ 140.690403][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2813'. [ 140.691958][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'. [ 140.720491][T11784] loop2: detected capacity change from 0 to 512 [ 140.757030][T11784] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 140.774145][T11784] EXT4-fs (loop2): mount failed [ 140.782340][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'. [ 140.791403][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'. [ 140.824574][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'. [ 140.891851][T11800] SELinux: ebitmap: truncated map [ 140.994011][T11806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 141.013014][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2820'. [ 141.036892][T11810] loop4: detected capacity change from 0 to 1024 [ 141.061659][T11810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.076330][T11810] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2821: Allocating blocks 385-513 which overlap fs metadata [ 141.092364][T11810] EXT4-fs (loop4): pa ffff888106e9b380: logic 16, phys. 129, len 24 [ 141.100503][T11810] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 141.122754][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.245725][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2825'. [ 141.321135][T11826] loop6: detected capacity change from 0 to 512 [ 141.327741][T11826] journal_path: Non-blockdev passed as './bus' [ 141.334065][T11826] EXT4-fs: error: could not find journal device path [ 141.352038][T11829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.361045][T11829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.411518][T11834] loop6: detected capacity change from 0 to 8192 [ 141.514295][T11838] loop6: detected capacity change from 0 to 512 [ 141.520819][T11838] journal_path: Non-blockdev passed as './bus' [ 141.527050][T11838] EXT4-fs: error: could not find journal device path [ 141.547255][T11840] xt_TPROXY: Can be used only with -p tcp or -p udp [ 141.554975][T11840] xt_hashlimit: max too large, truncated to 1048576 [ 141.562914][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2834'. [ 141.569312][T11829] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.2829'. [ 141.573465][T11830] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.2829'. [ 141.607077][T11829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11829 comm=syz.1.2829 [ 141.630033][T11846] netem: change failed [ 141.668695][T11855] loop6: detected capacity change from 0 to 512 [ 141.675995][T11855] journal_path: Non-blockdev passed as './bus' [ 141.682273][T11855] EXT4-fs: error: could not find journal device path [ 141.732919][T11860] loop6: detected capacity change from 0 to 512 [ 141.739399][T11852] loop5: detected capacity change from 0 to 2048 [ 141.740175][T11860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.747069][T11862] SELinux: policydb version 0 does not match my version range 15-34 [ 141.761468][T11852] loop5: p1 < > p4 [ 141.765852][T11852] loop5: p4 size 8388608 extends beyond EOD, truncated [ 141.796240][T11860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.811051][T11860] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.836734][T11852] SELinux: ebitmap: truncated map [ 141.842727][T11852] sel_write_load: 3 callbacks suppressed [ 141.842740][T11852] SELinux: failed to load policy [ 141.868839][T10435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.893500][T11872] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 141.914495][T11873] loop2: detected capacity change from 0 to 2048 [ 141.970492][T11873] loop2: p1 < > p4 [ 141.976552][T11884] loop5: detected capacity change from 0 to 512 [ 141.979785][T11873] loop2: p4 size 8388608 extends beyond EOD, truncated [ 141.985218][T11884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.026159][T11884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.039648][T11884] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.061522][T11866] SELinux: ebitmap: truncated map [ 142.067430][T11866] SELinux: failed to load policy [ 142.101449][ T8534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.113678][T11897] usb usb7: usbfs: process 11897 (syz.4.2857) did not claim interface 0 before use [ 142.123102][T11893] loop6: detected capacity change from 0 to 2048 [ 142.133735][T11897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11897 comm=syz.4.2857 [ 142.156729][T11897] loop4: detected capacity change from 0 to 2048 [ 142.171384][T11901] FAULT_INJECTION: forcing a failure. [ 142.171384][T11901] name failslab, interval 1, probability 0, space 0, times 0 [ 142.184115][T11901] CPU: 0 UID: 0 PID: 11901 Comm: syz.2.2858 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 142.184141][T11901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.184154][T11901] Call Trace: [ 142.184161][T11901] [ 142.184169][T11901] __dump_stack+0x1d/0x30 [ 142.184189][T11901] dump_stack_lvl+0xe8/0x140 [ 142.184228][T11901] dump_stack+0x15/0x1b [ 142.184242][T11901] should_fail_ex+0x265/0x280 [ 142.184268][T11901] should_failslab+0x8c/0xb0 [ 142.184317][T11901] kmem_cache_alloc_noprof+0x50/0x310 [ 142.184343][T11901] ? getname_flags+0x80/0x3b0 [ 142.184366][T11901] getname_flags+0x80/0x3b0 [ 142.184453][T11901] __x64_sys_execve+0x42/0x70 [ 142.184553][T11901] x64_sys_call+0x13ab/0x2fb0 [ 142.184571][T11901] do_syscall_64+0xd2/0x200 [ 142.184650][T11901] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 142.184794][T11901] ? clear_bhb_loop+0x40/0x90 [ 142.184815][T11901] ? clear_bhb_loop+0x40/0x90 [ 142.184852][T11901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.184873][T11901] RIP: 0033:0x7f92fb1be929 [ 142.184887][T11901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.184903][T11901] RSP: 002b:00007f92f9827038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 142.184922][T11901] RAX: ffffffffffffffda RBX: 00007f92fb3e5fa0 RCX: 00007f92fb1be929 [ 142.184933][T11901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 142.185000][T11901] RBP: 00007f92f9827090 R08: 0000000000000000 R09: 0000000000000000 [ 142.185012][T11901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.185022][T11901] R13: 0000000000000000 R14: 00007f92fb3e5fa0 R15: 00007ffd5a2cc5a8 [ 142.185039][T11901] [ 142.186142][T11893] loop6: p1 < > p4 [ 142.199420][T11897] loop4: p1 < > p4 [ 142.227878][T11903] netem: change failed [ 142.240795][T11897] loop4: p4 size 8388608 extends beyond EOD, [ 142.247522][T11897] truncated [ 142.278895][T11893] loop6: p4 size 8388608 extends beyond EOD, [ 142.372182][T11910] SELinux: ebitmap: truncated map [ 142.374684][T11893] truncated [ 142.405493][T11910] SELinux: failed to load policy [ 142.410854][T11893] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 142.430950][T11893] SELinux: failed to load policy [ 142.466635][T11921] loop5: detected capacity change from 0 to 1024 [ 142.490589][T11921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.504113][T11925] loop2: detected capacity change from 0 to 2048 [ 142.546050][ T8534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.555619][T11925] loop2: p1 < > p4 [ 142.556919][T11932] loop1: detected capacity change from 0 to 8192 [ 142.566323][T11925] loop2: p4 size 8388608 extends beyond EOD, truncated [ 142.589256][T11936] loop4: detected capacity change from 0 to 128 [ 142.619379][T11917] SELinux: ebitmap: truncated map [ 142.625038][T11917] SELinux: failed to load policy [ 142.648057][T11941] netem: change failed [ 142.671790][T11948] FAULT_INJECTION: forcing a failure. [ 142.671790][T11948] name failslab, interval 1, probability 0, space 0, times 0 [ 142.684542][T11948] CPU: 1 UID: 0 PID: 11948 Comm: syz.2.2874 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 142.684584][T11948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.684594][T11948] Call Trace: [ 142.684601][T11948] [ 142.684609][T11948] __dump_stack+0x1d/0x30 [ 142.684630][T11948] dump_stack_lvl+0xe8/0x140 [ 142.684693][T11948] dump_stack+0x15/0x1b [ 142.684709][T11948] should_fail_ex+0x265/0x280 [ 142.684740][T11948] ? __se_sys_memfd_create+0x1cc/0x590 [ 142.684815][T11948] should_failslab+0x8c/0xb0 [ 142.684836][T11948] __kmalloc_cache_noprof+0x4c/0x320 [ 142.684890][T11948] ? fput+0x8f/0xc0 [ 142.684911][T11948] __se_sys_memfd_create+0x1cc/0x590 [ 142.684947][T11948] __x64_sys_memfd_create+0x31/0x40 [ 142.684975][T11948] x64_sys_call+0x122f/0x2fb0 [ 142.684998][T11948] do_syscall_64+0xd2/0x200 [ 142.685014][T11948] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 142.685093][T11948] ? clear_bhb_loop+0x40/0x90 [ 142.685115][T11948] ? clear_bhb_loop+0x40/0x90 [ 142.685136][T11948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.685162][T11948] RIP: 0033:0x7f92fb1be929 [ 142.685177][T11948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.685193][T11948] RSP: 002b:00007f92f9826e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 142.685245][T11948] RAX: ffffffffffffffda RBX: 000000000000042f RCX: 00007f92fb1be929 [ 142.685339][T11948] RDX: 00007f92f9826ef0 RSI: 0000000000000000 RDI: 00007f92fb2414cc [ 142.685352][T11948] RBP: 0000200000000940 R08: 00007f92f9826bb7 R09: 00007f92f9826e40 [ 142.685373][T11948] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 142.685386][T11948] R13: 00007f92f9826ef0 R14: 00007f92f9826eb0 R15: 0000200000000200 [ 142.685406][T11948] [ 142.871905][T11955] FAULT_INJECTION: forcing a failure. [ 142.871905][T11955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.885224][T11955] CPU: 1 UID: 0 PID: 11955 Comm: syz.4.2879 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 142.885260][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.885271][T11955] Call Trace: [ 142.885281][T11955] [ 142.885291][T11955] __dump_stack+0x1d/0x30 [ 142.885355][T11955] dump_stack_lvl+0xe8/0x140 [ 142.885373][T11955] dump_stack+0x15/0x1b [ 142.885389][T11955] should_fail_ex+0x265/0x280 [ 142.885434][T11955] should_fail+0xb/0x20 [ 142.885456][T11955] should_fail_usercopy+0x1a/0x20 [ 142.885616][T11955] _copy_to_user+0x20/0xa0 [ 142.885636][T11955] simple_read_from_buffer+0xb5/0x130 [ 142.885667][T11955] proc_fail_nth_read+0x100/0x140 [ 142.885779][T11955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.885808][T11955] vfs_read+0x1a0/0x6f0 [ 142.885835][T11955] ? __rcu_read_unlock+0x4f/0x70 [ 142.885917][T11955] ? __fget_files+0x184/0x1c0 [ 142.885935][T11955] ksys_read+0xda/0x1a0 [ 142.885963][T11955] __x64_sys_read+0x40/0x50 [ 142.885988][T11955] x64_sys_call+0x2d77/0x2fb0 [ 142.886081][T11955] do_syscall_64+0xd2/0x200 [ 142.886098][T11955] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 142.886121][T11955] ? clear_bhb_loop+0x40/0x90 [ 142.886212][T11955] ? clear_bhb_loop+0x40/0x90 [ 142.886300][T11955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.886319][T11955] RIP: 0033:0x7f436c63d33c [ 142.886370][T11955] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 