last executing test programs: 3m6.447220304s ago: executing program 2 (id=8667): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0xc) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) 3m6.426130156s ago: executing program 2 (id=8668): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e3000"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 3m6.354701592s ago: executing program 2 (id=8669): r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0x4, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffb, 0x7fff, 0x7, 0x18000000, 0x4}, 0x7, 0x1, 0x3, 0x9c3f, 0x4, 0x15, 0x20, 0x0, 0x8, 0x7ff, {0x7, 0x1000, 0x9, 0x40000000, 0x4, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0xf}}]}, 0xec}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0xf) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x3, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="cbeb23f28819838522871e32625642d05f96c90e101f6a56e0670d1c4c3e335f4a280a0dcea403e96c8b01ccc77072b14b0be026d7693a79d18d99f33351213a5eed8dd5df216d3ba6b2cfc4926b0d60c8a1ed4a395547fac887cf62c4f0b2da6d2389ed71dea4d4eec3397b2f67785b59df5930ae7d1b5ae99394d66b99156f6f0f52d35f5a794104d4162279b9bd1c4e8d4bf7af0828692b37b5b66d949de6e20f225e7ade48a9d441e3fa5655dbc11d1311819030f68e16ba37a38858fee40b7368a0e9329a9dfd69de9c00"/225, 0xe1}], 0x1}, 0x40004040) r11 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000180)='cpu<=0||!') 3m6.267543889s ago: executing program 2 (id=8671): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x68a82, 0x1a3) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) close(r4) 3m6.176034606s ago: executing program 2 (id=8672): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x4000}) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000e00)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40054}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x100000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r5, &(0x7f0000000380), 0x0, 0xc9, 0x8c8f) 3m6.163162477s ago: executing program 2 (id=8673): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3m1.760905333s ago: executing program 32 (id=8519): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) socket$packet(0x11, 0x3, 0x300) 2m55.371244119s ago: executing program 33 (id=8619): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0xc1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) exit(0x5) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80200, {0x0, 0x0, 0x0, r1, {}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) 2m51.937513246s ago: executing program 3 (id=8752): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0xc1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) exit(0x5) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80200, {0x0, 0x0, 0x0, r1, {}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) 2m51.858190103s ago: executing program 34 (id=8673): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2m50.580107306s ago: executing program 3 (id=8762): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r0, 0x407, 0x401) 2m50.472381965s ago: executing program 3 (id=8765): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="440100001000130429bd7000000000000000000018d144e6006af6b50b83a3c58d4a9804882c8400000000000000200100df000001000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x144}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000180c200000e88a8340081003d00000d040000202d0000009ec791443643abe9736546caa23386a0bce9f35309fa9bffffd8410a8f7a547b974c82160cdc5a314c2efc525ba25710cf477cde9d10de530615967625d0c394"], 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000300)='$\x00l\"P\xfc\xf8\b\xb9\xa6\xcdy\x05\x00\x00\x00\x00\x00\x00\x00\xbd(}\xe7t', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) close(r1) 2m50.472003925s ago: executing program 3 (id=8766): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (fail_nth: 2) 2m50.176108709s ago: executing program 3 (id=8769): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r4, &(0x7f0000000380), 0x0, 0xc9, 0x8c8f) 2m50.138552901s ago: executing program 3 (id=8771): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0xc1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) exit(0x5) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80200, {0x0, 0x0, 0x0, r1, {}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) 2m49.698596277s ago: executing program 6 (id=8774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x3, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 2m49.66563135s ago: executing program 6 (id=8775): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e3000"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 2m49.617733813s ago: executing program 6 (id=8777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0xc) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) 2m49.569132648s ago: executing program 6 (id=8778): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)="d8", 0x1, r4) keyctl$search(0xa, r4, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r3) 2m49.526061941s ago: executing program 6 (id=8780): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r4, &(0x7f0000000380), 0x0, 0xc9, 0x8c8f) 2m49.450007317s ago: executing program 6 (id=8782): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c000500"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m46.982887366s ago: executing program 0 (id=8812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e3000"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 2m46.830549909s ago: executing program 0 (id=8814): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r1, 0x407, 0x401) 2m46.651008833s ago: executing program 0 (id=8816): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x2000005c, &(0x7f0000000440)=[{0xd64, 0xa, 0x10, 0x7}, {0x3ff, 0x7, 0x2, 0x10001}, {0x2e6c, 0x5, 0xf0, 0x2}, {0x7, 0x4, 0x7f, 0x1}, {0x2, 0x7, 0x5, 0x3ff}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @private2, 0xb851}, 0x1c) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0x100) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8, 0x8, 0xaec, 0x5c1, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x65, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote, {[@noop, @noop]}}}}}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240), 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, 0x0, 0x0) 2m45.82840993s ago: executing program 0 (id=8829): r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x109880}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2m45.768444844s ago: executing program 0 (id=8830): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r3, &(0x7f0000000380), 0x0, 0xc9, 0x8c8f) 2m45.668051682s ago: executing program 0 (id=8831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 2m35.763464102s ago: executing program 35 (id=8771): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0xc1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) exit(0x5) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80200, {0x0, 0x0, 0x0, r1, {}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) 2m34.883195833s ago: executing program 36 (id=8782): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c000500"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m31.394393495s ago: executing program 37 (id=8831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 2m13.877498929s ago: executing program 9 (id=9268): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) close(r1) 2m13.834982382s ago: executing program 9 (id=9270): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd28, 0x25dfdbff, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x6957, 0xfff, 0xf2d, 0x8001, 0x1, 0x0, 0x9, 0x50, 0x9, 0x800, 0x7f, 0x1, 0x67e37a33, 0x7, 0x10001, 0x6, 0x4a2, 0x9, 0x8c14, 0x1, 0x3, 0x7c, 0x5, 0x0, 0x7, 0x2, 0x80000000, 0x4fd, 0x4, 0x9, 0x9, 0x8, 0x400, 0xc6bf, 0xf0, 0x5, 0x80000001, 0x1, 0x10, 0x9, 0xe8ca, 0x3, 0x3, 0x9, 0xa36, 0x67, 0x7fff, 0x3, 0x7e, 0x5, 0x9, 0x7, 0x200, 0x2d6, 0x80, 0xe, 0x7fffffff, 0x1, 0xffffff01, 0x2, 0x0, 0x9, 0x800, 0x5, 0xb9, 0x5, 0x5, 0x80000000, 0x5, 0x8, 0x4, 0x4, 0x55e, 0x2, 0x3, 0x8, 0x5, 0x3, 0x3, 0x7f, 0xd67e, 0x9, 0x8, 0xfffffff9, 0x4, 0x8, 0x2, 0x3, 0x401, 0x7, 0x7fffffff, 0xffff, 0x1, 0x9, 0x81, 0x3, 0x9, 0x7fffffff, 0x366f, 0x251c, 0x80a4, 0x401, 0x4, 0x8, 0x52b1bc5, 0x6, 0xad, 0x4, 0x4, 0x1ff, 0x4, 0x3, 0x8, 0x7, 0x401, 0x2, 0x266, 0x5, 0x9ba0, 0x0, 0xc844, 0x0, 0x1c0000, 0x1ff, 0xe, 0x7, 0x7, 0x1, 0x2, 0x3, 0x40, 0x6, 0x7, 0xd2, 0x1, 0x81, 0x6, 0x401, 0x1cd4, 0x1, 0x0, 0x40, 0x9, 0x80, 0xfffffff8, 0x27ba, 0x10, 0x10001, 0x7, 0x8, 0x2, 0x4, 0x8, 0x10, 0x101, 0x6, 0x6, 0x3, 0x8f3, 0xa, 0x9, 0x5, 0x0, 0x7, 0x9, 0xfffffffa, 0x4, 0x8001, 0x9, 0x401, 0x8, 0x400, 0x10, 0x7, 0x0, 0x0, 0x10001, 0x9, 0x2, 0x2368, 0x8, 0x9, 0x5, 0x8, 0x80, 0xcd, 0x5, 0xc, 0x7, 0x0, 0x8, 0x101, 0x400, 0x7ff, 0x80000001, 0xfffffc01, 0x1ff, 0x8, 0x865d, 0x0, 0x3, 0x7fff, 0x10001, 0x1, 0x101, 0x7, 0x3, 0x1, 0x6c8, 0x10000, 0x7, 0x800, 0xffff, 0xb, 0x3, 0x0, 0x4000, 0x1, 0xfff, 0x80000000, 0x4, 0x200, 0x1, 0x1, 0x1, 0x0, 0xb, 0x1, 0x9, 0x400, 0x5, 0x8, 0x0, 0x6, 0x13, 0x8001, 0x0, 0x3, 0x10ac, 0x1, 0x642, 0x1, 0x0, 0x2, 0x9, 0x6a0, 0x3, 0x8000, 0x1ff, 0x1, 0x7, 0x80000001, 0x7f, 0x7, 0xf, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x9, 0x7, 0xffff0001, 0x0, 0xffffffffffffffff, 0x7, '\x00', r4, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x4}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 2m13.789570546s ago: executing program 9 (id=9273): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fgetxattr(r3, &(0x7f0000000000)=@known='user.incfs.id\x00', &(0x7f0000000040)=""/90, 0x5a) 2m13.463497923s ago: executing program 9 (id=9281): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x884534a0e4947f18}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x17, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x4, 0xd, 0x0, r1, 0x6, '\x00', 0x0, r0, 0x1, 0x2, 0x2, 0x9}, 0x50) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c000680050001000000000047000280050001000100000006000340000000"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xa3, &(0x7f0000000080)=""/163}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0xfc, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002800)={0x0, 0x0, "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", "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"}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@posixacl}, {@access_client}, {@access_uid}, {@loose}, {@version_u}]}}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x4, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x5, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}}}}]}, 0x38}}, 0x2000a080) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) creat(0x0, 0x44) r8 = syz_usb_connect$cdc_ncm(0x3, 0x14a, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x2, 0x1, 0xe, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x8, 0x1}, {0x6, 0x24, 0x1a, 0x86, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x101}, @acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x2, 0xffcd}, @call_mgmt={0xfffffd4a, 0x24, 0x1, 0x2}, @country_functional={0x8, 0x24, 0x7, 0x3, 0x2, [0x735]}, @mdlm_detail={0xbd, 0x24, 0x13, 0x7, "75323015360a0bfb1d617e07e3ac6a19d51e27bcfc369fd273b97629333bc8dfcc7ccff2e20669383bc1b25423fbcee47ea060b38b9e802eadf8e93fa59ca451746ca1fe196ebe05959490a68126aa0d07164bdec556724f2a5ed85ee65c4a79220f13698a523bd9ff5c87dd58cee9eb3efbddcd580ce5886c6e597eef0aa8d1f3ec3dae116c1892bbf0b45c73c0ce3573610dfd8a2e23dde03d425fbd556a4534873e30bbf4eb489186fa2310b12ea2d3c9e153a1ec5906f8"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xe, 0xdb, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0xbb}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x110, 0x7f, 0x8, 0x8, 0x20, 0x19}, 0x1c, &(0x7f00000005c0)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "8fdcdc3047a991261bd429414319cb11"}]}, 0x1, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x814}}]}) syz_usb_control_io(r8, &(0x7f0000000a80)={0x2c, &(0x7f0000001800)={0x0, 0x22, 0x43, {0x43, 0x1, "3b8f79014b9d3a0b13cd30e58bdeb9d377da7a839999d1843472abe5355aeeee48b4bac4364bb02e2c783ba2d1051eedd34520f9121d38335efa82dd914740a61e"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000980)={0x0, 0xf, 0x3d, {0x5, 0xf, 0x3d, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x7, 0x0, 0x8, [0x3f00, 0xc000]}, @ext_cap={0x0, 0x10, 0x2, 0x8, 0x7, 0xc, 0x1e96}, @wireless={0xb, 0x10, 0x1, 0xc, 0x32, 0xd, 0x3, 0x200, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x3a, 0x0, 0xbed, 0x6}]}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x18, 0xb3, 0x4, "f9a9ec06", "2d007b9e"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x10, 0x3, 0x5, 0x3c, 0x1, 0x40}}}, &(0x7f0000001740)={0x84, &(0x7f0000000ac0)={0x0, 0x7, 0x4b, "5881ef7b768a6eacfc11f6dc028591bd6d01f219e251c3d4d8b06fee7f8f61ae6423121362841d35235c3bdcafb323bfce2e7db69ea617115db14abd19e58ae1160b1ec736994a32816bc0"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000000c00)={0x20, 0x0, 0x2a, {0xa0, 0x10, [0x0]}}, &(0x7f0000000c40)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000f00)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000cc0)={0x40, 0xb, 0x2, "84b0"}, &(0x7f0000000d00)={0x40, 0xf, 0x2, 0xff80}, &(0x7f0000000d40)={0x40, 0x13, 0x6}, &(0x7f0000000d80)={0x40, 0x17, 0x6, @local}, &(0x7f0000000dc0)={0x40, 0x19, 0x2, "a0c8"}, &(0x7f0000000e00)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000e40)={0x40, 0x1c, 0x1}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000ec0)={0x40, 0x21, 0x1, 0x9}}) mount(0x0, 0x0, 0x0, 0x301400, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000080)=0x3f) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 2m12.01395907s ago: executing program 9 (id=9302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1ffffe0e, &(0x7f0000000e80)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000300)=""/126, &(0x7f0000000380)=0x7e) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x7, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}]}, &(0x7f0000001000)='syzkaller\x00', 0xc, 0x1000, &(0x7f0000001bc0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001080)={0x3, 0x7, 0x2, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r0, r0, r0, 0xffffffffffffffff, r7, r7, r7, r7, r0], 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f00000011c0)='xdp_bulk_tx\x00', r12, 0x0, 0xe4b}, 0x18) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(r13, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) pselect6(0x40, &(0x7f0000000200)={0x7, 0x40, 0x10001, 0xd738, 0x3aa, 0xe3, 0x8, 0x9}, &(0x7f0000000340)={0x40, 0xa, 0x1310, 0x4, 0x7, 0x4, 0xfffffffffffffff9, 0x7b7}, 0x0, 0x0, 0x0) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="42110141"], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 2m11.2706208s ago: executing program 9 (id=9324): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x100013c, 0x20000000) (fail_nth: 2) 2m11.26668994s ago: executing program 38 (id=9324): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x100013c, 0x20000000) (fail_nth: 2) 2.658668305s ago: executing program 5 (id=11979): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d6"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.539571815s ago: executing program 4 (id=11980): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r1, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x78}}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.762751158s ago: executing program 4 (id=11987): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02"], 0x3, 0x25a, &(0x7f0000000240)="$eJzs2s9rI2UYB/Bn6sqmXbqp+ItdEF/0oF6Gbc8edpEKYkFRK6yC7KydauyYlE4oRMT2pFf/BM/i0Zsge/TSi3+BB2+99LgHcSRNWtOysIs/mqX7+RySh3nnm7zzvmF4ErL/6refb6zX+XrRj5ksi5nrsRt3s1iImTiyG6+8dPOX5969+cGbN1ZWWuOjSymly8///OGXP7xwp3/p/R8v/3Qx9hY+2j9Y+n3vmb0r+3++92mnTp06dXv9VKTbvV6/uF2Vaa1Tb+QpvV2VRV2mTrcut06Mr1e9zc1BKrpr83ObW2Vdp6I7SBvlIPV7qb81SMUnRaeb8jxP83PBv7H6/d2miYPm8VvRNM3sd3HpTsz/Fu3InkjZk9ezp29lz+5mVw6apn06OjudGfPf+sf7z7kwvqkvv5NSK6L6Znt1e3X0PBxtxY316EQVZVyL2fgjhh+TsVH9+hsry9fSoYX4utoZ53e2Vx87fP3j/GK0Y+He+cVRPh3lL0bE8HFuMr8U7Xjq3vmlU/nR+7fi5Rcn8nm049ePoxdVrMUwGzvjJVj+ajGl195aOZW/engeAMB5k6djw/5t2LSd6N/y/MT4RH80yk/0h+379Ien+qsLcfXCdK+diHrwxUZRVeXW8AveYXF85FEtZieX5UGKo59C/r+JzZzYs4dloRTnuYj4bCp3JM7S35t+31NbZzIhAAAAAAAAAAAAHshZ/J1w2tcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA83P4KAAD//8scwHs=") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x20000, 0x1, 0x16}, 0x18) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 1.469285742s ago: executing program 7 (id=11991): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="57c8bf4957b024cce523d97d3db88ddf3fa6f44e7aeb9f7a8d16a90582391d641ef2d0231c3a6d523dc7d661392a7bebe82fbae51a9823674d41da1934768fb2ccd064516683c6b9bf681028489238026fd87dd0a3d212639175cac9a4ec796207b1a2a54de176ba3f2f23d4732106a351be8d550a5cea69e72243c75fb410a6959c204b0e7f4b6103c36da8f33d773d493f6f4d3477cfe0fba08a18f5e32159", @ANYRESOCT], 0x48) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40502, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 1.182619755s ago: executing program 7 (id=11993): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x1}, 0x18) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 1.139231588s ago: executing program 7 (id=11994): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 1.106555421s ago: executing program 4 (id=11995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r5, &(0x7f0000000480)='./file0\x00', r5, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 1.065504694s ago: executing program 7 (id=11997): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYBLOB="a1e0f75289eb5f5d07d852605f02420cdaf79068b0af8688f2a082c3ac5e3a3d72787b601a6027ea241e29", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa2000000000000b70000000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) 1.056173665s ago: executing program 5 (id=11998): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2018c12, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}]}, 0xff, 0x256, &(0x7f0000000c80)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {}, {0x0, 0xc3, 0x0, 0x636e8971}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x6, 0x6, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x1000, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {0x2, 0x0, 0x0, 0x2}, {0x8, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0xb8a, 0x6}, {0xffffffff}, {}, {}, {}, {0x80000001, 0x0, 0x0, 0x2000000, 0x3}, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0x0, 0x8001}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x20000000, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x2, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x400000}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0x7091cba, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xa144}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {0x3, 0x0, 0x0, 0x4, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {0x0, 0x0, 0xfffffffc, 0x4eae63d7}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000}, {0x0, 0x2e9c}, {0x0, 0x10000000, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x800, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x20000, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x5}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x2}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x2}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 992.89924ms ago: executing program 7 (id=11999): r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/36, 0x24}, {0x0}, {&(0x7f0000000380)=""/75, 0x4b}], 0x3}, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000005c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000001000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000780090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 885.649698ms ago: executing program 8 (id=12003): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/125, 0x7d}], 0x1, 0x0, 0xffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f0000000300000008000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="0033c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r6}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r2], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r8, @ANYBLOB="815e1f069908d781d0f38e06010000020000140012800b0101006272cbee0917ed14b1661c80"], 0x34}}, 0x20044002) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket(0x2c, 0x800, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff000000000800080081070000a7fffa86b7006f87a68c06e3b01ab7af0c65ee2709cd22bf213ca1445c61594be352af40e021ecc2f63d78404031383f1a24b9767aa6ac5c1c4f60dffd7ba5c54b9bc654a1b6d6253a1f34d2748b3cbdca0c3a481555c6816f839560faba00859ae79322ebd1bd9cab5a3eff247e60893d6c5fed4523c8f69ab96e5fa878aa9bae32eb4a241ff7bdfda2fdf8cf4c4db534a0d9ac0a335e7afd99db66e38862aa3576077c85309138f4c080629851112b7fad4a2cd88f268cd5419adfe323440e1a304eb5a2ba865dfa05c6ecb36000409a4d27a91858ab6213a6deb569a3195a5000475356473ec416c71d56eb3605"], 0x34}}, 0x0) 833.432493ms ago: executing program 8 (id=12005): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000006c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000700), 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40002003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100ffdbdf251000f8ca33cc09006d8168e75ab2f630593473b10000180001801400020070696d72656730000000000000000000080006009000000008000900361bcfcf7e4dd1c4fbbb8c3beee1fef3cea1fb72f8b7f97a2bfc3b4d127494786c99d2a7bb0b204996c620cd254f402427539b13ea2d41fca46a632ee450990fe697858b531cc477906b46e25108c9d434f2323d72620e9fd685cdf0e1502a5200009632dd34471eaeae3fd865a36416058364b57e12d79970c6b20504a6abedacc567ea68d9ae59609544298012e917626a2a87df58e83efebb85495ba60f87474749a283149c78bda0a196065c"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r4 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000800080100", 0x4, 0x1ff}) setuid(0xee00) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00014006040400090400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'macvlan1\x00'}}, 0x1e) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r6 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x6, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000800000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(r4, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0800000001000600fbffffffffffffff"], &(0x7f0000000580), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) wait4(0x0, 0x0, 0x20000000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 822.412654ms ago: executing program 4 (id=12006): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x3, 0x25a, &(0x7f0000000240)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x20000, 0x1, 0x16}, 0x18) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 708.667263ms ago: executing program 5 (id=12008): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001340)='./file0\x00', 0x280c85a, &(0x7f0000000c00)={[{@dmode={'dmode', 0x3d, 0xb1}}, {@nojoliet}, {@mode={'mode', 0x3d, 0x5da}}, {@unhide}, {@dmode={'dmode', 0x3d, 0x4}}, {}, {@showassoc}, {@nocompress}, {@mode={'mode', 0x3d, 0x7fff}}, {@nocompress}, {@map_off}, {@check_relaxed}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {}], [{@context={'context', 0x3d, 'root'}}, {@seclabel}]}, 0x3, 0xa64, &(0x7f0000001e00)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x550, &(0x7f0000001780)="$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") 637.313109ms ago: executing program 8 (id=12009): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x2, &(0x7f0000000040)={{0x0, 0xea60}, {0x77359400}}, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa20000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}}}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 507.618649ms ago: executing program 5 (id=12012): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x12, 0x0, &(0x7f0000001600)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000080000000c7e24606bdc1b5539459b2ce1d5843420d4ae17cbb21510bb956394cc12a2283ea5121f9363e2778903aad38ad9c5920e1777cd8e5a1c78d31115b95c7eb715d76caa114d65d9114348584e6ab8c5bed5bb840a1fb5db22c51a54af59d9805a9dcd37722161136327b9ecd37f816ee55936b41ce099f229206709b643ecced106ffd3efd3b48d1dea25032d51384e303f51bcf8a565e20769e43f51e2def2b7eea1c7b127cbce31950c3aaa38a7f40188ab5bde5ad4865913974e970cd519c2b0073b6ea"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x178}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xf7}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 448.059814ms ago: executing program 8 (id=12014): socket$inet6(0xa, 0x80002, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x6, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 415.856407ms ago: executing program 1 (id=12015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 415.053457ms ago: executing program 5 (id=12016): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/125, 0x7d}], 0x1, 0x0, 0xffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f0000000300000008000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="0033c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r6}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r2], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r8, @ANYBLOB="815e1f069908d781d0f38e06010000020000140012800b0101006272cbee0917ed14b1661c80"], 0x34}}, 0x20044002) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket(0x2c, 0x800, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff000000000800080081070000a7fffa86b7006f87a68c06e3b01ab7af0c65ee2709cd22bf213ca1445c61594be352af40e021ecc2f63d78404031383f1a24b9767aa6ac5c1c4f60dffd7ba5c54b9bc654a1b6d6253a1f34d2748b3cbdca0c3a481555c6816f839560faba00859ae79322ebd1bd9cab5a3eff247e60893d6c5fed4523c8f69ab96e5fa878aa9bae32eb4a241ff7bdfda2fdf8cf4c4db534a0d9ac0a335e7afd99db66e38862aa3576077c85309138f4c080629851112b7fad4a2cd88f268cd5419adfe323440e1a304eb5a2ba865dfa05c6ecb36000409a4d27a91858ab6213a6deb569a3195a5000475356473ec416c71d56eb3605"], 0x34}}, 0x0) 369.93895ms ago: executing program 1 (id=12017): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x1}, 0x18) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 321.135184ms ago: executing program 8 (id=12018): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="57c8bf4957b024cce523d97d3db88ddf3fa6f44e7aeb9f7a8d16a90582391d641ef2d0231c3a6d523dc7d661392a7bebe82fbae51a9823674d41da1934768fb2ccd064516683c6b9bf681028489238026fd87dd0a3d212639175cac9a4ec796207b1a2a54de176ba3f2f23d4732106a351be8d550a5cea69e72243c75fb410a6959c204b0e7f4b6103c36da8f33d773d493f6f4d3477cfe0fba08a18f5e32159", @ANYRESOCT], 0x48) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40502, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 320.052805ms ago: executing program 1 (id=12019): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8d, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000f14010029b97800fedbdf250d0045"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48010) 309.872645ms ago: executing program 5 (id=12020): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f00000004c0), 0x1, 0x5e8, &(0x7f0000001200)="$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") bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r4, 0x0, 0x3ffff) sendfile(r6, r4, 0x0, 0x7ffff000) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) syz_emit_ethernet(0x45, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, '\x00\x00eX\x00\x00\x00'}}}}}, 0x0) 251.64831ms ago: executing program 1 (id=12021): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000001, 0x0, 'queue0\x00'}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) close_range(r0, 0xffffffffffffffff, 0x0) 233.519351ms ago: executing program 4 (id=12022): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 230.441412ms ago: executing program 8 (id=12023): syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) write$cgroup_int(r0, &(0x7f0000000000)=0x1, 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 193.305435ms ago: executing program 1 (id=12024): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000006c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000700), 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x6, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 192.796185ms ago: executing program 4 (id=12025): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 184.644855ms ago: executing program 7 (id=12026): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000b00)={0xff, "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"}) 0s ago: executing program 1 (id=12028): socket$inet6(0xa, 0x80002, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x6, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): 34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 688.372397][ T29] audit: type=1326 audit(1756571270.736:91923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.7.11334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f80620a5ba7 code=0x7ffc0000 [ 688.397394][ T29] audit: type=1326 audit(1756571270.736:91924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.7.11334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f806204adb9 code=0x7ffc0000 [ 688.422286][ T29] audit: type=1326 audit(1756571270.736:91925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.7.11334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 688.447515][ T29] audit: type=1326 audit(1756571270.736:91926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.5.11337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f539357ebe9 code=0x7ffc0000 [ 688.553599][T31734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.591714][ T4947] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.614588][ T4954] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11341'. [ 688.628590][ T4961] FAULT_INJECTION: forcing a failure. [ 688.628590][ T4961] name failslab, interval 1, probability 0, space 0, times 0 [ 688.641360][ T4961] CPU: 1 UID: 0 PID: 4961 Comm: syz.4.11342 Not tainted syzkaller #0 PREEMPT(voluntary) [ 688.641429][ T4961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 688.641445][ T4961] Call Trace: [ 688.641453][ T4961] [ 688.641463][ T4961] __dump_stack+0x1d/0x30 [ 688.641488][ T4961] dump_stack_lvl+0xe8/0x140 [ 688.641553][ T4961] dump_stack+0x15/0x1b [ 688.641574][ T4961] should_fail_ex+0x265/0x280 [ 688.641600][ T4961] should_failslab+0x8c/0xb0 [ 688.641627][ T4961] kmem_cache_alloc_node_noprof+0x57/0x320 [ 688.641664][ T4961] ? __alloc_skb+0x101/0x320 [ 688.641764][ T4961] __alloc_skb+0x101/0x320 [ 688.641786][ T4961] ? audit_log_start+0x365/0x6c0 [ 688.641825][ T4961] audit_log_start+0x380/0x6c0 [ 688.641910][ T4961] audit_seccomp+0x48/0x100 [ 688.641991][ T4961] ? __seccomp_filter+0x68c/0x10d0 [ 688.642019][ T4961] __seccomp_filter+0x69d/0x10d0 [ 688.642047][ T4961] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 688.642079][ T4961] ? vfs_write+0x7e8/0x960 [ 688.642128][ T4961] ? __rcu_read_unlock+0x4f/0x70 [ 688.642153][ T4961] ? __fget_files+0x184/0x1c0 [ 688.642189][ T4961] __secure_computing+0x82/0x150 [ 688.642214][ T4961] syscall_trace_enter+0xcf/0x1e0 [ 688.642287][ T4961] do_syscall_64+0xac/0x200 [ 688.642325][ T4961] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 688.642351][ T4961] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 688.642385][ T4961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.642486][ T4961] RIP: 0033:0x7f54fb07ebe9 [ 688.642506][ T4961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.642524][ T4961] RSP: 002b:00007f54f9adf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b9 [ 688.642547][ T4961] RAX: ffffffffffffffda RBX: 00007f54fb2b5fa0 RCX: 00007f54fb07ebe9 [ 688.642563][ T4961] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 688.642578][ T4961] RBP: 00007f54f9adf090 R08: 0000000000000000 R09: 0000000000000000 [ 688.642625][ T4961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.642640][ T4961] R13: 00007f54fb2b6038 R14: 00007f54fb2b5fa0 R15: 00007ffcd5679f88 [ 688.642663][ T4961] [ 688.663224][ T4966] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11343'. [ 688.681765][ T4961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11342'. [ 688.706947][ T4968] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 688.727120][ T4975] loop5: detected capacity change from 0 to 2048 [ 688.730228][ T4968] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 688.908244][ T4968] vhci_hcd vhci_hcd.0: Device attached [ 688.924342][ T4947] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.936108][ T4972] vhci_hcd: connection closed [ 688.938281][ T4975] loop5: p1 < > p4 [ 688.949677][ T31] vhci_hcd: stop threads [ 688.954069][ T31] vhci_hcd: release socket [ 688.957184][ T4975] loop5: p4 size 8388608 extends beyond EOD, truncated [ 688.958944][ T31] vhci_hcd: disconnect device [ 688.978150][ T4979] loop8: detected capacity change from 0 to 2048 [ 688.996617][ T4947] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.025651][ T4979] loop8: p1 < > p4 [ 689.030609][ T4979] loop8: p4 size 8388608 extends beyond EOD, truncated [ 689.094138][ T9059] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.114424][ T9059] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.131236][ T4986] loop5: detected capacity change from 0 to 2048 [ 689.147656][ T9059] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.157635][ T4988] loop4: detected capacity change from 0 to 512 [ 689.164732][ T9059] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.173530][ T4988] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 689.194200][ T4986] loop5: p1 < > p4 [ 689.201669][ T4986] loop5: p4 size 8388608 extends beyond EOD, truncated [ 689.201724][ T4988] EXT4-fs (loop4): 1 truncate cleaned up [ 689.202276][ T4988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.234023][ T4988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.286639][ T4996] netlink: 52 bytes leftover after parsing attributes in process `syz.8.11352'. [ 689.308193][ T4996] loop8: detected capacity change from 0 to 512 [ 689.310847][ T4998] loop4: detected capacity change from 0 to 128 [ 689.322723][ T4996] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 689.340254][ T4998] bio_check_eod: 18 callbacks suppressed [ 689.340282][ T4998] syz.4.11353: attempt to access beyond end of device [ 689.340282][ T4998] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 689.376078][ T4998] syz.4.11353: attempt to access beyond end of device [ 689.376078][ T4998] loop4: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 689.376410][ T4996] EXT4-fs (loop8): Can't support bigalloc feature without extents feature [ 689.376410][ T4996] [ 689.400487][ T4996] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 689.407752][ T4998] syz.4.11353: attempt to access beyond end