142.886385][T11955] RSP: 002b:00007f436aca7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.886423][T11955] RAX: ffffffffffffffda RBX: 00007f436c865fa0 RCX: 00007f436c63d33c [ 142.886434][T11955] RDX: 000000000000000f RSI: 00007f436aca70a0 RDI: 0000000000000006 [ 142.886445][T11955] RBP: 00007f436aca7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.886456][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.886467][T11955] R13: 0000000000000000 R14: 00007f436c865fa0 R15: 00007ffd2062fe08 [ 142.886531][T11955] [ 143.097108][T11962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11962 comm=syz.1.2878 [ 143.167686][T11973] loop4: detected capacity change from 0 to 512 [ 143.174097][T11951] loop1: detected capacity change from 0 to 2048 [ 143.181149][T11970] vhci_hcd: invalid port number 96 [ 143.186271][T11970] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 143.203781][T11973] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 143.221854][T11973] EXT4-fs (loop4): mount failed [ 143.229991][T11951] loop1: p1 < > p4 [ 143.234448][T11951] loop1: p4 size 8388608 extends beyond EOD, truncated [ 143.275394][T11976] loop6: detected capacity change from 0 to 2048 [ 143.278531][T11951] SELinux: ebitmap: truncated map [ 143.288207][T11951] SELinux: failed to load policy [ 143.313846][T11976] loop6: p1 < > p4 [ 143.318616][T11976] loop6: p4 size 8388608 extends beyond EOD, truncated [ 143.319305][T11989] netem: change failed [ 143.350961][T11976] SELinux: ebitmap: truncated map [ 143.357953][T11991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11991 comm=syz.2.2890 [ 143.374122][T11976] SELinux: failed to load policy [ 143.419378][T11999] loop2: detected capacity change from 0 to 2048 [ 143.436806][T12001] loop6: detected capacity change from 0 to 2048 [ 143.450102][T11999] loop2: p1 < > p4 [ 143.452814][T12001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.454614][T11999] loop2: p4 size 8388608 extends beyond EOD, truncated [ 143.472346][T12001] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.2893: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 143.490451][T12001] EXT4-fs (loop6): Remounting filesystem read-only [ 143.522077][T12007] loop4: detected capacity change from 0 to 1024 [ 143.529693][T10435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.531808][T11991] SELinux: ebitmap: truncated map [ 143.545125][T11991] SELinux: failed to load policy [ 143.565967][T12007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.634156][T12015] loop2: detected capacity change from 0 to 2048 [ 143.649048][T12013] loop5: detected capacity change from 0 to 512 [ 143.662025][T12013] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 143.677619][T12013] EXT4-fs (loop5): mount failed [ 143.704389][T12015] loop2: p1 < > p4 [ 143.708825][T12015] loop2: p4 size 8388608 extends beyond EOD, truncated [ 143.717690][T12015] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 143.732317][T12015] SELinux: failed to load policy [ 143.755599][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.823896][T12030] loop4: detected capacity change from 0 to 512 [ 143.840376][T12030] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 143.857342][T12030] EXT4-fs (loop4): mount failed [ 143.961593][T12047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12047 comm=syz.4.2907 [ 143.977495][T12049] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 143.982637][T12047] loop4: detected capacity change from 0 to 2048 [ 144.042648][T12047] loop4: p1 < > p4 [ 144.047147][T12047] loop4: p4 size 8388608 extends beyond EOD, truncated [ 144.078565][T12047] SELinux: ebitmap: truncated map [ 144.084783][T12047] SELinux: failed to load policy [ 144.137315][ T29] kauditd_printk_skb: 528 callbacks suppressed [ 144.137332][ T29] audit: type=1326 audit(1751049104.087:14036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12055 comm="syz.4.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436c63e929 code=0x7ffc0000 [ 144.168356][ T29] audit: type=1326 audit(1751049104.087:14037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12055 comm="syz.4.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436c63e929 code=0x7ffc0000 [ 144.192184][ T29] audit: type=1326 audit(1751049104.087:14038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12055 comm="syz.4.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f436c63e929 code=0x7ffc0000 [ 144.215797][ T29] audit: type=1326 audit(1751049104.087:14039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12055 comm="syz.4.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436c63e929 code=0x7ffc0000 [ 144.239516][ T29] audit: type=1326 audit(1751049104.087:14040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12055 comm="syz.4.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f436c63e929 code=0x7ffc0000 [ 144.263186][ T29] audit: type=1326 audit(1751049104.087:14041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12055 comm="syz.4.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436c63e929 code=0x7ffc0000 [ 144.286778][ T29] audit: type=1326 audit(1751049104.087:14042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12055 comm="syz.4.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f436c63e929 code=0x7ffc0000 [ 144.310424][ T29] audit: type=1326 audit(1751049104.087:14043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12055 comm="syz.4.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436c63e929 code=0x7ffc0000 [ 144.334094][ T29] audit: type=1326 audit(1751049104.087:14044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12055 comm="syz.4.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f436c63e929 code=0x7ffc0000 [ 144.358366][ T29] audit: type=1326 audit(1751049104.107:14045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12055 comm="syz.4.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436c63e929 code=0x7ffc0000 [ 144.435958][T12061] usb usb7: usbfs: process 12061 (syz.1.2913) did not claim interface 0 before use [ 144.448411][T12061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12061 comm=syz.1.2913 [ 144.463715][T12058] loop4: detected capacity change from 0 to 2048 [ 144.479606][T12061] loop1: detected capacity change from 0 to 2048 [ 144.519995][T12061] loop1: p1 < > p4 [ 144.520151][T12058] loop4: p1 < > p4 [ 144.528988][T12058] loop4: p4 size 8388608 extends beyond EOD, truncated [ 144.553388][T12072] loop6: detected capacity change from 0 to 512 [ 144.561993][T12061] loop1: p4 size 8388608 extends beyond EOD, truncated [ 144.562865][T12058] SELinux: ebitmap: truncated map [ 144.578331][T12072] journal_path: Non-blockdev passed as './bus' [ 144.584600][T12072] EXT4-fs: error: could not find journal device path [ 144.600774][T12061] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 144.665842][T12080] loop5: detected capacity change from 0 to 128 [ 144.687624][T12076] xt_TPROXY: Can be used only with -p tcp or -p udp [ 144.792905][T12094] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 144.912709][T12106] loop6: detected capacity change from 0 to 1024 [ 144.912709][T12104] loop1: detected capacity change from 0 to 512 [ 144.935071][T12106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.960994][T12108] loop2: detected capacity change from 0 to 2048 [ 144.969607][T12104] journal_path: Non-blockdev passed as './bus' [ 144.975793][T12104] EXT4-fs: error: could not find journal device path [ 145.016438][T10435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.027222][T12108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.076349][T12108] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.2934: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 145.133672][T12108] EXT4-fs (loop2): Remounting filesystem read-only [ 145.157722][T12120] loop1: detected capacity change from 0 to 512 [ 145.172809][T12120] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.187876][T12120] EXT4-fs (loop1): mount failed [ 145.193863][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.264195][T12127] xt_TPROXY: Can be used only with -p tcp or -p udp [ 145.333704][T12135] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.431508][T12145] loop2: detected capacity change from 0 to 512 [ 145.445913][T12144] loop1: detected capacity change from 0 to 512 [ 145.454784][T12145] journal_path: Non-blockdev passed as './bus' [ 145.461015][T12145] EXT4-fs: error: could not find journal device path [ 145.485962][T12144] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.508902][T12144] EXT4-fs (loop1): mount failed [ 145.562146][T12152] loop2: detected capacity change from 0 to 128 [ 145.610161][T12161] xt_TPROXY: Can be used only with -p tcp or -p udp [ 145.673753][T12174] loop1: detected capacity change from 0 to 128 [ 145.713448][T12177] loop4: detected capacity change from 0 to 512 [ 145.722231][T12177] EXT4-fs (loop4): orphan cleanup on readonly fs [ 145.733416][T12177] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2958: bg 0: block 248: padding at end of block bitmap is not set [ 145.767015][T12177] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2958: Failed to acquire dquot type 1 [ 145.780552][T12177] EXT4-fs (loop4): 1 truncate cleaned up [ 145.786924][T12177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.849670][T12177] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 145.880067][T12177] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 145.919671][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.100624][T12197] __nla_validate_parse: 34 callbacks suppressed [ 146.100639][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2964'. [ 146.153501][T12200] loop5: detected capacity change from 0 to 512 [ 146.185547][T12202] xt_hashlimit: max too large, truncated to 1048576 [ 146.194121][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2965'. [ 146.204487][T12200] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 146.240080][T12200] EXT4-fs (loop5): mount failed [ 146.264507][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2964'. [ 146.273456][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2964'. [ 146.284368][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2964'. [ 146.336343][T12209] loop4: detected capacity change from 0 to 2048 [ 146.370035][T12209] loop4: p1 < > p4 [ 146.374495][T12209] loop4: p4 size 8388608 extends beyond EOD, truncated [ 146.420086][T12208] SELinux: ebitmap: truncated map [ 146.477902][T12219] netem: change failed [ 146.781731][T12231] loop1: detected capacity change from 0 to 2048 [ 146.790960][T12231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.805299][T12231] SELinux: policydb version 0 does not match my version range 15-34 [ 146.837750][T12234] loop4: detected capacity change from 0 to 2048 [ 146.870235][T12234] loop4: p1 < > p4 [ 146.874737][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.874783][T12234] loop4: p4 size 8388608 extends beyond EOD, truncated [ 146.910289][T12238] 9pnet_virtio: no channels available for device [ 146.918339][T12225] SELinux: ebitmap: truncated map [ 146.924333][T12225] sel_write_load: 4 callbacks suppressed [ 146.924351][T12225] SELinux: failed to load policy [ 146.985859][T12247] loop2: detected capacity change from 0 to 2048 [ 146.992487][T12250] netem: change failed [ 147.002104][T12248] netlink: 472 bytes leftover after parsing attributes in process `syz.1.2978'. [ 147.018065][T12252] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 147.023964][T12247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.042127][T12247] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.2983: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 147.060761][T12247] EXT4-fs (loop2): Remounting filesystem read-only [ 147.081588][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.114564][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2988'. [ 147.123279][T12263] loop2: detected capacity change from 0 to 1024 [ 147.129198][T12258] loop4: detected capacity change from 0 to 512 [ 147.142182][T12258] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.157367][T12258] EXT4-fs (loop4): mount failed [ 147.160422][T12263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.190237][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2988'. [ 147.199145][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2988'. [ 147.208422][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2988'. [ 147.307209][T12279] loop4: detected capacity change from 0 to 512 [ 147.343471][T12279] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.369696][T12279] EXT4-fs (loop4): mount failed [ 147.413779][T12290] loop1: detected capacity change from 0 to 2048 [ 147.429296][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.441783][T12293] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 147.470053][T12290] loop1: p1 < > p4 [ 147.474688][T12290] loop1: p4 size 8388608 extends beyond EOD, truncated [ 147.517963][T12282] SELinux: ebitmap: truncated map [ 147.524159][T12282] SELinux: failed to load policy [ 147.578208][T12313] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 147.589837][T12313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12313 comm=syz.1.3005 [ 147.625966][T12313] loop1: detected capacity change from 0 to 2048 [ 147.681429][T12313] loop1: p1 < > p4 [ 147.685961][T12313] loop1: p4 size 8388608 extends beyond EOD, truncated [ 147.704444][T12321] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 147.725231][T12313] SELinux: ebitmap: truncated map [ 147.732677][T12313] SELinux: failed to load policy [ 147.828886][T12332] loop1: detected capacity change from 0 to 2048 [ 147.849136][T12326] loop2: detected capacity change from 0 to 2048 [ 147.870737][T12332] loop1: p1 < > p4 [ 147.879698][T12332] loop1: p4 size 8388608 extends beyond EOD, truncated [ 147.889850][T12326] loop2: p1 < > p4 [ 147.908045][T12326] loop2: p4 size 8388608 extends beyond EOD, truncated [ 147.914190][T12332] SELinux: ebitmap: truncated map [ 147.921407][T12332] SELinux: failed to load policy [ 147.936183][T12334] loop4: detected capacity change from 0 to 2048 [ 147.961938][T12326] SELinux: ebitmap: truncated map [ 147.968021][T12326] SELinux: failed to load policy [ 148.010627][T12334] loop4: p1 < > p4 [ 148.012322][T12351] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 148.026492][T12334] loop4: p4 size 8388608 extends beyond EOD, truncated [ 148.057359][T12334] SELinux: ebitmap: truncated map [ 148.071053][T12334] SELinux: failed to load policy [ 148.089054][T12358] loop2: detected capacity change from 0 to 2048 [ 148.118185][T12358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.132281][T12370] loop6: detected capacity change from 0 to 512 [ 148.138863][T12370] journal_path: Non-blockdev passed as './bus' [ 148.143748][T12358] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.3018: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 148.145081][T12370] EXT4-fs: error: could not find journal device path [ 148.167772][T12369] loop4: detected capacity change from 0 to 512 [ 148.190246][T12358] EXT4-fs (loop2): Remounting filesystem read-only [ 148.208428][T12369] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 148.223443][T12369] EXT4-fs (loop4): mount failed [ 148.232103][T12380] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 148.240321][T12380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12380 comm=syz.6.3028 [ 148.253422][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.261595][T12380] loop6: detected capacity change from 0 to 2048 [ 148.311366][T12380] loop6: p1 < > p4 [ 148.335360][T12380] loop6: p4 size 8388608 extends beyond EOD, truncated [ 148.404310][T12380] SELinux: ebitmap: truncated map [ 148.417178][T12398] loop1: detected capacity change from 0 to 2048 [ 148.424144][T12380] SELinux: failed to load policy [ 148.480732][T12398] loop1: p1 < > p4 [ 148.485147][T12398] loop1: p4 size 8388608 extends beyond EOD, truncated [ 148.526441][T12383] SELinux: ebitmap: truncated map [ 148.541153][T12412] netlink: 'syz.5.3035': attribute type 1 has an invalid length. [ 148.555530][T12411] loop4: detected capacity change from 0 to 2048 [ 148.562031][T12383] SELinux: failed to load policy [ 148.639235][T12411] loop4: p1 < > p4 [ 148.647632][T12417] loop1: detected capacity change from 0 to 512 [ 148.654720][T12418] netlink: 'syz.6.3036': attribute type 1 has an invalid length. [ 148.670068][T12411] loop4: p4 size 8388608 extends beyond EOD, truncated [ 148.678500][T12417] journal_path: Non-blockdev passed as './bus' [ 148.684808][T12417] EXT4-fs: error: could not find journal device path [ 148.701715][T12392] chnl_net:caif_netlink_parms(): no params data found [ 148.760944][T12400] SELinux: ebitmap: truncated map [ 148.775508][T12400] SELinux: failed to load policy [ 148.896692][ T4590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.917430][T12437] FAULT_INJECTION: forcing a failure. [ 148.917430][T12437] name failslab, interval 1, probability 0, space 0, times 0 [ 148.930334][T12437] CPU: 1 UID: 0 PID: 12437 Comm: syz.4.3044 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 148.930364][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.930376][T12437] Call Trace: [ 148.930383][T12437] [ 148.930391][T12437] __dump_stack+0x1d/0x30 [ 148.930428][T12437] dump_stack_lvl+0xe8/0x140 [ 148.930450][T12437] dump_stack+0x15/0x1b [ 148.930468][T12437] should_fail_ex+0x265/0x280 [ 148.930511][T12437] ? audit_log_d_path+0x8d/0x150 [ 148.930551][T12437] should_failslab+0x8c/0xb0 [ 148.930575][T12437] __kmalloc_cache_noprof+0x4c/0x320 [ 148.930646][T12437] audit_log_d_path+0x8d/0x150 [ 148.930673][T12437] audit_log_d_path_exe+0x42/0x70 [ 148.930704][T12437] audit_log_task+0x1e9/0x250 [ 148.930735][T12437] audit_seccomp+0x61/0x100 [ 148.930834][T12437] ? __seccomp_filter+0x68c/0x10d0 [ 148.930858][T12437] __seccomp_filter+0x69d/0x10d0 [ 148.930889][T12437] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.930924][T12437] ? vfs_write+0x75e/0x8e0 [ 148.931007][T12437] ? __rcu_read_unlock+0x4f/0x70 [ 148.931028][T12437] ? __fget_files+0x184/0x1c0 [ 148.931047][T12437] __secure_computing+0x82/0x150 [ 148.931069][T12437] syscall_trace_enter+0xcf/0x1e0 [ 148.931145][T12437] do_syscall_64+0xac/0x200 [ 148.931276][T12437] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.931300][T12437] ? clear_bhb_loop+0x40/0x90 [ 148.931322][T12437] ? clear_bhb_loop+0x40/0x90 [ 148.931343][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.931408][T12437] RIP: 0033:0x7f436c63e929 [ 148.931422][T12437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.931437][T12437] RSP: 002b:00007f436aca7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 148.931453][T12437] RAX: ffffffffffffffda RBX: 00007f436c865fa0 RCX: 00007f436c63e929 [ 148.931474][T12437] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f436d3a4000 [ 148.931486][T12437] RBP: 00007f436aca7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.931556][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.931568][T12437] R13: 0000000000000000 R14: 00007f436c865fa0 R15: 00007ffd2062fe08 [ 148.931587][T12437] [ 148.938455][T12392] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.062295][T12442] loop6: detected capacity change from 0 to 2048 [ 149.064002][T12392] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.182308][T12392] bridge_slave_0: entered allmulticast mode [ 149.188915][T12392] bridge_slave_0: entered promiscuous mode [ 149.198314][T12392] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.205498][T12392] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.215367][T12392] bridge_slave_1: entered allmulticast mode [ 149.221935][T12392] bridge_slave_1: entered promiscuous mode [ 149.238816][ T4590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.249296][ T29] kauditd_printk_skb: 538 callbacks suppressed [ 149.249307][ T29] audit: type=1326 audit(1751049109.197:14576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c5e6e929 code=0x7ffc0000 [ 149.279411][ T29] audit: type=1326 audit(1751049109.197:14577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97c5e6e929 code=0x7ffc0000 [ 149.303196][ T29] audit: type=1326 audit(1751049109.197:14578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c5e6e929 code=0x7ffc0000 [ 149.326828][ T29] audit: type=1326 audit(1751049109.197:14579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f97c5e6e929 code=0x7ffc0000 [ 149.350414][ T29] audit: type=1326 audit(1751049109.197:14580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c5e6e929 code=0x7ffc0000 [ 149.374243][ T29] audit: type=1326 audit(1751049109.197:14581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97c5e6e929 code=0x7ffc0000 [ 149.374651][T12442] loop6: p1 < > p4 [ 149.397832][ T29] audit: type=1326 audit(1751049109.197:14582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c5e6e929 code=0x7ffc0000 [ 149.397858][ T29] audit: type=1326 audit(1751049109.197:14583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97c5e6e929 code=0x7ffc0000 [ 149.397913][ T29] audit: type=1326 audit(1751049109.197:14584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c5e6e929 code=0x7ffc0000 [ 149.406618][T12433] SELinux: ebitmap: truncated map [ 149.425324][ T29] audit: type=1326 audit(1751049109.197:14585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12444 comm="syz.1.