of device [ 689.407752][ T4998] loop4: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 689.424125][ T4998] buffer_io_error: 4 callbacks suppressed [ 689.424141][ T4998] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 689.441565][ T4996] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 689.460874][ T4998] syz.4.11353: attempt to access beyond end of device [ 689.460874][ T4998] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 689.475271][ T4998] syz.4.11353: attempt to access beyond end of device [ 689.475271][ T4998] loop4: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 689.488845][ T4998] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 689.498216][ T4998] syz.4.11353: attempt to access beyond end of device [ 689.498216][ T4998] loop4: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 689.512519][ T4998] syz.4.11353: attempt to access beyond end of device [ 689.512519][ T4998] loop4: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 689.526360][ T4998] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 689.535676][ T4998] syz.4.11353: attempt to access beyond end of device [ 689.535676][ T4998] loop4: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 689.550848][ T4998] syz.4.11353: attempt to access beyond end of device [ 689.550848][ T4998] loop4: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 689.564592][ T4998] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 689.577522][T30368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.601672][ T4998] syz.4.11353: attempt to access beyond end of device [ 689.601672][ T4998] loop4: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 689.623850][ T4998] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 689.654370][ T4998] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 689.673958][ T5017] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.691318][ T5018] loop5: detected capacity change from 0 to 512 [ 689.700225][ T4998] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 689.713966][ T4998] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 689.720249][ T5018] journal_path: Non-blockdev passed as './bus' [ 689.728658][ T5018] EXT4-fs: error: could not find journal device path [ 689.738044][ T5017] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.767573][ T4998] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 689.802430][ T4998] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 689.816413][ T5017] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.858768][ T5026] pimreg: entered allmulticast mode [ 689.894073][ T5017] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.934854][ T5026] pimreg: left allmulticast mode [ 690.013788][ T31] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.052979][ T31] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.075540][ T5041] loop5: detected capacity change from 0 to 512 [ 690.093820][ T31] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.120516][ T5041] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 690.133852][ T31] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.162727][ T5041] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 690.162727][ T5041] [ 690.175004][ T5041] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 690.217860][ T5041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 690.253593][ T5045] netlink: 'syz.8.11369': attribute type 3 has an invalid length. [ 690.263123][ T5040] SELinux: ebitmap: truncated map [ 690.273082][ T5040] SELinux: failed to load policy [ 690.274688][ T3374] hid_parser_main: 77 callbacks suppressed [ 690.274848][ T3374] hid-generic 0000:0000:0000.0030: unknown main item tag 0x1 [ 690.293221][ T3374] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 690.300689][ T3374] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 690.308210][ T3374] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 690.315857][ T3374] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 690.324748][ T3374] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 690.333696][ T3374] hid-generic 0000:0000:0000.0030: unknown main item tag 0x4 [ 690.341697][ T3374] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 690.350563][ T3374] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 690.359730][ T3374] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 690.362544][ T5055] FAULT_INJECTION: forcing a failure. [ 690.362544][ T5055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.370377][ T3374] hid-generic 0000:0000:0000.0030: item fetching failed at offset 41/43 [ 690.381085][ T5055] CPU: 1 UID: 0 PID: 5055 Comm: syz.7.11373 Not tainted syzkaller #0 PREEMPT(voluntary) [ 690.381123][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.381140][ T5055] Call Trace: [ 690.381149][ T5055] [ 690.381159][ T5055] __dump_stack+0x1d/0x30 [ 690.381196][ T5055] dump_stack_lvl+0xe8/0x140 [ 690.381221][ T5055] dump_stack+0x15/0x1b [ 690.381241][ T5055] should_fail_ex+0x265/0x280 [ 690.381266][ T5055] should_fail+0xb/0x20 [ 690.381289][ T5055] should_fail_usercopy+0x1a/0x20 [ 690.381317][ T5055] _copy_from_user+0x1c/0xb0 [ 690.381424][ T5055] sg_new_write+0x71a/0x890 [ 690.381523][ T5055] ? do_vfs_ioctl+0x866/0xe10 [ 690.381545][ T5055] sg_ioctl+0xb81/0x1360 [ 690.381584][ T5055] ? __pfx_sg_ioctl+0x10/0x10 [ 690.381621][ T5055] __se_sys_ioctl+0xce/0x140 [ 690.381645][ T5055] __x64_sys_ioctl+0x43/0x50 [ 690.381681][ T5055] x64_sys_call+0x1816/0x2ff0 [ 690.381746][ T5055] do_syscall_64+0xd2/0x200 [ 690.381782][ T5055] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 690.381813][ T5055] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 690.381926][ T5055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.382090][ T5055] RIP: 0033:0x7f80620aebe9 [ 690.382185][ T5055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.382208][ T5055] RSP: 002b:00007f8060b0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.382228][ T5055] RAX: ffffffffffffffda RBX: 00007f80622e5fa0 RCX: 00007f80620aebe9 [ 690.382244][ T5055] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000004 [ 690.382284][ T5055] RBP: 00007f8060b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 690.382296][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.382312][ T5055] R13: 00007f80622e6038 R14: 00007f80622e5fa0 R15: 00007ffdfaccdce8 [ 690.382342][ T5055] [ 690.605604][ T3374] hid-generic 0000:0000:0000.0030: probe with driver hid-generic failed with error -22 [ 690.627127][ T5057] FAULT_INJECTION: forcing a failure. [ 690.627127][ T5057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.640363][ T5057] CPU: 1 UID: 0 PID: 5057 Comm: syz.7.11374 Not tainted syzkaller #0 PREEMPT(voluntary) [ 690.640397][ T5057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.640414][ T5057] Call Trace: [ 690.640423][ T5057] [ 690.640433][ T5057] __dump_stack+0x1d/0x30 [ 690.640477][ T5057] dump_stack_lvl+0xe8/0x140 [ 690.640502][ T5057] dump_stack+0x15/0x1b [ 690.640531][ T5057] should_fail_ex+0x265/0x280 [ 690.640554][ T5057] should_fail+0xb/0x20 [ 690.640617][ T5057] should_fail_usercopy+0x1a/0x20 [ 690.640651][ T5057] _copy_from_user+0x1c/0xb0 [ 690.640688][ T5057] memdup_user+0x5e/0xd0 [ 690.640773][ T5057] strndup_user+0x68/0xb0 [ 690.640804][ T5057] __se_sys_mount+0x8e/0x2e0 [ 690.640833][ T5057] ? fput+0x8f/0xc0 [ 690.640866][ T5057] ? ksys_write+0x192/0x1a0 [ 690.640953][ T5057] __x64_sys_mount+0x67/0x80 [ 690.640977][ T5057] x64_sys_call+0x2b4d/0x2ff0 [ 690.641004][ T5057] do_syscall_64+0xd2/0x200 [ 690.641041][ T5057] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 690.641118][ T5057] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 690.641152][ T5057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.641231][ T5057] RIP: 0033:0x7f80620aebe9 [ 690.641293][ T5057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.641314][ T5057] RSP: 002b:00007f8060b0f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 690.641390][ T5057] RAX: ffffffffffffffda RBX: 00007f80622e5fa0 RCX: 00007f80620aebe9 [ 690.641402][ T5057] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000380 [ 690.641414][ T5057] RBP: 00007f8060b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 690.641426][ T5057] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 690.641441][ T5057] R13: 00007f80622e6038 R14: 00007f80622e5fa0 R15: 00007ffdfaccdce8 [ 690.641465][ T5057] [ 690.835889][ T4249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.858097][ T5068] loop4: detected capacity change from 0 to 512 [ 690.866482][ T5068] journal_path: Non-blockdev passed as './bus' [ 690.874136][ T5068] EXT4-fs: error: could not find journal device path [ 690.899417][ T5074] loop5: detected capacity change from 0 to 128 [ 690.909268][ T5072] loop8: detected capacity change from 0 to 512 [ 690.922276][ T5072] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 690.947999][ T5072] EXT4-fs (loop8): 1 truncate cleaned up [ 690.959597][ T5072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.010031][ T5072] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.140816][ T5105] loop5: detected capacity change from 0 to 512 [ 691.176291][ T5105] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 691.253160][ T5116] loop7: detected capacity change from 0 to 512 [ 691.259907][ T5116] journal_path: Non-blockdev passed as './bus' [ 691.267797][ T5116] EXT4-fs: error: could not find journal device path [ 691.324973][ T5105] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 691.324973][ T5105] [ 691.337495][ T5105] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 691.351862][ T5105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 691.395753][ T4249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.459489][ T5127] loop7: detected capacity change from 0 to 128 [ 691.521556][ T5134] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 691.674846][ T5135] __nla_validate_parse: 10 callbacks suppressed [ 691.674866][ T5135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11397'. [ 691.705480][ T5142] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11404'. [ 691.835045][ T5154] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11407'. [ 691.874556][ T5154] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11407'. [ 691.945111][ T5154] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11407'. [ 691.962624][ T5154] loop8: detected capacity change from 0 to 512 [ 691.970756][ T5154] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 691.987770][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.008292][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.036007][ T5154] EXT4-fs (loop8): Can't support bigalloc feature without extents feature [ 692.036007][ T5154] [ 692.046771][ T5154] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 692.069039][ T5164] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.131073][ T5154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 692.152203][ T5174] loop7: detected capacity change from 0 to 128 [ 692.169421][ T5164] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.189569][T30368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.208472][ T5164] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.266475][ T5187] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11419'. [ 692.293597][ T5191] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 692.304216][ T5164] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.367306][ T9019] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.380243][ T9019] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.398252][ T9019] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.412748][ T9019] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.448572][ T5206] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11422'. [ 692.897035][ T5223] lo speed is unknown, defaulting to 1000 [ 692.903479][ T5223] lo speed is unknown, defaulting to 1000 [ 693.068689][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 693.068708][ T29] audit: type=1326 audit(1756571275.881:92102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.8.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a329ebe9 code=0x7ffc0000 [ 693.100870][ T29] audit: type=1326 audit(1756571275.881:92103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.8.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a329ebe9 code=0x7ffc0000 [ 693.152324][ T5231] loop8: detected capacity change from 0 to 512 [ 693.154592][ T5232] netlink: 7 bytes leftover after parsing attributes in process `syz.5.11430'. [ 693.169174][ T29] audit: type=1326 audit(1756571275.933:92104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.8.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f31a329ebe9 code=0x7ffc0000 [ 693.192881][ T29] audit: type=1326 audit(1756571275.933:92105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.8.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a329ebe9 code=0x7ffc0000 [ 693.216545][ T29] audit: type=1326 audit(1756571275.933:92106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5227 comm="syz.8.11429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a329ebe9 code=0x7ffc0000 [ 693.267191][ T5231] journal_path: Non-blockdev passed as './bus' [ 693.275088][ T5231] EXT4-fs: error: could not find journal device path [ 693.283239][ T5236] loop5: detected capacity change from 0 to 128 [ 693.361758][ T5238] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11433'. [ 693.468963][ T5245] loop5: detected capacity change from 0 to 2048 [ 693.526146][ T5248] loop8: detected capacity change from 0 to 512 [ 693.533638][ T5249] loop4: detected capacity change from 0 to 2048 [ 693.534321][ T5245] loop5: p1 < > p4 [ 693.543733][ T5248] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 693.545146][ T5245] loop5: p4 size 8388608 extends beyond EOD, truncated [ 693.562551][ T5249] loop4: p1 < > p4 [ 693.566973][ T5249] loop4: p4 size 8388608 extends beyond EOD, truncated [ 693.637987][ T5248] EXT4-fs (loop8): 1 truncate cleaned up [ 693.645718][ T5248] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.662384][ T5248] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.690907][ T5252] loop7: detected capacity change from 0 to 512 [ 693.707135][ T5252] journal_path: Non-blockdev passed as './bus' [ 693.713546][ T5252] EXT4-fs: error: could not find journal device path [ 693.774369][ T5257] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11439'. [ 693.787176][ T5259] loop7: detected capacity change from 0 to 128 [ 693.797819][ T29] audit: type=1326 audit(1756571276.637:92107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5260 comm="syz.8.11442" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31a329ebe9 code=0x0 [ 693.843954][ T5263] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 693.929952][ T29] audit: type=1326 audit(1756571276.784:92108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.5.11445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539357ebe9 code=0x7ffc0000 [ 693.953908][ T29] audit: type=1326 audit(1756571276.784:92109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.5.11445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f539357ebe9 code=0x7ffc0000 [ 693.977835][ T29] audit: type=1326 audit(1756571276.784:92110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.5.11445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539357ebe9 code=0x7ffc0000 [ 694.001556][ T29] audit: type=1326 audit(1756571276.784:92111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.5.11445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f539357ebe9 code=0x7ffc0000 [ 694.138789][ T5279] loop4: detected capacity change from 0 to 2048 [ 694.244757][ T5279] loop4: p1 < > p4 [ 694.262701][ T5279] loop4: p4 size 8388608 extends beyond EOD, truncated [ 694.314647][ T5282] lo speed is unknown, defaulting to 1000 [ 694.321242][ T5282] lo speed is unknown, defaulting to 1000 [ 694.444637][ T5285] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 694.514334][ T5290] loop4: detected capacity change from 0 to 512 [ 694.536551][ T5290] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 694.548437][ T5290] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 694.548437][ T5290] [ 694.559207][ T5290] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 694.568620][ T5290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 694.615963][T31734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.645523][ T5306] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 694.747586][ T5316] loop8: detected capacity change from 0 to 512 [ 694.754429][ T5316] journal_path: Non-blockdev passed as './bus' [ 694.760951][ T5316] EXT4-fs: error: could not find journal device path [ 694.792022][ T5322] loop4: detected capacity change from 0 to 128 [ 694.892081][ T5331] loop7: detected capacity change from 0 to 128 [ 694.986192][ T5329] loop8: detected capacity change from 0 to 512 [ 694.996150][ T5329] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 695.027604][ T5329] EXT4-fs (loop8): Can't support bigalloc feature without extents feature [ 695.027604][ T5329] [ 695.038415][ T5329] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 695.063775][ T5329] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 695.094880][T30368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.281896][ T5350] loop5: detected capacity change from 0 to 512 [ 695.297611][ T5350] journal_path: Non-blockdev passed as './bus' [ 695.303929][ T5350] EXT4-fs: error: could not find journal device path [ 695.464755][ T5362] loop8: detected capacity change from 0 to 512 [ 695.476298][ T5364] loop7: detected capacity change from 0 to 2048 [ 695.488910][ T5362] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 695.500959][ T5362] EXT4-fs (loop8): Can't support bigalloc feature without extents feature [ 695.500959][ T5362] [ 695.511757][ T5362] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 695.526477][ T5364] loop7: p1 < > p4 [ 695.531137][ T5362] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 695.543705][ T5364] loop7: p4 size 8388608 extends beyond EOD, truncated [ 695.551301][ T5367] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 695.558010][ T5367] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 695.567103][ T5367] vhci_hcd vhci_hcd.0: Device attached [ 695.619707][ T5368] vhci_hcd: connection closed [ 695.619893][ T31] vhci_hcd: stop threads [ 695.629239][ T31] vhci_hcd: release socket [ 695.633700][ T31] vhci_hcd: disconnect device [ 695.644439][T30368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.678032][ T5374] loop7: detected capacity change from 0 to 512 [ 695.688181][ T5374] journal_path: Non-blockdev passed as './bus' [ 695.694637][ T5374] EXT4-fs: error: could not find journal device path [ 695.834892][ T5384] loop7: detected capacity change from 0 to 128 [ 695.936994][ T5387] lo speed is unknown, defaulting to 1000 [ 695.944579][ T5387] lo speed is unknown, defaulting to 1000 [ 696.410286][ T5394] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 696.523462][ T5399] __nla_validate_parse: 3 callbacks suppressed [ 696.523477][ T5399] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11493'. [ 696.642789][ T5405] loop4: detected capacity change from 0 to 512 [ 696.661936][ T5417] loop5: detected capacity change from 0 to 128 [ 696.672519][ T5405] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 696.687412][ T5405] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 696.687412][ T5405] [ 696.698289][ T5405] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 696.709624][ T5405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 696.757351][T31734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.809443][ T5427] loop4: detected capacity change from 0 to 128 [ 696.813657][ T5426] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11503'. [ 696.834418][ T5427] bio_check_eod: 130 callbacks suppressed [ 696.834435][ T5427] syz.4.11502: attempt to access beyond end of device [ 696.834435][ T5427] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 696.856742][ T5427] syz.4.11502: attempt to access beyond end of device [ 696.856742][ T5427] loop4: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 696.882108][ T5427] syz.4.11502: attempt to access beyond end of device [ 696.882108][ T5427] loop4: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 696.897054][ T5427] buffer_io_error: 60 callbacks suppressed [ 696.897074][ T5427] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 696.931332][ T5427] syz.4.11502: attempt to access beyond end of device [ 696.931332][ T5427] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 696.948776][ T5427] syz.4.11502: attempt to access beyond end of device [ 696.948776][ T5427] loop4: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 696.963696][ T5427] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 696.977373][ T5427] syz.4.11502: attempt to access beyond end of device [ 696.977373][ T5427] loop4: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 697.007690][ T5427] syz.4.11502: attempt to access beyond end of device [ 697.007690][ T5427] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 697.024596][ T5427] syz.4.11502: attempt to access beyond end of device [ 697.024596][ T5427] loop4: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 697.039508][ T5427] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 697.052275][ T5427] syz.4.11502: attempt to access beyond end of device [ 697.052275][ T5427] loop4: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 697.067953][ T5427] syz.4.11502: attempt to access beyond end of device [ 697.067953][ T5427] loop4: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 697.083415][ T5427] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 697.130121][ T5427] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 697.141881][ T5427] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 697.215903][ T5441] lo speed is unknown, defaulting to 1000 [ 697.223078][ T5441] lo speed is unknown, defaulting to 1000 [ 697.301917][ T5427] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 697.375881][ T5427] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 697.533768][ T5427] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 697.625404][ T5427] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 697.809424][ T5455] loop5: detected capacity change from 0 to 512 [ 697.823775][ T5457] loop8: detected capacity change from 0 to 512 [ 697.833531][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 697.833548][ T29] audit: type=1326 audit(1756571280.889:92492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.1.11510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f03297fadb9 code=0x7ffc0000 [ 697.846243][ T5455] journal_path: Non-blockdev passed as './bus' [ 697.863399][ T29] audit: type=1326 audit(1756571280.889:92493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.1.11510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 697.872439][ T5457] journal_path: Non-blockdev passed as './bus' [ 697.897307][ T5455] EXT4-fs: error: could not find journal device path [ 697.901922][ T5457] EXT4-fs: error: could not find journal device path [ 697.905035][ T29] audit: type=1326 audit(1756571280.920:92494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.1.11510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0329855ba7 code=0x7ffc0000 [ 697.939218][ T29] audit: type=1326 audit(1756571280.920:92495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.1.11510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f03297fadb9 code=0x7ffc0000 [ 697.962926][ T29] audit: type=1326 audit(1756571280.920:92496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.1.11510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 697.986855][ T29] audit: type=1326 audit(1756571280.920:92497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.1.11510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 698.010506][ T29] audit: type=1326 audit(1756571280.920:92498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.1.11510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 698.034560][ T29] audit: type=1326 audit(1756571280.920:92499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.1.11510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 698.058289][ T29] audit: type=1326 audit(1756571280.920:92500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.1.11510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 698.081900][ T29] audit: type=1326 audit(1756571280.920:92501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5451 comm="syz.1.11510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 698.170163][ T5464] FAULT_INJECTION: forcing a failure. [ 698.170163][ T5464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.170745][ T5459] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 698.183324][ T5464] CPU: 1 UID: 0 PID: 5464 Comm: syz.4.11514 Not tainted syzkaller #0 PREEMPT(voluntary) [ 698.183358][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 698.183374][ T5464] Call Trace: [ 698.183382][ T5464] [ 698.183393][ T5464] __dump_stack+0x1d/0x30 [ 698.183430][ T5464] dump_stack_lvl+0xe8/0x140 [ 698.183454][ T5464] dump_stack+0x15/0x1b [ 698.183475][ T5464] should_fail_ex+0x265/0x280 [ 698.183501][ T5464] should_fail+0xb/0x20 [ 698.183523][ T5464] should_fail_usercopy+0x1a/0x20 [ 698.183549][ T5464] strncpy_from_user+0x25/0x230 [ 698.183742][ T5464] ? kmem_cache_alloc_noprof+0x186/0x310 [ 698.183780][ T5464] ? getname_flags+0x80/0x3b0 [ 698.183820][ T5464] getname_flags+0xae/0x3b0 [ 698.183857][ T5464] user_path_at+0x28/0x130 [ 698.183969][ T5464] do_fchmodat+0x9c/0x180 [ 698.183997][ T5464] __x64_sys_fchmodat+0x42/0x50 [ 698.184036][ T5464] x64_sys_call+0x288d/0x2ff0 [ 698.184099][ T5464] do_syscall_64+0xd2/0x200 [ 698.184137][ T5464] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 698.184169][ T5464] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 698.184205][ T5464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.184298][ T5464] RIP: 0033:0x7f54fb07ebe9 [ 698.184319][ T5464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.184342][ T5464] RSP: 002b:00007f54f9adf038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 698.184368][ T5464] RAX: ffffffffffffffda RBX: 00007f54fb2b5fa0 RCX: 00007f54fb07ebe9 [ 698.184385][ T5464] RDX: 00000000000000e0 RSI: 0000200000000000 RDI: 0000000000000007 [ 698.184403][ T5464] RBP: 00007f54f9adf090 R08: 0000000000000000 R09: 0000000000000000 [ 698.184458][ T5464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.184474][ T5464] R13: 00007f54fb2b6038 R14: 00007f54fb2b5fa0 R15: 00007ffcd5679f88 [ 698.184501][ T5464] [ 698.197049][ T5466] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 698.388497][ T5466] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 698.396299][ T5466] vhci_hcd vhci_hcd.0: Device attached [ 698.431705][ T5467] vhci_hcd: connection closed [ 698.432014][ T31] vhci_hcd: stop threads [ 698.441090][ T31] vhci_hcd: release socket [ 698.445697][ T31] vhci_hcd: disconnect device [ 698.495410][ T5483] loop8: detected capacity change from 0 to 512 [ 698.509184][ T5483] journal_path: Non-blockdev passed as './bus' [ 698.515449][ T5483] EXT4-fs: error: could not find journal device path [ 698.533987][ T5486] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.587614][ T5486] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.636456][ T5486] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.693029][ T5486] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.703028][ T5493] loop4: detected capacity change from 0 to 512 [ 698.703661][ T5493] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 698.704794][ T5493] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 698.704794][ T5493] [ 698.731437][ T5493] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 698.740738][ T5493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 698.770165][T31734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.812357][ T9059] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.837918][ T9059] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.853435][ T9059] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.863300][ T9059] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.041980][ T5511] netlink: 'syz.4.11534': attribute type 13 has an invalid length. [ 699.066030][ T5511] gretap0: refused to change device tx_queue_len [ 699.083363][ T5511] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 699.100688][ T36] lo speed is unknown, defaulting to 1000 [ 699.106470][ T36] syz0: Port: 1 Link ACTIVE [ 699.129455][ T5513] loop5: detected capacity change from 0 to 512 [ 699.140884][ T5513] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 699.159823][ T5513] EXT4-fs (loop5): orphan cleanup on readonly fs [ 699.176344][ T5513] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.11533: Block bitmap for bg 0 marked uninitialized [ 699.200698][ T5513] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 699.215140][ T5513] EXT4-fs (loop5): 1 orphan inode deleted [ 699.215690][ T5513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 699.218541][ T5513] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 699.219042][ T5513] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 699.228694][ T5513] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.11533: Block bitmap for bg 0 marked uninitialized [ 699.246910][ T5520] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 699.343449][ T5528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11535'. [ 699.428921][ T5534] loop7: detected capacity change from 0 to 2048 [ 699.458880][ T5536] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11540'. [ 699.472566][ T5534] loop7: p1 < > p4 [ 699.481992][ T5534] loop7: p4 size 8388608 extends beyond EOD, truncated [ 699.496930][ T5538] loop8: detected capacity change from 0 to 128 [ 699.630505][ T5549] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11546'. [ 699.650532][ T5551] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 699.689721][ T5553] loop7: detected capacity change from 0 to 2048 [ 699.738684][ T5553] loop7: p1 < > p4 [ 699.743091][ T5553] loop7: p4 size 8388608 extends beyond EOD, truncated [ 699.796812][ T5561] netlink: 7 bytes leftover after parsing attributes in process `syz.8.11552'. [ 699.831090][ T4249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.922406][ T5567] loop7: detected capacity change from 0 to 512 [ 699.937880][ T5567] journal_path: Non-blockdev passed as './bus' [ 699.944108][ T5567] EXT4-fs: error: could not find journal device path [ 699.952092][ T5565] bridge_slave_0: left allmulticast mode [ 699.959126][ T5565] bridge_slave_0: left promiscuous mode [ 699.964927][ T5565] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.984606][ T5569] loop8: detected capacity change from 0 to 2048 [ 699.988117][ T5565] bridge_slave_1: left allmulticast mode [ 699.998079][ T5565] bridge_slave_1: left promiscuous mode [ 700.003839][ T5565] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.018602][ T5565] bond0: (slave bond_slave_0): Releasing backup interface [ 700.038977][ T5576] FAULT_INJECTION: forcing a failure. [ 700.038977][ T5576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.053646][ T5576] CPU: 0 UID: 0 PID: 5576 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 700.053676][ T5576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 700.053760][ T5576] Call Trace: [ 700.053767][ T5576] [ 700.053776][ T5576] __dump_stack+0x1d/0x30 [ 700.053802][ T5576] dump_stack_lvl+0xe8/0x140 [ 700.053902][ T5576] dump_stack+0x15/0x1b [ 700.053923][ T5576] should_fail_ex+0x265/0x280 [ 700.053946][ T5576] should_fail+0xb/0x20 [ 700.053963][ T5576] should_fail_usercopy+0x1a/0x20 [ 700.053986][ T5576] _copy_from_user+0x1c/0xb0 [ 700.054024][ T5576] map_update_elem+0x3a3/0x520 [ 700.054156][ T5576] __sys_bpf+0x571/0x7b0 [ 700.054189][ T5576] __x64_sys_bpf+0x41/0x50 [ 700.054218][ T5576] x64_sys_call+0x2aea/0x2ff0 [ 700.054245][ T5576] do_syscall_64+0xd2/0x200 [ 700.054303][ T5576] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 700.054330][ T5576] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 700.054362][ T5576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.054439][ T5576] RIP: 0033:0x7f54fb07ebe9 [ 700.054458][ T5576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.054535][ T5576] RSP: 002b:00007f54f9adf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 700.054554][ T5576] RAX: ffffffffffffffda RBX: 00007f54fb2b5fa0 RCX: 00007f54fb07ebe9 [ 700.054569][ T5576] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000002 [ 700.054585][ T5576] RBP: 00007f54f9adf090 R08: 0000000000000000 R09: 0000000000000000 [ 700.054600][ T5576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.054615][ T5576] R13: 00007f54fb2b6038 R14: 00007f54fb2b5fa0 R15: 00007ffcd5679f88 [ 700.054637][ T5576] [ 700.058415][ T5565] bond0: (slave bond_slave_1): Releasing backup interface [ 700.061929][ T5569] loop8: p1 < > p4 [ 700.093629][ T5577] loop5: detected capacity change from 0 to 164 [ 700.307724][ T5565] team0: Failed to send options change via netlink (err -105) [ 700.331591][ T5565] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 700.341757][ T5569] loop8: p4 size 8388608 extends beyond EOD, truncated [ 700.353199][ T5565] team0: Port device team_slave_0 removed [ 700.365367][ T5565] team0: Failed to send options change via netlink (err -105) [ 700.387174][ T5565] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 700.400798][ T5565] team0: Port device team_slave_1 removed [ 700.409648][ T5565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.418788][ T5565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.430223][ T5565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.437836][ T5565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.459474][ T5570] team0: Failed to send options change via netlink (err -105) [ 700.467032][ T5570] team0: Mode changed to "activebackup" [ 700.545924][ T5590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11559'. [ 700.674340][ T5603] netlink: 104 bytes leftover after parsing attributes in process `syz.8.11565'. [ 700.764603][ T5617] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11572'. [ 700.777583][ T5610] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 700.834595][ T5622] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11574'. [ 700.988791][ T5635] loop7: detected capacity change from 0 to 512 [ 701.027862][ T5635] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 701.049446][ T5635] EXT4-fs (loop7): Can't support bigalloc feature without extents feature [ 701.049446][ T5635] [ 701.060335][ T5635] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 701.088350][ T5635] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 701.142473][T29960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.405454][ T5672] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 701.412020][ T5672] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 701.421168][ T5672] vhci_hcd vhci_hcd.0: Device attached [ 701.421530][ T5670] __nla_validate_parse: 2 callbacks suppressed [ 701.421552][ T5670] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11591'. [ 701.428324][ T5667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7410 sclass=netlink_route_socket pid=5667 comm=syz.5.11589 [ 701.465998][ T5673] vhci_hcd: connection closed [ 701.467766][ T31] vhci_hcd: stop threads [ 701.476977][ T31] vhci_hcd: release socket [ 701.481445][ T31] vhci_hcd: disconnect device [ 701.606799][ T5699] loop7: detected capacity change from 0 to 128 [ 701.619155][ T5699] bio_check_eod: 44 callbacks suppressed [ 701.619173][ T5699] syz.7.11600: attempt to access beyond end of device [ 701.619173][ T5699] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 701.647102][ T5698] syz.7.11600: attempt to access beyond end of device [ 701.647102][ T5698] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 701.814766][ T5710] loop8: detected capacity change from 0 to 512 [ 701.821710][ T5710] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 701.834735][ T5710] EXT4-fs (loop8): Can't support bigalloc feature without extents feature [ 701.834735][ T5710] [ 701.845771][ T5710] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 701.855062][ T5710] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 701.882037][T30368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.973898][ T5722] lo speed is unknown, defaulting to 1000 [ 701.982183][ T5722] lo speed is unknown, defaulting to 1000 [ 702.003614][ T5727] netlink: 'syz.4.11611': attribute type 1 has an invalid length. [ 702.016896][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11611'. [ 702.034287][ T5725] loop7: detected capacity change from 0 to 2048 [ 702.077081][ T5727] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11611'. [ 702.088502][ T5725] loop7: p1 < > p4 [ 702.093611][ T5725] loop7: p4 size 8388608 extends beyond EOD, truncated [ 702.126844][ T5739] loop4: detected capacity change from 0 to 512 [ 702.138249][ T5739] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 702.152890][ T5739] EXT4-fs (loop4): 1 truncate cleaned up [ 702.164481][ T5739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.181837][ T5739] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.222014][ T5746] SELinux: policydb version 1024 does not match my version range 15-35 [ 702.231306][ T5746] SELinux: failed to load policy [ 702.274214][ T5750] loop4: detected capacity change from 0 to 512 [ 702.283206][ T5750] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 702.298726][ T5750] EXT4-fs (loop4): 1 truncate cleaned up [ 702.307465][ T5750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.321803][ T5750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.374839][ T5765] loop7: detected capacity change from 0 to 1024 [ 702.386135][ T5765] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 702.397136][ T5765] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 702.408202][ T5765] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 702.419415][ T5765] EXT4-fs error (device loop7): ext4_get_journal_inode:5800: inode #32: comm syz.7.11623: iget: special inode unallocated [ 702.433736][ T5765] EXT4-fs (loop7): no journal found [ 702.439030][ T5765] EXT4-fs (loop7): can't get journal size [ 702.446108][ T5765] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 702.450976][ T5773] loop4: detected capacity change from 0 to 2048 [ 702.463712][ T5765] EXT4-fs error (device loop7): ext4_protect_reserved_inode:160: inode #32: comm syz.7.11623: iget: special inode unallocated [ 702.478807][ T5765] EXT4-fs (loop7): failed to initialize system zone (-117) [ 702.487356][ T5770] loop8: detected capacity change from 0 to 2048 [ 702.495288][ T5765] EXT4-fs (loop7): mount failed [ 702.507505][ T5765] serio: Serial port ptm0 [ 702.528682][ T5770] loop8: p1 < > p4 [ 702.529742][ T5773] loop4: p1 < > p4 [ 702.533144][ T5770] loop8: p4 size 8388608 extends beyond EOD, truncated [ 702.539825][ T5773] loop4: p4 size 8388608 extends beyond EOD, truncated [ 702.649873][ T5782] netlink: 104 bytes leftover after parsing attributes in process `syz.7.11630'. [ 702.669761][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 702.669786][ T29] audit: type=1326 audit(1756571285.960:92776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.4.11631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54fb07ebe9 code=0x7ffc0000 [ 702.705496][ T5786] loop4: detected capacity change from 0 to 128 [ 702.712282][ T29] audit: type=1326 audit(1756571285.960:92777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.4.11631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f54fb07ebe9 code=0x7ffc0000 [ 702.737302][ T29] audit: type=1326 audit(1756571285.960:92778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.4.11631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54fb07ebe9 code=0x7ffc0000 [ 702.739692][ T5788] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11633'. [ 702.798019][ T5790] loop7: detected capacity change from 0 to 128 [ 702.814672][ T5790] syz.7.11634: attempt to access beyond end of device [ 702.814672][ T5790] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 702.831809][ T29] audit: type=1326 audit(1756571286.128:92779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.7.11634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 702.841469][ T5789] syz.7.11634: attempt to access beyond end of device [ 702.841469][ T5789] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 702.857165][ T29] audit: type=1326 audit(1756571286.128:92780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.7.11634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 702.869194][ T5789] buffer_io_error: 19 callbacks suppressed [ 702.869210][ T5789] Buffer I/O error on dev loop7, logical block 69, lost async page write [ 702.911413][ T29] audit: type=1326 audit(1756571286.128:92781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.7.11634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 702.936675][ T5792] loop8: detected capacity change from 0 to 512 [ 702.943838][ T5792] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 702.955345][ T29] audit: type=1326 audit(1756571286.128:92782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.7.11634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 702.979334][ T29] audit: type=1326 audit(1756571286.128:92783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.7.11634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 702.984474][ T5792] EXT4-fs (loop8): 1 truncate cleaned up [ 703.003158][ T29] audit: type=1326 audit(1756571286.128:92784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.7.11634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 703.003197][ T29] audit: type=1326 audit(1756571286.128:92785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.7.11634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 703.082445][ T5792] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.096701][ T5792] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.184553][ T5800] loop8: detected capacity change from 0 to 512 [ 703.192625][ T5800] journal_path: Non-blockdev passed as './bus' [ 703.200148][ T5800] EXT4-fs: error: could not find journal device path [ 703.236803][ T5803] loop7: detected capacity change from 0 to 2048 [ 703.271402][ T5803] loop7: p1 < > p4 [ 703.275823][ T5803] loop7: p4 size 8388608 extends beyond EOD, truncated [ 703.287884][ T5813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11643'. [ 703.315759][ T5814] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 703.350029][ T5818] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 703.356590][ T5818] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 703.364288][ T5818] vhci_hcd vhci_hcd.0: Device attached [ 703.398423][ T5819] vhci_hcd: connection closed [ 703.398752][ T9032] vhci_hcd: stop threads [ 703.407827][ T9032] vhci_hcd: release socket [ 703.408618][ T5823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11642'. [ 703.412324][ T9032] vhci_hcd: disconnect device [ 703.486966][ T5827] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11647'. [ 703.598706][ T5835] loop8: detected capacity change from 0 to 128 [ 703.766118][ T5839] lo speed is unknown, defaulting to 1000 [ 703.773686][ T5839] lo speed is unknown, defaulting to 1000 [ 704.231975][ T5849] netlink: 7 bytes leftover after parsing attributes in process `syz.5.11653'. [ 704.303622][ T5855] loop5: detected capacity change from 0 to 2048 [ 704.348808][ T5855] loop5: p1 < > p4 [ 704.388578][ T5855] loop5: p4 size 8388608 extends beyond EOD, truncated [ 704.411274][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11659'. [ 704.565957][ T5865] loop8: detected capacity change from 0 to 512 [ 704.575550][ T5876] SELinux: policydb version 1024 does not match my version range 15-35 [ 704.586337][ T5876] SELinux: failed to load policy [ 704.594383][ T5865] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 704.621668][ T5865] EXT4-fs (loop8): Can't support bigalloc feature without extents feature [ 704.621668][ T5865] [ 704.632462][ T5865] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 704.654841][ T5865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 704.684246][ T5884] loop7: detected capacity change from 0 to 2048 [ 704.694092][T30368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.739599][ T5884] loop7: p1 < > p4 [ 704.747343][ T5884] loop7: p4 size 8388608 extends beyond EOD, truncated [ 704.798379][ T5893] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 704.929161][ T5903] lo speed is unknown, defaulting to 1000 [ 704.936002][ T5903] lo speed is unknown, defaulting to 1000 [ 705.079410][ T5905] loop5: detected capacity change from 0 to 2048 [ 705.119410][ T5905] loop5: p1 < > p4 [ 705.156982][ T5905] loop5: p4 size 8388608 extends beyond EOD, truncated [ 705.400132][ T5926] loop7: detected capacity change from 0 to 512 [ 705.408417][ T5926] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 705.420535][ T5928] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.420886][ T5926] EXT4-fs (loop7): 1 truncate cleaned up [ 705.439186][ T5926] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.453470][ T5926] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.483529][ T5928] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.505255][ T5934] loop7: detected capacity change from 0 to 2048 [ 705.525988][ T5936] loop8: detected capacity change from 0 to 512 [ 705.532868][ T5936] journal_path: Non-blockdev passed as './bus' [ 705.539082][ T5936] EXT4-fs: error: could not find journal device path [ 705.566864][ T5934] loop7: p1 < > p4 [ 705.572164][ T5934] loop7: p4 size 8388608 extends beyond EOD, truncated [ 705.589752][ T5928] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.665878][ T5928] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.746824][ T9019] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.767906][ T9019] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.785658][ T9019] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.797681][ T9019] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.826733][ T5962] infiniband syz!: set down [ 705.831390][ T5962] infiniband syz!: added team_slave_0 [ 705.859339][ T5962] RDS/IB: syz!: added [ 705.864443][ T5962] smc: adding ib device syz! with port count 1 [ 705.871377][ T5962] smc: ib device syz! port 1 has pnetid [ 705.884933][ T5975] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 706.057454][ T5979] loop8: detected capacity change from 0 to 512 [ 706.079093][ T5979] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 706.084694][ T5984] hub 2-0:1.0: USB hub found [ 706.100953][ T5984] hub 2-0:1.0: 8 ports detected [ 706.118323][ T5979] EXT4-fs (loop8): Can't support bigalloc feature without extents feature [ 706.118323][ T5979] [ 706.129188][ T5979] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 706.148378][ T5979] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 706.180590][T30368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.279308][ T5987] lo speed is unknown, defaulting to 1000 [ 706.309002][ T5987] lo speed is unknown, defaulting to 1000 [ 706.421076][ T5997] lo speed is unknown, defaulting to 1000 [ 706.489744][ T5997] lo speed is unknown, defaulting to 1000 [ 706.525896][ T5999] netlink: 'syz.1.11709': attribute type 6 has an invalid length. [ 706.801510][ T6024] SELinux: policydb version 1024 does not match my version range 15-35 [ 706.813274][ T6026] loop7: detected capacity change from 0 to 512 [ 706.822600][ T6026] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 706.835207][ T6024] SELinux: failed to load policy [ 706.848896][ T6026] EXT4-fs (loop7): 1 truncate cleaned up [ 706.858500][ T6026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.874504][ T6026] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.887088][ T6003] lo speed is unknown, defaulting to 1000 [ 706.906878][T11483] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.928926][ T6003] lo speed is unknown, defaulting to 1000 [ 706.949459][T11483] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.965139][ T6039] loop7: detected capacity change from 0 to 512 [ 706.973486][ T6039] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 706.984670][ T6039] EXT4-fs (loop7): orphan cleanup on readonly fs [ 706.993359][ T6039] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.11721: Block bitmap for bg 0 marked uninitialized [ 706.996104][ T6042] __nla_validate_parse: 12 callbacks suppressed [ 706.996346][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11720'. [ 707.028116][ T6039] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 707.030263][T11483] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.048404][ T6039] EXT4-fs (loop7): 1 orphan inode deleted [ 707.054921][ T6039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 707.080117][T29960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.101605][T11483] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.123527][ T6051] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11725'. [ 707.146077][ T6047] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 707.174005][ T6053] wireguard0: entered promiscuous mode [ 707.180823][ T6053] wireguard0: entered allmulticast mode [ 707.196235][ T6057] SELinux: policydb version 1024 does not match my version range 15-35 [ 707.205952][ T6057] SELinux: failed to load policy [ 707.228072][ T6060] loop7: detected capacity change from 0 to 512 [ 707.237626][ T6060] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 707.255472][ T6060] EXT4-fs (loop7): orphan cleanup on readonly fs [ 707.268506][ T6060] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.11723: Block bitmap for bg 0 marked uninitialized [ 707.283866][ T6060] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 707.293473][ T6060] EXT4-fs (loop7): 1 orphan inode deleted [ 707.306324][ T6060] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 707.319516][ T6063] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 707.343737][ T6060] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 707.360827][ T6060] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 707.426210][ T6074] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11733'. [ 707.484087][ T6082] SELinux: policydb version 1024 does not match my version range 15-35 [ 707.494948][ T6082] SELinux: failed to load policy [ 707.533538][ T6091] loop5: detected capacity change from 0 to 512 [ 707.540600][ T6091] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 707.551752][ T6091] EXT4-fs (loop5): 1 truncate cleaned up [ 707.558470][ T6091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.571776][ T6091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.574627][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11739'. [ 707.635620][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11739'. [ 707.664680][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11741'. [ 707.676760][T11483] bond0 (unregistering): Released all slaves [ 707.688422][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11739'. [ 707.705963][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11741'. [ 707.716947][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11741'. [ 707.722794][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11739'. [ 707.735850][ T6003] chnl_net:caif_netlink_parms(): no params data found [ 707.833093][ T6113] loop5: detected capacity change from 0 to 128 [ 707.844161][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 707.844181][ T29] audit: type=1400 audit(1756571291.398:92952): avc: denied { remount } for pid=6103 comm="syz.1.11742" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 707.878668][T11483] veth1_macvtap: left promiscuous mode [ 707.887004][ T6113] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 707.900588][T11483] veth0_macvtap: left promiscuous mode [ 707.903537][ T6113] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 707.930839][ T29] audit: type=1326 