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f97c5e6e929 code=0x7ffc0000 [ 149.451821][T12442] loop6: p4 size 8388608 extends beyond EOD, [ 149.478293][T12433] SELinux: failed to load policy [ 149.501140][T12442] truncated [ 149.531033][T12447] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 149.540350][T12392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.553521][T12392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.578990][T12392] team0: Port device team_slave_0 added [ 149.584709][T12451] loop1: detected capacity change from 0 to 512 [ 149.585802][T12392] team0: Port device team_slave_1 added [ 149.614411][T12451] journal_path: Non-blockdev passed as './bus' [ 149.620668][T12451] EXT4-fs: error: could not find journal device path [ 149.629107][ T4590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.663812][T12392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.670824][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.696759][T12392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.716551][T12392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.723680][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.749697][T12392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.768587][ T4590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.826659][T12392] hsr_slave_0: entered promiscuous mode [ 149.849606][T12392] hsr_slave_1: entered promiscuous mode [ 149.900409][T12479] loop4: detected capacity change from 0 to 512 [ 149.907267][T12479] journal_path: Non-blockdev passed as './bus' [ 149.913572][T12479] EXT4-fs: error: could not find journal device path [ 150.052737][ T4590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.062076][ T4590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.071324][ T4590] bond0 (unregistering): Released all slaves [ 150.082626][ T4590] bond1 (unregistering): Released all slaves [ 150.161939][ T4590] hsr_slave_0: left promiscuous mode [ 150.193084][ T4590] hsr_slave_1: left promiscuous mode [ 150.237714][ T4590] team0 (unregistering): Port device team_slave_0 removed [ 150.385013][T12511] loop4: detected capacity change from 0 to 2048 [ 150.440097][T12511] loop4: p1 < > p4 [ 150.444423][T12511] loop4: p4 size 8388608 extends beyond EOD, truncated [ 150.468500][T12511] SELinux: ebitmap: truncated map [ 150.506157][T12392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.515369][T12392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.526644][T12392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.536856][T12392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.576600][T12392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.590083][T12392] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.599295][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.606391][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.616929][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.624014][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.687412][T12392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.698539][ T4590] IPVS: stop unused estimator thread 0... [ 150.759284][T12392] veth0_vlan: entered promiscuous mode [ 150.772209][T12392] veth1_vlan: entered promiscuous mode [ 150.788684][T12392] veth0_macvtap: entered promiscuous mode [ 150.797506][T12392] veth1_macvtap: entered promiscuous mode [ 150.811524][T12392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.823050][T12392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.835061][T12392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.843975][T12392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.852724][T12392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.861559][T12392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.905238][T12550] loop6: detected capacity change from 0 to 128 [ 151.103718][T12576] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 151.126811][T12580] loop6: detected capacity change from 0 to 128 [ 151.254003][T12596] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 151.302035][T12604] loop5: detected capacity change from 0 to 512 [ 151.309652][T12604] journal_path: Non-blockdev passed as './bus' [ 151.315848][T12604] EXT4-fs: error: could not find journal device path [ 151.339101][T12608] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 151.370028][T12614] loop5: detected capacity change from 0 to 1024 [ 151.376755][T12616] loop6: detected capacity change from 0 to 128 [ 151.387184][T12614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.425577][T12625] loop6: detected capacity change from 0 to 2048 [ 151.442207][T12625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.456396][T12625] SELinux: policydb version 0 does not match my version range 15-34 [ 151.536546][T10435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.603068][T12634] loop1: detected capacity change from 0 to 2048 [ 151.611802][ T8534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.621267][T12636] loop6: detected capacity change from 0 to 2048 [ 151.635396][T12640] loop5: detected capacity change from 0 to 512 [ 151.643059][T12640] journal_path: Non-blockdev passed as './bus' [ 151.649288][T12640] EXT4-fs: error: could not find journal device path [ 151.650058][T12634] loop1: p1 < > p4 [ 151.660184][T12636] loop6: p1 < > p4 [ 151.664902][T12634] loop1: p4 size 8388608 extends beyond EOD, truncated [ 151.670085][T12636] loop6: p4 size 8388608 extends beyond EOD, truncated [ 151.708066][T12642] loop5: detected capacity change from 0 to 2048 [ 151.717772][T12636] SELinux: ebitmap: truncated map [ 151.724757][T12634] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 151.775996][T12642] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.3119: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 151.815777][T12642] EXT4-fs (loop5): Remounting filesystem read-only [ 151.865933][T12653] loop6: detected capacity change from 0 to 2048 [ 151.919653][T12653] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.3123: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 151.983796][T12653] EXT4-fs (loop6): Remounting filesystem read-only [ 152.040667][T12665] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 152.082567][T12675] loop1: detected capacity change from 0 to 512 [ 152.092514][T12678] loop2: detected capacity change from 0 to 128 [ 152.096052][T12675] journal_path: Non-blockdev passed as './bus' [ 152.105150][T12675] EXT4-fs: error: could not find journal device path [ 152.118616][T12676] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 152.134611][T12682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.142089][T12682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.150538][T12682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.158429][T12682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.188051][T12686] loop6: detected capacity change from 0 to 2048 [ 152.206420][T12687] loop5: detected capacity change from 0 to 2048 [ 152.227942][T12686] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.3134: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 152.246059][T12686] EXT4-fs (loop6): Remounting filesystem read-only [ 152.260882][T12687] loop5: p1 < > p4 [ 152.273049][T12687] loop5: p4 size 8388608 extends beyond EOD, truncated [ 152.286503][T12698] __nla_validate_parse: 11 callbacks suppressed [ 152.286519][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3137'. [ 152.305206][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.331614][T12698] loop1: detected capacity change from 0 to 512 [ 152.339079][T12647] chnl_net:caif_netlink_parms(): no params data found [ 152.339714][T12680] SELinux: ebitmap: truncated map [ 152.352681][T12680] sel_write_load: 4 callbacks suppressed [ 152.352692][T12680] SELinux: failed to load policy [ 152.373466][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.385994][T12698] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.401301][T12698] EXT4-fs (loop1): mount failed [ 152.425906][T12705] loop6: detected capacity change from 0 to 2048 [ 152.435141][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3137'. [ 152.444324][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3137'. [ 152.453561][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3137'. [ 152.463087][T12705] loop6: p1 < > p4 [ 152.463218][T12647] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.474183][T12647] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.482221][T12705] loop6: p4 size 8388608 extends beyond EOD, truncated [ 152.484051][T12647] bridge_slave_0: entered allmulticast mode [ 152.502443][T12647] bridge_slave_0: entered promiscuous mode [ 152.513154][T12702] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 152.525467][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.543621][T12702] SELinux: failed to load policy [ 152.563745][T12647] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.570908][T12647] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.578279][T12647] bridge_slave_1: entered allmulticast mode [ 152.584413][T12718] loop5: detected capacity change from 0 to 2048 [ 152.584839][T12647] bridge_slave_1: entered promiscuous mode [ 152.624015][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.638814][T12647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.648395][T12718] loop5: p1 < > p4 [ 152.651259][T12647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.652916][T12718] loop5: p4 size 8388608 extends beyond EOD, truncated [ 152.704621][T12647] team0: Port device team_slave_0 added [ 152.711896][T12718] SELinux: ebitmap: truncated map [ 152.719774][T12647] team0: Port device team_slave_1 added [ 152.727419][T12718] SELinux: failed to load policy [ 152.746631][T12736] loop6: detected capacity change from 0 to 2048 [ 152.766067][T12647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.773070][T12647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.799116][T12647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.818087][T12736] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.3147: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 152.835713][T12647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.842771][T12647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.847268][T12736] EXT4-fs (loop6): Remounting filesystem read-only [ 152.868726][T12647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.896657][T12743] loop5: detected capacity change from 0 to 2048 [ 152.897196][T12647] hsr_slave_0: entered promiscuous mode [ 152.909767][T12647] hsr_slave_1: entered promiscuous mode [ 152.915638][T12647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.931656][T12647] Cannot create hsr debugfs directory [ 152.940077][T12743] loop5: p1 < > p4 [ 152.951097][T12743] loop5: p4 size 8388608 extends beyond EOD, truncated [ 152.977462][T12747] loop6: detected capacity change from 0 to 2048 [ 152.995518][ T31] bond0 (unregistering): Released all slaves [ 152.996155][T12741] SELinux: ebitmap: truncated map [ 153.012352][T12741] SELinux: failed to load policy [ 153.017453][T12747] SELinux: policydb version 0 does not match my version range 15-34 [ 153.025880][T12747] SELinux: failed to load policy [ 153.035817][ T31] hsr_slave_0: left promiscuous mode [ 153.042909][ T31] hsr_slave_1: left promiscuous mode [ 153.052473][ T31] veth1_macvtap: left promiscuous mode [ 153.058123][ T31] veth0_macvtap: left promiscuous mode [ 153.063707][ T31] veth1_vlan: left promiscuous mode [ 153.069066][ T31] veth0_vlan: left promiscuous mode [ 153.128396][ T31] team0 (unregistering): Port device team_slave_0 removed [ 153.157931][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3152'. [ 153.166200][T12745] vhci_hcd: invalid port number 96 [ 153.172007][T12745] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 153.186189][T12755] loop5: detected capacity change from 0 to 512 [ 153.211778][T12755] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.226771][T12755] EXT4-fs (loop5): mount failed [ 153.236361][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3152'. [ 153.245364][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3152'. [ 153.254303][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3152'. [ 153.358789][T12772] loop6: detected capacity change from 0 to 1024 [ 153.477904][T12778] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 153.519198][T12787] loop5: detected capacity change from 0 to 128 [ 153.529975][ T31] IPVS: stop unused estimator thread 0... [ 153.560762][T12647] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 153.570588][T12647] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 153.581589][T12647] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 153.592658][T12795] netlink: 472 bytes leftover after parsing attributes in process `syz.5.3167'. [ 153.602728][T12647] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 153.647594][T12647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.663314][T12647] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.685210][ T4590] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.692346][ T4590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.709093][ T4590] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.716209][ T4590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.757606][T12807] loop1: detected capacity change from 0 to 1024 [ 153.828989][T12647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.973330][T12822] loop5: detected capacity change from 0 to 2048 [ 154.006566][T12837] loop2: detected capacity change from 0 to 128 [ 154.051954][T12822] loop5: p1 < > p4 [ 154.059223][T12822] loop5: p4 size 8388608 extends beyond EOD, truncated [ 154.076188][T12847] netlink: 472 bytes leftover after parsing attributes in process `syz.1.3177'. [ 154.085558][T12845] loop2: detected capacity change from 0 to 2048 [ 154.091666][T12647] veth0_vlan: entered promiscuous mode [ 154.105909][T12647] veth1_vlan: entered promiscuous mode [ 154.116615][T12822] SELinux: ebitmap: truncated map [ 154.118642][T12647] veth0_macvtap: entered promiscuous mode [ 154.128812][T12822] SELinux: failed to load policy [ 154.129107][T12647] veth1_macvtap: entered promiscuous mode [ 154.149159][T12647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.149163][T12845] loop2: p1 < > p4 [ 154.152209][T12647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.157112][T12845] loop2: p4 size 8388608 extends beyond EOD, [ 154.164339][T12647] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.167690][T12845] truncated [ 154.173900][T12647] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.195169][T12647] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.203925][T12647] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.227373][T12845] SELinux: ebitmap: truncated map [ 154.240741][T12845] SELinux: failed to load policy [ 154.276112][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 154.276127][ T29] audit: type=1326 audit(1751049114.227:14990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12856 comm="syz.4.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34d77e929 code=0x7ffc0000 [ 154.315722][T12858] bridge_slave_1: left allmulticast mode [ 154.321492][T12858] bridge_slave_1: left promiscuous mode [ 154.327198][T12858] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.335350][T12861] program syz.5.3181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.342842][ T29] audit: type=1326 audit(1751049114.237:14991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4cd3e929 code=0x7ffc0000 [ 154.368269][ T29] audit: type=1326 audit(1751049114.237:14992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4cd3e929 code=0x7ffc0000 [ 154.391948][ T29] audit: type=1326 audit(1751049114.237:14993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbe4cd3e929 code=0x7ffc0000 [ 154.415609][ T29] audit: type=1326 audit(1751049114.237:14994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4cd3e929 code=0x7ffc0000 [ 154.439276][ T29] audit: type=1326 audit(1751049114.237:14995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4cd3e929 code=0x7ffc0000 [ 154.462869][ T29] audit: type=1326 audit(1751049114.237:14996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe4cd3e929 code=0x7ffc0000 [ 154.486621][ T29] audit: type=1326 audit(1751049114.237:14997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4cd3e929 code=0x7ffc0000 [ 154.510381][ T29] audit: type=1326 audit(1751049114.237:14998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4cd3e929 code=0x7ffc0000 [ 154.534000][ T29] audit: type=1326 audit(1751049114.237:14999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12860 comm="syz.5.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe4cd3e929 code=0x7ffc0000 [ 154.561973][T12868] loop2: detected capacity change from 0 to 512 [ 154.579285][T12858] bridge_slave_0: left allmulticast mode [ 154.585240][T12858] bridge_slave_0: left promiscuous mode [ 154.591149][T12858] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.620633][T12868] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 154.652275][T12876] loop4: detected capacity change from 0 to 128 [ 154.659502][T12868] EXT4-fs (loop2): mount failed [ 154.793166][T12894] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 154.855177][T12869] chnl_net:caif_netlink_parms(): no params data found [ 154.882489][ T3427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.902471][T12910] loop2: detected capacity change from 0 to 2048 [ 154.930056][T12914] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 154.958503][T12910] SELinux: policydb version 0 does not match my version range 15-34 [ 154.967994][T12926] loop5: detected capacity change from 0 to 1024 [ 154.968435][T12910] SELinux: failed to load policy [ 154.976964][ T3427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.989908][T12913] loop6: detected capacity change from 0 to 2048 [ 155.029852][T12913] loop6: p1 < > p4 [ 155.080907][T12913] loop6: p4 size 8388608 extends beyond EOD, truncated [ 155.135866][T12869] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.142988][T12869] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.152735][T12903] SELinux: ebitmap: truncated map [ 155.154447][T12869] bridge_slave_0: entered allmulticast mode [ 155.164287][T12903] SELinux: failed to load policy [ 155.172070][T12869] bridge_slave_0: entered promiscuous mode [ 155.183657][ T3427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.211736][T12933] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.248810][T12933] loop6: detected capacity change from 0 to 2048 [ 155.257777][T12869] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.265081][T12869] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.265153][T12935] loop4: detected capacity change from 0 to 1024 [ 155.272527][T12869] bridge_slave_1: entered allmulticast mode [ 155.286964][T12869] bridge_slave_1: entered promiscuous mode [ 155.310144][T12933] loop6: p1 < > p4 [ 155.314484][T12933] loop6: p4 size 8388608 extends beyond EOD, truncated [ 155.324132][T12869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.345965][ T3427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.375778][T12933] SELinux: ebitmap: truncated map [ 155.385191][T12933] SELinux: failed to load policy [ 155.385446][T12869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.430976][T12869] team0: Port device team_slave_0 added [ 155.439572][T12869] team0: Port device team_slave_1 added [ 155.451390][T12947] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 155.492904][T12869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.499978][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.526087][T12869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.542307][T12953] loop5: detected capacity change from 0 to 512 [ 155.546588][T12869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.555726][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.581709][T12869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.589916][T12953] journal_path: Non-blockdev passed as './bus' [ 155.598576][T12953] EXT4-fs: error: could not find journal device path [ 155.675082][T12869] hsr_slave_0: entered promiscuous mode [ 155.683025][T12869] hsr_slave_1: entered promiscuous mode [ 155.688880][T12869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.701775][T12869] Cannot create hsr debugfs directory [ 155.721092][ T3427] veth1_macvtap: left promiscuous mode [ 155.726816][ T3427] veth0_macvtap: left promiscuous mode [ 155.733708][ T3427] veth1_vlan: left promiscuous mode [ 155.739015][ T3427] veth0_vlan: left promiscuous mode [ 155.776627][T12961] loop2: detected capacity change from 0 to 2048 [ 155.787702][T12964] loop4: detected capacity change from 0 to 2048 [ 155.810808][T12961] loop2: p1 < > p4 [ 155.815434][T12961] loop2: p4 size 8388608 extends beyond EOD, truncated [ 155.824363][T12964] loop4: p1 < > p4 [ 155.836056][T12964] loop4: p4 size 8388608 extends beyond EOD, truncated [ 155.863952][T12961] SELinux: ebitmap: truncated map [ 155.967909][T12973] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.985368][T12973] loop2: detected capacity change from 0 to 2048 [ 155.986792][ T3427] IPVS: stop unused estimator thread 0... [ 156.021946][T12983] loop6: detected capacity change from 0 to 1024 [ 156.030379][T12973] loop2: p1 < > p4 [ 156.036082][T12973] loop2: p4 size 8388608 extends beyond EOD, truncated [ 156.074064][T12973] SELinux: ebitmap: truncated map [ 156.147457][T12992] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 156.246970][T13007] loop5: detected capacity change from 0 to 128 [ 156.283472][T13015] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.299173][T13015] loop4: detected capacity change from 0 to 2048 [ 156.304347][T12869] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 156.330296][T12869] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.341196][T12869] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 156.353369][T13018] loop2: detected capacity change from 0 to 512 [ 156.361377][T13015] loop4: p1 < > p4 [ 156.366012][T13015] loop4: p4 size 8388608 extends beyond EOD, truncated [ 156.371617][T13018] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.388358][T12869] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 156.395845][T13018] EXT4-fs (loop2): mount failed [ 156.447901][T13015] SELinux: ebitmap: truncated map [ 156.455634][T13031] loop2: detected capacity change from 0 to 512 [ 156.456044][T12869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.474516][T12869] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.481638][T13031] journal_path: Non-blockdev passed as './bus' [ 156.487814][T13031] EXT4-fs: error: could not find journal device path [ 156.500494][T13033] loop5: detected capacity change from 0 to 2048 [ 156.500824][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.507309][T13011] vhci_hcd: invalid port number 96 [ 156.513901][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.524145][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.526238][T13011] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 156.540449][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.560011][T13037] SELinux: syz.2.3239 (13037) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 156.577623][T13033] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.3238: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 156.595164][T13033] EXT4-fs (loop5): Remounting filesystem read-only [ 156.639001][T13043] loop5: detected capacity change from 0 to 1024 [ 156.665428][T12869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.674438][T13051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.682087][T13051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.689926][T13051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.697320][T13051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.710660][T13055] SELinux: syz.2.3245 (13055) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 156.772282][T13059] loop2: detected capacity change from 0 to 2048 [ 156.800380][T13059] loop2: p1 < > p4 [ 156.805374][T13059] loop2: p4 size 8388608 extends beyond EOD, truncated [ 156.822499][T12869] veth0_vlan: entered promiscuous mode [ 156.849389][T12869] veth1_vlan: entered promiscuous mode [ 156.857358][ T8534] EXT4-fs unmount: 25 callbacks suppressed [ 156.857370][ T8534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.864530][T12869] veth0_macvtap: entered promiscuous mode [ 156.881277][T13059] SELinux: ebitmap: truncated map [ 156.884419][T12869] veth1_macvtap: entered promiscuous mode [ 156.902933][T12869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.921093][T12869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.946083][T12869] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.954968][T12869] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.963747][T12869] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.972556][T12869] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.997557][T13072] loop2: detected capacity change from 0 to 512 [ 157.005690][T13072] journal_path: Non-blockdev passed as './bus' [ 157.011900][T13072] EXT4-fs: error: could not find journal device path [ 157.065641][T13075] loop5: detected capacity change from 0 to 2048 [ 157.107503][T13080] usb usb7: usbfs: process 13080 (syz.6.3252) did not claim interface 0 before use [ 157.121468][T13075] loop5: p1 < > p4 [ 157.126249][T13075] loop5: p4 size 8388608 extends beyond EOD, truncated [ 157.142308][T13080] loop6: detected capacity change from 0 to 2048 [ 157.148849][T13081] loop2: detected capacity change from 0 to 2048 [ 157.164456][T13077] loop1: detected capacity change from 0 to 2048 [ 157.174971][T13073] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 157.190641][T13080] loop6: p1 < > p4 [ 157.195224][T13080] loop6: p4 size 8388608 extends beyond EOD, truncated [ 157.209911][T13081] loop2: p1 < > p4 [ 157.214186][T13081] loop2: p4 size 8388608 extends beyond EOD, truncated [ 157.222748][T13077] loop1: p1 < > p4 [ 157.227602][T13080] SELinux: ebitmap: truncated map [ 157.233039][T13077] loop1: p4 size 8388608 extends beyond EOD, truncated [ 157.234038][T13081] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 157.268627][T13077] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 157.399420][T13100] loop2: detected capacity change from 0 to 2048 [ 157.419285][T13103] loop5: detected capacity change from 0 to 1024 [ 157.440752][T13100] loop2: p1 < > p4 [ 157.441552][T13103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.445534][T13100] loop2: p4 size 8388608 extends beyond EOD, truncated [ 157.537017][T13109] loop6: detected capacity change from 0 to 512 [ 157.546389][T13098] SELinux: ebitmap: truncated map [ 157.553338][T13111] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 157.559861][T13109] journal_path: Non-blockdev passed as './bus' [ 157.566523][T13109] EXT4-fs: error: could not find journal device path [ 157.569854][T13098] sel_write_load: 8 callbacks suppressed [ 157.570017][T13098] SELinux: failed to load policy [ 157.731508][T13126] loop1: detected capacity change from 0 to 2048 [ 157.740125][T13127] netlink: 'syz.6.3264': attribute type 1 has an invalid length. [ 157.792454][T13126] loop1: p1 < > p4 [ 157.798160][T13126] loop1: p4 size 8388608 extends beyond EOD, truncated [ 157.819857][ T8534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.834509][T13119] SELinux: ebitmap: truncated map [ 157.840355][T13119] SELinux: failed to load policy [ 157.872513][T13135] __nla_validate_parse: 10 callbacks suppressed [ 157.872533][T13135] netlink: 472 bytes leftover after parsing attributes in process `syz.6.3270'. [ 157.883428][T13139] loop1: detected capacity change from 0 to 2048 [ 157.888108][T13133] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 157.913628][T13139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.931185][T13139] SELinux: policydb version 0 does not match my version range 15-34 [ 157.939371][T13139] SELinux: failed to load policy [ 157.984705][T13147] loop6: detected capacity change from 0 to 2048 [ 158.010279][T12869] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.044319][T13157] loop1: detected capacity change from 0 to 512 [ 158.052483][T13157] journal_path: Non-blockdev passed as './bus' [ 158.058729][T13157] EXT4-fs: error: could not find journal device path [ 158.067650][T13147] loop6: p1 < > p4 [ 158.072323][T13147] loop6: p4 size 8388608 extends beyond EOD, truncated [ 158.090354][T13162] usb usb7: usbfs: process 13162 (syz.5.3279) did not claim interface 0 before use [ 158.129005][T13166] loop1: detected capacity change from 0 to 2048 [ 158.138745][T13147] SELinux: ebitmap: truncated map [ 158.144366][T13147] SELinux: failed to load policy [ 158.155609][T13155] loop5: detected capacity change from 0 to 2048 [ 158.159934][T13166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.195786][T13169] netlink: 'syz.2.3281': attribute type 1 has an invalid length. [ 158.200869][T13166] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.3282: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 158.221186][T13166] EXT4-fs (loop1): Remounting filesystem read-only [ 158.231318][T13155] loop5: p1 < > p4 [ 158.238870][T13155] loop5: p4 size 8388608 extends beyond EOD, truncated [ 158.247938][T12869] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.300964][T13175] netlink: 472 bytes leftover after parsing attributes in process `syz.1.3285'. [ 158.302869][T13155] SELinux: ebitmap: truncated map [ 158.318788][T13155] SELinux: failed to load policy [ 158.356183][T13182] SELinux: syz.4.3288 (13182) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 158.360171][T13188] xt_hashlimit: max too large, truncated to 1048576 [ 158.397684][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3291'. [ 158.476723][T13192] loop4: detected capacity change from 0 to 2048 [ 158.491379][T13197] loop1: detected capacity change from 0 to 2048 [ 158.501180][T13192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.518000][T13197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.519281][T13192] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.3294: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 158.533077][T13197] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.3295: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 158.599236][T13207] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.614793][T13192] EXT4-fs (loop4): Remounting filesystem read-only [ 158.621467][T13207] loop6: detected capacity change from 0 to 2048 [ 158.621533][T13197] EXT4-fs (loop1): Remounting filesystem read-only [ 158.640005][T13207] loop6: p1 < > p4 [ 158.644342][T13207] loop6: p4 size 8388608 extends beyond EOD, truncated [ 158.671788][T12869] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.682791][T13207] SELinux: ebitmap: truncated map [ 158.688257][T13207] SELinux: failed to load policy [ 158.698449][T12647] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.804359][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3303'. [ 158.816525][T13225] loop6: detected capacity change from 0 to 512 [ 158.831660][T13225] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 158.847173][T13225] EXT4-fs (loop6): mount failed [ 158.855311][T13230] loop1: detected capacity change from 0 to 2048 [ 158.866931][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3303'. [ 158.876085][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3303'. [ 158.885534][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3303'. [ 158.901102][T13230] loop1: p1 < > p4 [ 158.905402][T13230] loop1: p4 size 8388608 extends beyond EOD, truncated [ 158.916220][T13220] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 158.934289][T13220] SELinux: failed to load policy [ 158.977004][T13238] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3308'. [ 158.991925][T13238] hsr_slave_0: left promiscuous mode [ 159.001723][T13240] loop1: detected capacity change from 0 to 1024 [ 159.008150][T13238] hsr_slave_1: left promiscuous mode [ 159.025515][T13240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.069375][T13242] loop6: detected capacity change from 0 to 2048 [ 159.094024][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3308'. [ 159.103031][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3308'. [ 159.115168][T13251] SELinux: syz.2.3311 (13251) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 159.130875][T13242] loop6: p1 < > p4 [ 159.139207][T13242] loop6: p4 size 8388608 extends beyond EOD, truncated [ 159.147957][T13238] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.156846][T13238] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.165564][T13238] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.174316][T13238] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.241815][T12869] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.261480][T13255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.270548][T13255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.299005][T13263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.306537][T13263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.316459][T13263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.324001][T13263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.346993][T13265] netlink: 'syz.4.3316': attribute type 1 has an invalid length. [ 159.398926][T13268] loop6: detected capacity change from 0 to 2048 [ 159.449791][T13268] loop6: p1 < > p4 [ 159.454195][T13268] loop6: p4 size 8388608 extends beyond EOD, truncated [ 159.479747][T13268] SELinux: ebitmap: truncated map [ 159.485175][T13268] SELinux: failed to load policy [ 159.512228][ T29] kauditd_printk_skb: 791 callbacks suppressed [ 159.512283][ T29] audit: type=1326 audit(1751049119.467:15788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.6.