audit(1756571291.472:92953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 707.955897][ T29] audit: type=1326 audit(1756571291.472:92954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 707.980963][ T29] audit: type=1326 audit(1756571291.472:92955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 708.004827][ T29] audit: type=1326 audit(1756571291.482:92956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 708.029989][ T29] audit: type=1326 audit(1756571291.482:92957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 708.055657][ T29] audit: type=1326 audit(1756571291.482:92958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 708.080811][ T29] audit: type=1326 audit(1756571291.482:92959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 708.106334][ T29] audit: type=1326 audit(1756571291.482:92960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 708.131152][ T29] audit: type=1326 audit(1756571291.482:92961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz.1.11742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 708.158896][T29960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.188993][ T6129] SELinux: policydb version 1024 does not match my version range 15-35 [ 708.203576][ T6129] SELinux: failed to load policy [ 708.295743][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.304121][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.313416][ T6003] bridge_slave_0: entered allmulticast mode [ 708.332077][ T4249] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 708.334793][ T6003] bridge_slave_0: entered promiscuous mode [ 708.372272][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.380736][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.394903][ T6141] loop5: detected capacity change from 0 to 512 [ 708.413204][ T6141] journal_path: Non-blockdev passed as './bus' [ 708.420794][ T6141] EXT4-fs: error: could not find journal device path [ 708.427708][ T6003] bridge_slave_1: entered allmulticast mode [ 708.428395][ T6003] bridge_slave_1: entered promiscuous mode [ 708.469425][ T6003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.485484][ T6137] loop7: detected capacity change from 0 to 128 [ 708.491886][ T6003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.508452][ T6150] IPv6: NLM_F_CREATE should be specified when creating new route [ 708.519593][ T6003] team0: Port device team_slave_0 added [ 708.530197][ T6137] syz.7.11751: attempt to access beyond end of device [ 708.530197][ T6137] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 708.555290][ T6003] team0: Port device team_slave_1 added [ 708.581236][ T6136] syz.7.11751: attempt to access beyond end of device [ 708.581236][ T6136] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 708.598844][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.607137][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.634511][ T6003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.651570][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.659981][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.687276][ T6003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.703355][T11483] IPVS: stop unused estimator thread 0... [ 708.739986][ T6160] SELinux: policydb version 1024 does not match my version range 15-35 [ 708.761479][ T6160] SELinux: failed to load policy [ 708.769714][ T6003] hsr_slave_0: entered promiscuous mode [ 708.780180][ T6003] hsr_slave_1: entered promiscuous mode [ 708.796902][ T6003] debugfs: 'hsr0' already exists in 'hsr' [ 708.802820][ T6003] Cannot create hsr debugfs directory [ 708.840979][ T6162] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.885750][ T6162] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.018959][ T6171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7410 sclass=netlink_route_socket pid=6171 comm=syz.7.11761 [ 709.040112][ T6162] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.093769][ T6162] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.207597][ T6187] loop4: detected capacity change from 0 to 2048 [ 709.252595][ T6187] loop4: p1 < > p4 [ 709.257253][ T6187] loop4: p4 size 8388608 extends beyond EOD, truncated [ 709.356386][ T6003] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 709.381540][ T6003] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 709.401909][ T6003] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 709.420185][ T6189] loop4: detected capacity change from 0 to 512 [ 709.422901][ T6003] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 709.432164][ T6189] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 709.446473][ T6189] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 709.446473][ T6189] [ 709.457427][ T6189] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 709.471750][ T6189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 709.499173][T31734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.530748][T11483] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.559305][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.606516][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.627862][ T6202] loop5: detected capacity change from 0 to 2048 [ 709.635424][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.646097][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.654872][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.664012][ T6202] loop5: p1 < > p4 [ 709.674801][ T6003] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.681687][ T6202] loop5: p4 size 8388608 extends beyond EOD, truncated [ 709.682723][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.701663][ T9026] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.708848][ T9026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.742701][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.749828][ T9019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.825874][ T6200] loop4: detected capacity change from 0 to 8192 [ 709.850304][ T6200] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 709.854976][ T6205] loop5: detected capacity change from 0 to 512 [ 709.877131][ T6205] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 709.892769][ T6205] EXT4-fs (loop5): 1 truncate cleaned up [ 709.903200][ T6205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.904959][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.924786][ T6205] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.116396][ T6003] veth0_vlan: entered promiscuous mode [ 710.126926][ T6003] veth1_vlan: entered promiscuous mode [ 710.144753][ T6003] veth0_macvtap: entered promiscuous mode [ 710.153255][ T6003] veth1_macvtap: entered promiscuous mode [ 710.166428][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.177386][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.213810][ T6232] lo speed is unknown, defaulting to 1000 [ 710.220832][ T6232] lo speed is unknown, defaulting to 1000 [ 710.408972][ T9032] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.422220][ T9032] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.439591][ T6238] loop8: detected capacity change from 0 to 128 [ 710.455676][ T9032] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.466079][ T9032] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.651402][ T6241] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.673836][ T6243] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 710.695409][ T6241] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.742294][ T6241] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.764432][ T6248] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.794122][ T6241] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.844674][ T6248] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.860449][ T6250] loop5: detected capacity change from 0 to 512 [ 710.868308][ T6250] journal_path: Non-blockdev passed as './bus' [ 710.875810][ T6250] EXT4-fs: error: could not find journal device path [ 710.945444][ T6248] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.039678][ T6248] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.077024][ T6262] program syz.5.11783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 711.172621][ T8985] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.190930][ T8985] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.203521][ T8985] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.219127][ T6266] loop5: detected capacity change from 0 to 512 [ 711.227773][ T6266] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 711.233873][ T8985] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.251452][ T6266] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 711.251452][ T6266] [ 711.263594][ T6266] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 711.275145][ T6266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 711.291809][ T6271] loop4: detected capacity change from 0 to 128 [ 711.301828][ T6271] syz.4.11788: attempt to access beyond end of device [ 711.301828][ T6271] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 711.317603][ T4249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.318280][ T6271] syz.4.11788: attempt to access beyond end of device [ 711.318280][ T6271] loop4: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 711.343122][ T6271] syz.4.11788: attempt to access beyond end of device [ 711.343122][ T6271] loop4: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 711.358100][ T6271] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 711.370869][ T6271] syz.4.11788: attempt to access beyond end of device [ 711.370869][ T6271] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 711.388404][ T6271] syz.4.11788: attempt to access beyond end of device [ 711.388404][ T6271] loop4: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 711.403889][ T6271] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 711.415578][ T6278] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.418056][ T6271] syz.4.11788: attempt to access beyond end of device [ 711.418056][ T6271] loop4: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 711.445143][ T6271] syz.4.11788: attempt to access beyond end of device [ 711.445143][ T6271] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 711.459649][ T6271] syz.4.11788: attempt to access beyond end of device [ 711.459649][ T6271] loop4: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 711.473336][ T6271] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 711.484637][ T6271] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 711.499605][ T6271] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 711.509113][ T6271] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 711.521071][ T6271] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 711.530936][ T6271] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 711.531462][ T6278] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.542130][ T6271] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 711.561427][ T6271] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 711.597495][ T6278] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.645186][ T6278] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.803855][ T6291] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 711.810434][ T6291] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 711.819393][ T6291] vhci_hcd vhci_hcd.0: Device attached [ 711.829301][ T6292] vhci_hcd: connection closed [ 711.829569][ T9019] vhci_hcd: stop threads [ 711.838681][ T9019] vhci_hcd: release socket [ 711.843413][ T9019] vhci_hcd: disconnect device [ 711.907790][ T6299] loop4: detected capacity change from 0 to 512 [ 711.916061][ T6299] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 711.929472][ T6299] EXT4-fs (loop4): 1 truncate cleaned up [ 711.935812][ T6299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.961523][ T9019] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.975572][ T9019] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.979412][T31734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.988032][ T9019] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.010262][ T9019] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.082488][ T6311] loop8: detected capacity change from 0 to 1764 [ 712.089300][ T6311] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 712.229756][ T6311] loop8: detected capacity change from 0 to 512 [ 712.236714][ T6311] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 712.255568][ T6311] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.11804: Failed to acquire dquot type 1 [ 712.267811][ T6311] EXT4-fs (loop8): 1 truncate cleaned up [ 712.274089][ T6311] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.457584][ T6322] loop7: detected capacity change from 0 to 512 [ 712.474747][ T6322] journal_path: Non-blockdev passed as './bus' [ 712.481021][ T6322] EXT4-fs: error: could not find journal device path [ 712.491969][ T6324] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.11804: deleted inode referenced: 12 [ 712.528848][ T6324] lo speed is unknown, defaulting to 1000 [ 712.535963][ T6324] lo speed is unknown, defaulting to 1000 [ 712.657940][ T6326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7410 sclass=netlink_route_socket pid=6326 comm=syz.7.11807 [ 713.048195][ T6003] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.210313][ T6335] loop4: detected capacity change from 0 to 8192 [ 713.254026][ T6335] loop4: p1 p2[DM] p4 [ 713.258253][ T6335] loop4: p1 size 196608 extends beyond EOD, truncated [ 713.267097][ T6335] loop4: p2 start 4292936063 is beyond EOD, truncated [ 713.274013][ T6335] loop4: p4 size 50331648 extends beyond EOD, truncated [ 713.389617][ T6339] hub 2-0:1.0: USB hub found [ 713.394399][ T6339] hub 2-0:1.0: 8 ports detected [ 713.402709][ T6341] __nla_validate_parse: 21 callbacks suppressed [ 713.402796][ T6341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11812'. [ 713.437187][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 713.437206][ T29] audit: type=1326 audit(1756571297.267:93196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.11813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 713.469476][ T29] audit: type=1326 audit(1756571297.267:93197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.11813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 713.494992][ T29] audit: type=1326 audit(1756571297.267:93198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.11813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 713.520140][ T29] audit: type=1326 audit(1756571297.267:93199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.11813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 713.545101][ T29] audit: type=1326 audit(1756571297.267:93200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.11813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 713.570082][ T29] audit: type=1326 audit(1756571297.267:93201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.11813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 713.594799][ T29] audit: type=1326 audit(1756571297.267:93202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.11813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 713.619641][ T29] audit: type=1326 audit(1756571297.267:93203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.11813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 713.644516][ T29] audit: type=1326 audit(1756571297.267:93204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.11813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 713.669894][ T29] audit: type=1326 audit(1756571297.267:93205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.1.11813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032985ebe9 code=0x7ffc0000 [ 713.705637][ T9032] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.718112][ T9032] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.734103][ T9032] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.744801][ T9032] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.949882][ T6352] lo speed is unknown, defaulting to 1000 [ 713.949997][ T6371] loop8: detected capacity change from 0 to 128 [ 713.957224][ T6352] lo speed is unknown, defaulting to 1000 [ 714.062131][ T6374] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 714.096564][ T6352] chnl_net:caif_netlink_parms(): no params data found [ 714.103653][ T6379] loop8: detected capacity change from 0 to 512 [ 714.104347][ T6379] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 714.109460][ T6379] EXT4-fs (loop8): Can't support bigalloc feature without extents feature [ 714.109460][ T6379] [ 714.131852][ T6379] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 714.141630][ T6379] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 714.175172][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.182322][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.193299][ T6352] bridge_slave_0: entered allmulticast mode [ 714.201345][ T6352] bridge_slave_0: entered promiscuous mode [ 714.212653][ T6352] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.221260][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.230104][ T6352] bridge_slave_1: entered allmulticast mode [ 714.238297][ T6352] bridge_slave_1: entered promiscuous mode [ 714.246509][ T6003] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.282776][ T6352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.304246][ T6352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.330273][ T6391] loop8: detected capacity change from 0 to 512 [ 714.337375][T11483] bridge_slave_1: left allmulticast mode [ 714.337802][ T6391] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 714.344754][T11483] bridge_slave_1: left promiscuous mode [ 714.361672][T11483] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.371143][T11483] bridge_slave_0: left promiscuous mode [ 714.376982][T11483] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.381853][ T6391] EXT4-fs (loop8): 1 truncate cleaned up [ 714.392941][ T6391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.397838][ T6396] loop4: detected capacity change from 0 to 512 [ 714.412376][ T6396] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 714.423824][ T6396] EXT4-fs (loop4): 1 truncate cleaned up [ 714.430155][ T6396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.447553][ T6396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.475957][ T6003] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.504921][ T6401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11829'. [ 714.747825][ T6352] team0: Port device team_slave_0 added [ 714.759028][ T10] lo speed is unknown, defaulting to 1000 [ 714.761852][ T6352] team0: Port device team_slave_1 added [ 714.818845][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.825914][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.851909][ T6352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.864840][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11833'. [ 714.870229][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11833'. [ 714.883487][T11483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.891062][T11483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.923011][T11483] team0 (unregistering): Port device team_slave_1 removed [ 714.925702][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11833'. [ 714.941897][T11483] team0 (unregistering): Port device team_slave_0 removed [ 714.949751][ T9032] smc: removing ib device syz! [ 714.975875][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.982937][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.008990][ T6352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.028924][ T6411] bond0: (slave bond_slave_1): Releasing backup interface [ 715.041802][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11833'. [ 715.067806][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11833'. [ 715.078810][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11833'. [ 715.105243][ T6352] hsr_slave_0: entered promiscuous mode [ 715.109470][ T6415] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11834'. [ 715.121893][ T6352] hsr_slave_1: entered promiscuous mode [ 715.134272][ T6352] debugfs: 'hsr0' already exists in 'hsr' [ 715.141537][ T6352] Cannot create hsr debugfs directory [ 715.154222][ T6417] loop4: detected capacity change from 0 to 2048 [ 715.189039][ T6417] loop4: p1 < > p4 [ 715.198640][ T6417] loop4: p4 size 8388608 extends beyond EOD, truncated [ 715.326988][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11837'. [ 715.343096][T11483] IPVS: stop unused estimator thread 0... [ 715.374854][ T6424] loop4: detected capacity change from 0 to 512 [ 715.392576][ T6424] journal_path: Non-blockdev passed as './bus' [ 715.400113][ T6424] EXT4-fs: error: could not find journal device path [ 715.437146][ T6426] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 715.443706][ T6426] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 715.452727][ T6426] vhci_hcd vhci_hcd.0: Device attached [ 715.463604][ T6430] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.473830][ T6427] vhci_hcd: connection closed [ 715.474637][T11483] vhci_hcd: stop threads [ 715.485235][T11483] vhci_hcd: release socket [ 715.489682][T11483] vhci_hcd: disconnect device [ 715.515581][ T6434] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.526412][ T6352] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 715.536936][ T6352] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 715.549707][ T6430] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.562180][ T6352] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 715.572371][ T6434] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.584455][ T6352] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 715.608733][ T6430] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.637653][ T6352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.646319][ T6434] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.663937][ T6352] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.674918][T11483] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.682108][T11483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.693555][T11483] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.700664][T11483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.712630][ T6430] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.726703][ T6434] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.788960][ T9026] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.800463][T11483] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.813711][T11483] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.828787][T11483] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.841942][ T6352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.871290][ T6448] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 715.877882][ T6448] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 715.886863][ T6448] vhci_hcd vhci_hcd.0: Device attached [ 715.898748][ T6449] vhci_hcd: connection closed [ 715.898807][ T9059] vhci_hcd: stop threads [ 715.907819][ T9059] vhci_hcd: release socket [ 715.912286][ T9059] vhci_hcd: disconnect device [ 715.925991][ T6453] loop8: detected capacity change from 0 to 512 [ 715.935031][ T6453] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 715.959944][ T6453] EXT4-fs (loop8): Can't support bigalloc feature without extents feature [ 715.959944][ T6453] [ 715.962062][ T6352] veth0_vlan: entered promiscuous mode [ 715.972346][ T6453] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 715.982946][ T6352] veth1_vlan: entered promiscuous mode [ 716.000839][ T6453] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 716.005827][ T6352] veth0_macvtap: entered promiscuous mode [ 716.020828][ T6352] veth1_macvtap: entered promiscuous mode [ 716.033439][ T6352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.041741][ T6003] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.043293][ T6352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.066972][ T9019] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.086805][ T9026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.102670][ T9026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.116913][ T6463] loop8: detected capacity change from 0 to 512 [ 716.124078][ T9026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.124856][ T6463] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 716.145463][ T6463] EXT4-fs (loop8): 1 truncate cleaned up [ 716.330993][ T6481] loop8: detected capacity change from 0 to 128 [ 716.531800][ T6487] loop7: detected capacity change from 0 to 512 [ 716.540436][ T6487] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 716.554212][ T6487] EXT4-fs (loop7): orphan cleanup on readonly fs [ 716.560586][ T6489] IPv6: NLM_F_CREATE should be specified when creating new route [ 716.570141][ T6487] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.11853: Block bitmap for bg 0 marked uninitialized [ 716.587792][ T6487] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 716.604557][ T6487] EXT4-fs (loop7): 1 orphan inode deleted [ 716.614004][ T6487] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 716.625356][ T6487] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 716.695812][ T6494] loop8: detected capacity change from 0 to 512 [ 716.703057][ T6494] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 716.717172][ T6494] EXT4-fs (loop8): 1 truncate cleaned up [ 716.908968][ T6522] loop4: detected capacity change from 0 to 128 [ 716.961931][ T6525] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 717.034805][ T6534] loop8: detected capacity change from 0 to 1764 [ 717.041610][ T6534] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 717.056321][ T6534] loop8: detected capacity change from 0 to 512 [ 717.063690][ T6534] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 717.093987][ T6534] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.11874: Failed to acquire dquot type 1 [ 717.107730][ T6534] EXT4-fs (loop8): 1 truncate cleaned up [ 717.293435][ T6553] loop8: detected capacity change from 0 to 512 [ 717.304604][ T6553] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 717.325418][ T6553] EXT4-fs (loop8): 1 truncate cleaned up [ 717.326331][ T6558] loop7: detected capacity change from 0 to 736 [ 717.342125][ T6558] iso9660: Unknown parameter 'sessix؝10ȃ z' [ 717.355929][T11483] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.367063][T11483] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.388963][ T9019] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.416847][ T9019] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.439831][ T6567] openvswitch: netlink: Message has 6 unknown bytes. [ 717.482212][ T6564] netlink: 'syz.8.11883': attribute type 27 has an invalid length. [ 717.488328][ T6574] loop4: detected capacity change from 0 to 512 [ 717.499849][ T6574] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 717.522558][ T6574] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 717.522558][ T6574] [ 717.533588][ T6574] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 717.545865][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.550684][ T6579] loop5: detected capacity change from 0 to 128 [ 717.553124][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.621623][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.637352][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.685469][T11483] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.703920][ T6584] loop4: detected capacity change from 0 to 512 [ 717.711836][T11483] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.726750][T11483] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.740515][ T6584] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 717.746381][T11483] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.757014][ T6584] EXT4-fs (loop4): 1 truncate cleaned up [ 717.840130][ T6591] loop8: detected capacity change from 0 to 1764 [ 717.849003][ T6591] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 717.874838][ T6591] loop8: detected capacity change from 0 to 512 [ 717.883425][ T6591] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 717.910052][ T6593] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 717.925110][ T6591] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.11892: Failed to acquire dquot type 1 [ 717.941937][ T6591] EXT4-fs (loop8): 1 truncate cleaned up [ 717.954418][ T6601] loop5: detected capacity change from 0 to 512 [ 717.961591][ T6601] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 717.964732][ T6602] SELinux: policydb version 0 does not match my version range 15-35 [ 717.983478][ T6601] EXT4-fs (loop5): 1 truncate cleaned up [ 717.983570][ T6602] SELinux: failed to load policy [ 718.045201][ T6609] loop5: detected capacity change from 0 to 2048 [ 718.060707][ T6615] loop4: detected capacity change from 0 to 128 [ 718.083107][ T6609] loop5: p1 < > p4 [ 718.089518][ T6609] loop5: p4 size 8388608 extends beyond EOD, truncated [ 718.220935][ T6624] loop5: detected capacity change from 0 to 128 [ 718.313159][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 718.313282][ T29] audit: type=1400 audit(1756571302.391:93527): avc: denied { unmount } for pid=6352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 718.366266][ T6631] SELinux: policydb version 0 does not match my version range 15-35 [ 718.386556][ T6631] SELinux: failed to load policy [ 718.449114][ T6633] loop7: detected capacity change from 0 to 512 [ 718.474026][ T6633] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 718.505533][ T6633] EXT4-fs (loop7): 1 truncate cleaned up [ 718.557061][ T6639] __nla_validate_parse: 22 callbacks suppressed [ 718.557080][ T6639] netlink: 104 bytes leftover after parsing attributes in process `syz.7.11911'. [ 718.618679][ T6645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11914'. [ 718.645659][ T3386] lo speed is unknown, defaulting to 1000 [ 718.797787][ T6660] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 718.797814][ T6660] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 718.797851][ T6660] vhci_hcd vhci_hcd.0: Device attached [ 718.800886][ T6662] vhci_hcd: connection closed [ 718.801065][ T9026] vhci_hcd: stop threads [ 718.801099][ T9026] vhci_hcd: release socket [ 718.801113][ T9026] vhci_hcd: disconnect device [ 719.012828][ T6666] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 719.012912][ T6666] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 719.012944][ T6666] vhci_hcd vhci_hcd.0: Device attached [ 719.041070][ T6667] vhci_hcd: connection closed [ 719.041333][T11483] vhci_hcd: stop threads [ 719.050367][T11483] vhci_hcd: release socket [ 719.050379][T11483] vhci_hcd: disconnect device [ 719.312734][ T6672] FAULT_INJECTION: forcing a failure. [ 719.312734][ T6672] name failslab, interval 1, probability 0, space 0, times 0 [ 719.312825][ T6672] CPU: 1 UID: 0 PID: 6672 Comm: syz.4.11921 Not tainted syzkaller #0 PREEMPT(voluntary) [ 719.312856][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 719.312870][ T6672] Call Trace: [ 719.312876][ T6672] [ 719.312883][ T6672] __dump_stack+0x1d/0x30 [ 719.312903][ T6672] dump_stack_lvl+0xe8/0x140 [ 719.312959][ T6672] dump_stack+0x15/0x1b [ 719.312979][ T6672] should_fail_ex+0x265/0x280 [ 719.313005][ T6672] should_failslab+0x8c/0xb0 [ 719.313063][ T6672] kmem_cache_alloc_node_noprof+0x57/0x320 [ 719.313101][ T6672] ? __alloc_skb+0x101/0x320 [ 719.313125][ T6672] __alloc_skb+0x101/0x320 [ 719.313161][ T6672] netlink_alloc_large_skb+0xba/0xf0 [ 719.313231][ T6672] netlink_sendmsg+0x3cf/0x6b0 [ 719.313262][ T6672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.313288][ T6672] __sock_sendmsg+0x145/0x180 [ 719.313362][ T6672] ____sys_sendmsg+0x31e/0x4e0 [ 719.313409][ T6672] ___sys_sendmsg+0x17b/0x1d0 [ 719.313455][ T6672] __x64_sys_sendmsg+0xd4/0x160 [ 719.313489][ T6672] x64_sys_call+0x191e/0x2ff0 [ 719.313516][ T6672] do_syscall_64+0xd2/0x200 [ 719.313683][ T6672] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 719.313730][ T6672] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 719.313767][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.313799][ T6672] RIP: 0033:0x7f54fb07ebe9 [ 719.313821][ T6672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.313935][ T6672] RSP: 002b:00007f54f9adf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.314020][ T6672] RAX: ffffffffffffffda RBX: 00007f54fb2b5fa0 RCX: 00007f54fb07ebe9 [ 719.314038][ T6672] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 719.314066][ T6672] RBP: 00007f54f9adf090 R08: 0000000000000000 R09: 0000000000000000 [ 719.314088][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.314105][ T6672] R13: 00007f54fb2b6038 R14: 00007f54fb2b5fa0 R15: 00007ffcd5679f88 [ 719.314131][ T6672] [ 719.436950][ T6680] netlink: 104 bytes leftover after parsing attributes in process `syz.7.11924'. [ 719.445051][ T6681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11923'. [ 719.589747][ T29] audit: type=1326 audit(1756571303.724:93528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.5.11930" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f539357ebe9 code=0x0 [ 719.589861][ T29] audit: type=1326 audit(1756571303.724:93529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.8.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206658ebe9 code=0x7ffc0000 [ 719.589895][ T29] audit: type=1326 audit(1756571303.724:93530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.8.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206658ebe9 code=0x7ffc0000 [ 719.590216][ T29] audit: type=1326 audit(1756571303.724:93531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.8.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f206658ebe9 code=0x7ffc0000 [ 719.590249][ T29] audit: type=1326 audit(1756571303.724:93532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.8.