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 159.542558][ T29] audit: type=1326 audit(1751049119.467:15789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.6.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 159.566172][ T29] audit: type=1326 audit(1751049119.467:15790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.6.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 159.589885][ T29] audit: type=1326 audit(1751049119.467:15791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.6.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 159.613681][ T29] audit: type=1326 audit(1751049119.467:15792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.6.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 159.630121][T13280] SELinux: syz.5.3322 (13280) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 159.637488][ T29] audit: type=1326 audit(1751049119.467:15793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.6.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 159.674857][ T29] audit: type=1326 audit(1751049119.467:15794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.6.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 159.698559][ T29] audit: type=1326 audit(1751049119.467:15795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.6.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 159.722224][ T29] audit: type=1326 audit(1751049119.467:15796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.6.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 159.745878][ T29] audit: type=1326 audit(1751049119.467:15797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.6.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff148a8e929 code=0x7ffc0000 [ 159.778841][T13284] loop5: detected capacity change from 0 to 512 [ 159.790613][T13284] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 159.805515][T13284] EXT4-fs (loop5): mount failed [ 159.923972][T13292] FAULT_INJECTION: forcing a failure. [ 159.923972][T13292] name failslab, interval 1, probability 0, space 0, times 0 [ 159.936703][T13292] CPU: 0 UID: 0 PID: 13292 Comm: +}[@ Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 159.936731][T13292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.936743][T13292] Call Trace: [ 159.936750][T13292] [ 159.936799][T13292] __dump_stack+0x1d/0x30 [ 159.936821][T13292] dump_stack_lvl+0xe8/0x140 [ 159.936839][T13292] dump_stack+0x15/0x1b [ 159.936857][T13292] should_fail_ex+0x265/0x280 [ 159.936885][T13292] should_failslab+0x8c/0xb0 [ 159.936976][T13292] kmem_cache_alloc_noprof+0x50/0x310 [ 159.936998][T13292] ? audit_log_start+0x365/0x6c0 [ 159.937031][T13292] audit_log_start+0x365/0x6c0 [ 159.937134][T13292] audit_seccomp+0x48/0x100 [ 159.937159][T13292] ? __seccomp_filter+0x68c/0x10d0 [ 159.937292][T13292] __seccomp_filter+0x69d/0x10d0 [ 159.937371][T13292] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 159.937398][T13292] ? vfs_write+0x75e/0x8e0 [ 159.937486][T13292] ? __rcu_read_unlock+0x4f/0x70 [ 159.937503][T13292] ? __fget_files+0x184/0x1c0 [ 159.937521][T13292] __secure_computing+0x82/0x150 [ 159.937539][T13292] syscall_trace_enter+0xcf/0x1e0 [ 159.937559][T13292] do_syscall_64+0xac/0x200 [ 159.937646][T13292] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 159.937665][T13292] ? clear_bhb_loop+0x40/0x90 [ 159.937689][T13292] ? clear_bhb_loop+0x40/0x90 [ 159.937777][T13292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.937794][T13292] RIP: 0033:0x7ff148a8e929 [ 159.937808][T13292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.937822][T13292] RSP: 002b:00007ff1470f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.937841][T13292] RAX: ffffffffffffffda RBX: 00007ff148cb5fa0 RCX: 00007ff148a8e929 [ 159.937851][T13292] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000004 [ 159.937942][T13292] RBP: 00007ff1470f7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.937952][T13292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.937962][T13292] R13: 0000000000000000 R14: 00007ff148cb5fa0 R15: 00007fff49b59cf8 [ 159.937977][T13292] [ 160.352879][T13309] loop6: detected capacity change from 0 to 2048 [ 160.399894][T13309] loop6: p1 < > p4 [ 160.404308][T13309] loop6: p4 size 8388608 extends beyond EOD, truncated [ 160.432633][T13309] SELinux: ebitmap: truncated map [ 160.438119][T13309] SELinux: failed to load policy [ 160.465296][T13313] program syz.6.3333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.499891][T13317] FAULT_INJECTION: forcing a failure. [ 160.499891][T13317] name failslab, interval 1, probability 0, space 0, times 0 [ 160.512647][T13317] CPU: 0 UID: 0 PID: 13317 Comm: syz.6.3335 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 160.512675][T13317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.512687][T13317] Call Trace: [ 160.512692][T13317] [ 160.512698][T13317] __dump_stack+0x1d/0x30 [ 160.512745][T13317] dump_stack_lvl+0xe8/0x140 [ 160.512765][T13317] dump_stack+0x15/0x1b [ 160.512782][T13317] should_fail_ex+0x265/0x280 [ 160.512813][T13317] should_failslab+0x8c/0xb0 [ 160.512836][T13317] kmem_cache_alloc_node_noprof+0x57/0x320 [ 160.512860][T13317] ? __alloc_skb+0x101/0x320 [ 160.512886][T13317] __alloc_skb+0x101/0x320 [ 160.512984][T13317] netlink_alloc_large_skb+0xba/0xf0 [ 160.513010][T13317] netlink_sendmsg+0x3cf/0x6b0 [ 160.513028][T13317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.513046][T13317] __sock_sendmsg+0x142/0x180 [ 160.513071][T13317] ____sys_sendmsg+0x31e/0x4e0 [ 160.513131][T13317] ___sys_sendmsg+0x17b/0x1d0 [ 160.513169][T13317] __x64_sys_sendmsg+0xd4/0x160 [ 160.513308][T13317] x64_sys_call+0x2999/0x2fb0 [ 160.513327][T13317] do_syscall_64+0xd2/0x200 [ 160.513346][T13317] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.513373][T13317] ? clear_bhb_loop+0x40/0x90 [ 160.513444][T13317] ? clear_bhb_loop+0x40/0x90 [ 160.513467][T13317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.513541][T13317] RIP: 0033:0x7ff148a8e929 [ 160.513555][T13317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.513566][T13317] RSP: 002b:00007ff1470f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.513577][T13317] RAX: ffffffffffffffda RBX: 00007ff148cb5fa0 RCX: 00007ff148a8e929 [ 160.513585][T13317] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 160.513592][T13317] RBP: 00007ff1470f7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.513709][T13317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.513716][T13317] R13: 0000000000000000 R14: 00007ff148cb5fa0 R15: 00007fff49b59cf8 [ 160.513750][T13317] [ 160.746712][T13321] loop5: detected capacity change from 0 to 512 [ 160.753550][T13321] journal_path: Non-blockdev passed as './bus' [ 160.759750][T13321] EXT4-fs: error: could not find journal device path [ 160.993132][T13335] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 161.058959][T13335] loop5: detected capacity change from 0 to 2048 [ 161.090359][T13338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.100719][T13338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.140306][T13335] loop5: p1 < > p4 [ 161.145028][T13335] loop5: p4 size 8388608 extends beyond EOD, truncated [ 161.194217][T13338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.204558][T13338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.215178][T13344] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 161.225197][T13344] SELinux: failed to load policy [ 161.281548][T13338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.291898][T13338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.312805][T13348] FAULT_INJECTION: forcing a failure. [ 161.312805][T13348] name failslab, interval 1, probability 0, space 0, times 0 [ 161.325470][T13348] CPU: 0 UID: 0 PID: 13348 Comm: syz.2.3349 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 161.325517][T13348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.325527][T13348] Call Trace: [ 161.325533][T13348] [ 161.325541][T13348] __dump_stack+0x1d/0x30 [ 161.325564][T13348] dump_stack_lvl+0xe8/0x140 [ 161.325591][T13348] dump_stack+0x15/0x1b [ 161.325608][T13348] should_fail_ex+0x265/0x280 [ 161.325715][T13348] should_failslab+0x8c/0xb0 [ 161.325739][T13348] kmem_cache_alloc_node_noprof+0x57/0x320 [ 161.325768][T13348] ? __alloc_skb+0x101/0x320 [ 161.325871][T13348] __alloc_skb+0x101/0x320 [ 161.325899][T13348] netlink_alloc_large_skb+0xba/0xf0 [ 161.325926][T13348] netlink_sendmsg+0x3cf/0x6b0 [ 161.325980][T13348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.326001][T13348] __sock_sendmsg+0x142/0x180 [ 161.326024][T13348] ____sys_sendmsg+0x31e/0x4e0 [ 161.326114][T13348] ___sys_sendmsg+0x17b/0x1d0 [ 161.326151][T13348] __x64_sys_sendmsg+0xd4/0x160 [ 161.326210][T13348] x64_sys_call+0x2999/0x2fb0 [ 161.326233][T13348] do_syscall_64+0xd2/0x200 [ 161.326252][T13348] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.326330][T13348] ? clear_bhb_loop+0x40/0x90 [ 161.326352][T13348] ? clear_bhb_loop+0x40/0x90 [ 161.326436][T13348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.326510][T13348] RIP: 0033:0x7fb3335be929 [ 161.326522][T13348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.326540][T13348] RSP: 002b:00007fb331c27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.326560][T13348] RAX: ffffffffffffffda RBX: 00007fb3337e5fa0 RCX: 00007fb3335be929 [ 161.326579][T13348] RDX: 0000000000008844 RSI: 0000200000000080 RDI: 0000000000000008 [ 161.326592][T13348] RBP: 00007fb331c27090 R08: 0000000000000000 R09: 0000000000000000 [ 161.326606][T13348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.326635][T13348] R13: 0000000000000000 R14: 00007fb3337e5fa0 R15: 00007ffeb4b5ab68 [ 161.326655][T13348] [ 161.581044][T13338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.591417][T13338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.618322][T13356] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 161.649243][T13355] loop1: detected capacity change from 0 to 2048 [ 161.674420][T13338] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.682650][T13338] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.732440][T13338] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.739757][T13355] loop1: p1 < > p4 [ 161.740721][T13338] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.752881][T13355] loop1: p4 size 8388608 extends beyond EOD, truncated [ 161.785956][T13338] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.794214][T13338] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.806241][T13362] loop5: detected capacity change from 0 to 512 [ 161.816200][T13365] loop2: detected capacity change from 0 to 2048 [ 161.816440][T13338] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.830871][T13338] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.845706][T13352] SELinux: ebitmap: truncated map [ 161.864716][T13365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.864764][T13362] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.913172][T13362] EXT4-fs (loop5): mount failed [ 161.913871][T12392] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.969424][T13380] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 162.014709][T13374] loop4: detected capacity change from 0 to 2048 [ 162.033968][T13390] SELinux: syz.2.3362 (13390) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 162.062888][T13388] loop5: detected capacity change from 0 to 2048 [ 162.070680][T13374] loop4: p1 < > p4 [ 162.075513][T13374] loop4: p4 size 8388608 extends beyond EOD, truncated [ 162.114299][T13388] loop5: p1 < > p4 [ 162.118536][T13388] loop5: p4 size 8388608 extends beyond EOD, truncated [ 162.126927][T13388] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 162.144440][T13374] SELinux: ebitmap: truncated map [ 162.164243][T13397] loop5: detected capacity change from 0 to 2048 [ 162.177143][T13400] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 162.183797][T13400] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.191463][T13400] vhci_hcd vhci_hcd.0: Device attached [ 162.208800][T13400] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 162.215450][T13400] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.223014][T13400] vhci_hcd vhci_hcd.0: Device attached [ 162.235332][T13397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.250053][T13410] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 162.263429][T13400] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16) [ 162.270123][T13400] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 162.277841][T13400] vhci_hcd vhci_hcd.0: Device attached [ 162.296240][T13400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.304996][T13400] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 162.311600][T13400] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.319258][T13400] vhci_hcd vhci_hcd.0: Device attached [ 162.375125][T13426] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(23) [ 162.381796][T13426] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 162.389678][T13426] vhci_hcd vhci_hcd.0: Device attached [ 162.395236][T13420] loop6: detected capacity change from 0 to 512 [ 162.395311][T13426] ================================================================== [ 162.395340][T13426] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 162.395376][T13426] [ 162.395381][T13426] write to 0xffffffff8686af50 of 8 bytes by task 13420 on cpu 0: [ 162.395395][T13426] data_alloc+0x271/0x2b0 [ 162.395420][T13426] prb_reserve+0x808/0xaf0 [ 162.395445][T13426] vprintk_store+0x56d/0x860 [ 162.395462][T13426] vprintk_emit+0x178/0x650 [ 162.395478][T13426] vprintk_default+0x26/0x30 [ 162.395494][T13426] vprintk+0x1d/0x30 [ 162.395512][T13426] _printk+0x79/0xa0 [ 162.395534][T13426] set_capacity_and_notify+0x14c/0x1f0 [ 162.395562][T13426] loop_set_size+0x2e/0x70 [ 162.395578][T13426] loop_configure+0x8d3/0xa50 [ 162.395604][T13426] lo_ioctl+0x559/0x15d0 [ 162.395629][T13426] blkdev_ioctl+0x34f/0x440 [ 162.395655][T13426] __se_sys_ioctl+0xce/0x140 [ 162.395678][T13426] __x64_sys_ioctl+0x43/0x50 [ 162.395700][T13426] x64_sys_call+0x19a8/0x2fb0 [ 162.395718][T13426] do_syscall_64+0xd2/0x200 [ 162.395733][T13426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.395753][T13426] [ 162.395758][T13426] read to 0xffffffff8686af50 of 16 bytes by task 13426 on cpu 1: [ 162.395772][T13426] _prb_read_valid+0x1bc/0x920 [ 162.395799][T13426] prb_read_valid+0x3c/0x60 [ 162.395827][T13426] printk_get_next_message+0xc8/0x510 [ 162.395848][T13426] console_flush_all+0x290/0x730 [ 162.395867][T13426] console_unlock+0xa1/0x330 [ 162.395881][T13426] vprintk_emit+0x388/0x650 [ 162.395895][T13426] dev_vprintk_emit+0x242/0x2a0 [ 162.395913][T13426] dev_printk_emit+0x84/0xb0 [ 162.395934][T13426] __dev_printk+0xf3/0x110 [ 162.395956][T13426] _dev_info+0x9b/0xd0 [ 162.395974][T13426] attach_store+0x5f8/0x680 [ 162.395995][T13426] dev_attr_store+0x4a/0x70 [ 162.396014][T13426] sysfs_kf_write+0xfe/0x120 [ 162.396032][T13426] kernfs_fop_write_iter+0x1c1/0x2d0 [ 162.396049][T13426] vfs_write+0x4a0/0x8e0 [ 162.396070][T13426] ksys_write+0xda/0x1a0 [ 162.396091][T13426] __x64_sys_write+0x40/0x50 [ 162.396112][T13426] x64_sys_call+0x2cdd/0x2fb0 [ 162.396128][T13426] do_syscall_64+0xd2/0x200 [ 162.396140][T13426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.396156][T13426] [ 162.396159][T13426] Reported by Kernel Concurrency Sanitizer on: [ 162.396168][T13426] CPU: 1 UID: 0 PID: 13426 Comm: syz.4.3366 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 162.396189][T13426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.396199][T13426] ================================================================== [ 162.429388][T13420] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 162.469788][T13400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.500092][T13420] EXT4-fs (loop6): mount failed [ 162.543856][T13426] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.544650][ T3385] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 162.561027][T13426] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.649329][T13400] FAULT_INJECTION: forcing a failure. [ 162.649329][T13400] name failslab, interval 1, probability 0, space 0, times 0 [ 162.712738][T13400] CPU: 0 UID: 0 PID: 13400 Comm: syz.4.3366 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 162.712830][T13400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.712840][T13400] Call Trace: [ 162.712846][T13400] [ 162.712853][T13400] __dump_stack+0x1d/0x30 [ 162.712873][T13400] dump_stack_lvl+0xe8/0x140 [ 162.712963][T13400] dump_stack+0x15/0x1b [ 162.712977][T13400] should_fail_ex+0x265/0x280 [ 162.713003][T13400] should_failslab+0x8c/0xb0 [ 162.713047][T13400] __kmalloc_noprof+0xa5/0x3e0 [ 162.713104][T13400] ? io_alloc_ocqe+0x51/0x250 [ 162.713133][T13400] io_alloc_ocqe+0x51/0x250 [ 162.713211][T13400] io_cqe_overflow_locked+0x26/0x40 [ 162.713231][T13400] __io_submit_flush_completions+0x258/0xa00 [ 162.713300][T13400] ? io_submit_fail_init+0x21a/0x2f0 [ 162.713324][T13400] ? io_renameat_prep+0x39/0x1b0 [ 162.713345][T13400] io_submit_sqes+0xe32/0xfd0 [ 162.713379][T13400] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 162.713495][T13400] ? 0xffffffff81000000 [ 162.713509][T13400] ? __rcu_read_unlock+0x4f/0x70 [ 162.713532][T13400] ? get_pid_task+0x96/0xd0 [ 162.713554][T13400] ? proc_fail_nth_write+0x12d/0x160 [ 162.713591][T13400] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 162.713622][T13400] ? vfs_write+0x75e/0x8e0 [ 162.713652][T13400] ? __rcu_read_unlock+0x4f/0x70 [ 162.713742][T13400] ? __fget_files+0x184/0x1c0 [ 162.713763][T13400] ? fput+0x8f/0xc0 [ 162.713788][T13400] __x64_sys_io_uring_enter+0x78/0x90 [ 162.713814][T13400] x64_sys_call+0x28c8/0x2fb0 [ 162.713885][T13400] do_syscall_64+0xd2/0x200 [ 162.713901][T13400] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.713922][T13400] ? clear_bhb_loop+0x40/0x90 [ 162.713961][T13400] ? clear_bhb_loop+0x40/0x90 [ 162.713983][T13400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.714052][T13400] RIP: 0033:0x7ff34d77e929 [ 162.714065][T13400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.714080][T13400] RSP: 002b:00007ff34bde7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 162.714100][T13400] RAX: ffffffffffffffda RBX: 00007ff34d9a5fa0 RCX: 00007ff34d77e929 [ 162.714110][T13400] RDX: 0000000000000000 RSI: 0000000000007330 RDI: 0000000000000021 [ 162.714167][T13400] RBP: 00007ff34bde7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.714180][T13400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.714192][T13400] R13: 0000000000000000 R14: 00007ff34d9a5fa0 R15: 00007fffe71fe9b8 [ 162.714362][T13400] [ 162.715219][T13427] vhci_hcd: connection closed [ 162.715506][T13413] vhci_hcd: connection closed [ 162.727824][T13404] vhci_hcd: connection closed [ 162.739547][T13401] vhci_hcd: connection reset by peer [ 162.807956][T13415] vhci_hcd: connection closed [ 162.835811][ T31] vhci_hcd: stop threads [ 162.995060][ T31] vhci_hcd: release socket [ 162.999483][ T31] vhci_hcd: disconnect device [ 163.005026][ T31] vhci_hcd: stop threads [ 163.009286][ T31] vhci_hcd: release socket [ 163.013726][ T31] vhci_hcd: disconnect device [ 163.019503][ T31] vhci_hcd: stop threads [ 163.023778][ T31] vhci_hcd: release socket [ 163.028192][ T31] vhci_hcd: disconnect device [ 163.033496][ T31] vhci_hcd: stop threads [ 163.037808][ T31] vhci_hcd: release socket [ 163.042387][ T31] vhci_hcd: disconnect device [ 163.084938][ T31] vhci_hcd: stop threads [ 163.085711][T10608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.089200][ T31] vhci_hcd: release socket [ 163.089212][ T31] vhci_hcd: disconnect device [ 163.310887][ T3427] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.370634][ T3427] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.420587][ T3427] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.470396][ T3427] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.570841][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.580439][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.591268][ T3427] bond0 (unregistering): Released all slaves [ 163.622382][ T3427] hsr_slave_0: left promiscuous mode [ 163.628097][ T3427] hsr_slave_1: left promiscuous mode [ 163.635956][ T3427] veth1_macvtap: left promiscuous mode [ 163.641552][ T3427] veth0_macvtap: left promiscuous mode [ 163.647148][ T3427] veth1_vlan: left promiscuous mode [ 163.652411][ T3427] veth0_vlan: left promiscuous mode [ 163.701865][ T3427] team0 (unregistering): Port device team_slave_1 removed [ 163.711390][ T3427] team0 (unregistering): Port device team_slave_0 removed [ 167.589555][ T3385] usb 9-1: enqueue for inactive port 0 [ 167.595095][ T3385] usb 9-1: enqueue for inactive port 0 [ 167.679490][ T3385] vhci_hcd: vhci_device speed not set [ 170.230080][T12870] usb usb10-port1: attempt power cycle [ 172.050159][T12870] usb usb10-port1: unable to enumerate USB device