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206658ebe9 code=0x7ffc0000 [ 719.590285][ T29] audit: type=1326 audit(1756571303.724:93533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.8.11929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206658ebe9 code=0x7ffc0000 [ 719.661053][ T6701] lo speed is unknown, defaulting to 1000 [ 719.661732][ T6701] lo speed is unknown, defaulting to 1000 [ 719.804658][ T6704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11930'. [ 719.807583][ T6704] siw: device registration error -23 [ 719.999619][ T29] audit: type=1326 audit(1756571304.155:93534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.8.11934" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f206658ebe9 code=0x0 [ 720.071140][ T6716] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 720.109241][ T6717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11936'. [ 720.146358][ T6722] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11934'. [ 720.326078][ T29] audit: type=1326 audit(1756571304.501:93535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.1.11944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5fc7ebe9 code=0x7ffc0000 [ 720.351721][ T29] audit: type=1326 audit(1756571304.501:93536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.1.11944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5fc7ebe9 code=0x7ffc0000 [ 720.413453][ T6740] lo speed is unknown, defaulting to 1000 [ 720.421269][ T6740] lo speed is unknown, defaulting to 1000 [ 720.699751][ T6756] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11950'. [ 720.828780][ T6765] loop8: detected capacity change from 0 to 128 [ 720.838085][ T6765] bio_check_eod: 21 callbacks suppressed [ 720.838104][ T6765] syz.8.11955: attempt to access beyond end of device [ 720.838104][ T6765] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 720.860582][ T6765] syz.8.11955: attempt to access beyond end of device [ 720.860582][ T6765] loop8: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 720.876908][ T6765] syz.8.11955: attempt to access beyond end of device [ 720.876908][ T6765] loop8: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 720.891964][ T6765] buffer_io_error: 3 callbacks suppressed [ 720.891985][ T6765] Buffer I/O error on dev loop8, logical block 76, lost async page write [ 720.901804][ T6773] loop5: detected capacity change from 0 to 512 [ 720.915063][ T6773] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 720.922066][ T6765] syz.8.11955: attempt to access beyond end of device [ 720.922066][ T6765] loop8: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 720.926962][ T6773] EXT4-fs (loop5): orphan cleanup on readonly fs [ 720.942382][ T6765] syz.8.11955: attempt to access beyond end of device [ 720.942382][ T6765] loop8: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 720.945441][ T6773] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.11953: Block bitmap for bg 0 marked uninitialized [ 720.959787][ T6765] Buffer I/O error on dev loop8, logical block 88, lost async page write [ 720.981857][ T6773] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 720.991301][ T6765] syz.8.11955: attempt to access beyond end of device [ 720.991301][ T6765] loop8: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 721.005455][ T6765] syz.8.11955: attempt to access beyond end of device [ 721.005455][ T6765] loop8: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 721.019385][ T6765] Buffer I/O error on dev loop8, logical block 92, lost async page write [ 721.030629][ T6765] syz.8.11955: attempt to access beyond end of device [ 721.030629][ T6765] loop8: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 721.044501][ T6765] syz.8.11955: attempt to access beyond end of device [ 721.044501][ T6765] loop8: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 721.058229][ T6765] Buffer I/O error on dev loop8, logical block 104, lost async page write [ 721.065776][ T6773] EXT4-fs (loop5): 1 orphan inode deleted [ 721.077476][ T6773] EXT4-fs mount: 20 callbacks suppressed [ 721.077496][ T6773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 721.115449][ T6765] syz.8.11955: attempt to access beyond end of device [ 721.115449][ T6765] loop8: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 721.132558][ T6765] Buffer I/O error on dev loop8, logical block 108, lost async page write [ 721.132668][ T6773] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 721.152260][ T6779] loop4: detected capacity change from 0 to 1024 [ 721.155225][ T6765] Buffer I/O error on dev loop8, logical block 120, lost async page write [ 721.162650][ T6773] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 721.168356][ T6765] Buffer I/O error on dev loop8, logical block 124, lost async page write [ 721.168771][ T6765] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 721.169283][ T6765] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 721.183065][ T6779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.191052][ T6781] hub 2-0:1.0: USB hub found [ 721.222989][ T6765] Buffer I/O error on dev loop8, logical block 112, lost async page write [ 721.226364][ T6781] hub 2-0:1.0: 8 ports detected [ 721.324476][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11958'. [ 721.337998][ T6790] siw: device registration error -23 [ 721.363369][ T6791] program syz.4.11956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 721.585467][T31734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.599546][ T4249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.623537][ T6799] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11960'. [ 721.689515][ T6805] loop5: detected capacity change from 0 to 2048 [ 721.788554][ T6805] loop5: p1 < > p4 [ 721.794035][ T6805] loop5: p4 size 8388608 extends beyond EOD, truncated [ 721.849683][ T6810] loop5: detected capacity change from 0 to 2048 [ 721.894693][ T6811] lo speed is unknown, defaulting to 1000 [ 721.901577][ T6811] lo speed is unknown, defaulting to 1000 [ 721.907620][ T6810] loop5: p1 < > p4 [ 721.918643][ T6810] loop5: p4 size 8388608 extends beyond EOD, truncated [ 722.089221][ T6818] loop7: detected capacity change from 0 to 512 [ 722.104418][ T6818] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 722.138468][ T6818] EXT4-fs (loop7): 1 truncate cleaned up [ 722.150753][ T6818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.176735][ T6821] lo speed is unknown, defaulting to 1000 [ 722.183430][ T6821] lo speed is unknown, defaulting to 1000 [ 722.414457][ T6826] loop5: detected capacity change from 0 to 128 [ 722.494590][T29960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.951539][ T6845] hub 2-0:1.0: USB hub found [ 722.956277][ T6845] hub 2-0:1.0: 8 ports detected [ 722.956370][ T6847] loop4: detected capacity change from 0 to 2048 [ 722.979094][ T6847] loop4: p1 < > p4 [ 722.983557][ T6847] loop4: p4 size 8388608 extends beyond EOD, truncated [ 723.107657][ T6853] siw: device registration error -23 [ 723.637392][ T9019] bond1 (unregistering): Released all slaves [ 723.650192][ T6852] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.674491][ T6863] lo speed is unknown, defaulting to 1000 [ 723.675086][ T6865] __nla_validate_parse: 7 callbacks suppressed [ 723.675124][ T6865] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11983'. [ 723.681083][ T6863] lo speed is unknown, defaulting to 1000 [ 723.750495][ T9019] tipc: Left network mode [ 723.757564][ T9019] IPVS: stopping master sync thread 30787 ... [ 723.778730][ T9019] hsr_slave_0: left promiscuous mode [ 723.788384][ T9019] hsr_slave_1: left promiscuous mode [ 723.793875][ T6871] loop8: detected capacity change from 0 to 512 [ 723.801522][ T9019] team0: left promiscuous mode [ 723.802294][ T6871] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 723.812367][ T9019] veth1_macvtap: left promiscuous mode [ 723.822384][ T6871] EXT4-fs (loop8): 1 truncate cleaned up [ 723.831143][ T6871] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.835089][ T9019] veth0_macvtap: left promiscuous mode [ 723.848171][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.960689][ T6878] loop4: detected capacity change from 0 to 128 [ 724.007459][ T9] lo speed is unknown, defaulting to 1000 [ 724.013273][ T9] infiniband syz2: ib_query_port failed (-19) [ 724.023528][ T6852] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.114957][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 724.114985][ T29] audit: type=1400 audit(1756571308.481:93615): avc: granted { setsecparam } for pid=6879 comm="syz.1.11988" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 724.145186][ T6852] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.190509][ T6852] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.259482][ T29] audit: type=1326 audit(1756571308.628:93616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 724.297840][ T29] audit: type=1326 audit(1756571308.628:93617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 724.323126][ T29] audit: type=1326 audit(1756571308.628:93618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 724.347577][ T29] audit: type=1326 audit(1756571308.628:93619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 724.372745][ T29] audit: type=1326 audit(1756571308.628:93620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 724.397160][ T29] audit: type=1326 audit(1756571308.628:93621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 724.420969][ T29] audit: type=1326 audit(1756571308.628:93622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 724.445206][ T29] audit: type=1326 audit(1756571308.628:93623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 724.469705][ T29] audit: type=1326 audit(1756571308.628:93624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.7.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80620aebe9 code=0x7ffc0000 [ 724.543389][ T8985] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.560140][ T9019] IPVS: stop unused estimator thread 0... [ 724.573020][ T9059] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.585304][ T6898] SELinux: policydb version 1024 does not match my version range 15-35 [ 724.595595][ T6898] SELinux: failed to load policy [ 724.604978][ T9059] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.638694][ T9059] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.659967][ T6904] loop5: detected capacity change from 0 to 128 [ 724.677742][ T6904] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 724.695754][ T6904] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 724.728024][ T6900] loop4: detected capacity change from 0 to 512 [ 724.741761][ T6910] hub 2-0:1.0: USB hub found [ 724.746599][ T6910] hub 2-0:1.0: 8 ports detected [ 724.758674][ T6900] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 724.770972][ T6913] IPv6: NLM_F_CREATE should be specified when creating new route [ 724.782948][ T6900] EXT4-fs (loop4): 1 truncate cleaned up [ 724.791851][ T6900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.843082][ T6925] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12003'. [ 724.890219][T31734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.899563][ T6931] loop8: detected capacity change from 0 to 2048 [ 724.923855][ T6931] loop8: p1 < > p4 [ 724.927824][ T6934] loop4: detected capacity change from 0 to 128 [ 724.945131][ T6931] loop8: p4 size 8388608 extends beyond EOD, truncated [ 724.974856][ T4249] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 725.013152][ T6938] loop5: detected capacity change from 0 to 1764 [ 725.027042][ T6938] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 725.048091][ T6938] loop5: detected capacity change from 0 to 512 [ 725.059466][ T6938] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 725.071856][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12009'. [ 725.096926][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12009'. [ 725.113986][ T6938] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.12008: Failed to acquire dquot type 1 [ 725.129649][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12009'. [ 725.145073][ T6938] EXT4-fs (loop5): 1 truncate cleaned up [ 725.153465][ T6938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.154688][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12009'. [ 725.190126][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12009'. [ 725.191236][ T4249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.201767][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12009'. [ 725.281682][ T6953] loop8: detected capacity change from 0 to 2048 [ 725.331608][ T6953] loop8: p1 < > p4 [ 725.342450][ T6953] loop8: p4 size 8388608 extends beyond EOD, truncated [ 725.352887][ T6963] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12016'. [ 725.421366][ T6965] loop5: detected capacity change from 0 to 1024 [ 725.440026][ T6965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.525505][ T6977] loop8: detected capacity change from 0 to 128 [ 725.533987][ T6979] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.572026][ T6979] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.584648][ T6985] program syz.5.12020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 725.637831][ T6979] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.675989][ T6982] ================================================================== [ 725.684476][ T6982] BUG: KCSAN: data-race in filemap_read / filemap_read [ 725.691535][ T6982] [ 725.693986][ T6982] read to 0xffff8881044b5ca8 of 8 bytes by task 6965 on cpu 0: [ 725.701643][ T6982] filemap_read+0x6f/0xa00 [ 725.706093][ T6982] generic_file_read_iter+0x79/0x330 [ 725.711417][ T6982] ext4_file_read_iter+0x1cc/0x290 [ 725.716659][ T6982] copy_splice_read+0x442/0x660 [ 725.721554][ T6982] splice_direct_to_actor+0x290/0x680 [ 725.726977][ T6982] do_splice_direct+0xda/0x150 [ 725.731779][ T6982] do_sendfile+0x380/0x650 [ 725.736239][ T6982] __x64_sys_sendfile64+0x105/0x150 [ 725.741479][ T6982] x64_sys_call+0x2bb0/0x2ff0 [ 725.746364][ T6982] do_syscall_64+0xd2/0x200 [ 725.750894][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.756805][ T6982] [ 725.759229][ T6982] write to 0xffff8881044b5ca8 of 8 bytes by task 6982 on cpu 1: [ 725.767147][ T6982] filemap_read+0x974/0xa00 [ 725.771754][ T6982] generic_file_read_iter+0x79/0x330 [ 725.777073][ T6982] ext4_file_read_iter+0x1cc/0x290 [ 725.782311][ T6982] copy_splice_read+0x442/0x660 [ 725.787179][ T6982] splice_direct_to_actor+0x290/0x680 [ 725.792572][ T6982] do_splice_direct+0xda/0x150 [ 725.797356][ T6982] do_sendfile+0x380/0x650 [ 725.801803][ T6982] __x64_sys_sendfile64+0x105/0x150 [ 725.807020][ T6982] x64_sys_call+0x2bb0/0x2ff0 [ 725.811825][ T6982] do_syscall_64+0xd2/0x200 [ 725.816356][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.822279][ T6982] [ 725.824612][ T6982] value changed: 0x00000000000001f3 -> 0x00000000000001f4 [ 725.831823][ T6982] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 725.834175][ T6982] Reported by Kernel Concurrency Sanitizer on: [ 725.840334][ T6982] CPU: 1 UID: 0 PID: 6982 Comm: syz.5.12020 Not tainted syzkaller #0 PREEMPT(voluntary) [ 725.850156][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 725.860228][ T6982] ================================================================== [ 725.906258][ T6979] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.093351][ T9032] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.105283][ T9032] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.116655][ T9032] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.127707][ T9059] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.401408][ T9032] bridge_slave_1: left allmulticast mode [ 726.407175][ T9032] bridge_slave_1: left promiscuous mode [ 726.413120][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.421389][ T9032] bridge_slave_0: left allmulticast mode [ 726.427168][ T9032] bridge_slave_0: left promiscuous mode [ 726.433208][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.506201][ T9032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.516481][ T9032] bond0 (unregistering): Released all slaves [ 726.593298][ T9032] hsr_slave_0: left promiscuous mode [ 726.599106][ T9032] hsr_slave_1: left promiscuous mode [ 726.604785][ T9032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.612463][ T9032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.644587][ T9032] team0 (unregistering): Port device team_slave_1 removed [ 726.655004][ T9032] team0 (unregistering): Port device team_slave_0 removed [ 727.058408][ T9032] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.114536][ T9032] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.173100][ T9032] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.228350][ T9032] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.289433][ T9032] bridge_slave_1: left allmulticast mode [ 727.296326][ T9032] bridge_slave_1: left promiscuous mode [ 727.303277][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.312746][ T9032] bridge_slave_0: left allmulticast mode [ 727.318439][ T9032] bridge_slave_0: left promiscuous mode [ 727.324276][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.419469][ T9032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.430132][ T9032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.441264][ T9032] bond0 (unregistering): Released all slaves [ 727.487172][ T9032] hsr_slave_0: left promiscuous mode [ 727.493110][ T9032] hsr_slave_1: left promiscuous mode [ 727.498742][ T9032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.506179][ T9032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.515062][ T9032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.522621][ T9032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.533483][ T9032] veth1_macvtap: left promiscuous mode [ 727.539029][ T9032] veth0_macvtap: left promiscuous mode [ 727.544714][ T9032] veth1_vlan: left promiscuous mode [ 727.551158][ T9032] veth0_vlan: left promiscuous mode [ 727.628340][ T9032] team0 (unregistering): Port device team_slave_1 removed [ 727.638643][ T9032] team0 (unregistering): Port device team_slave_0 removed [ 728.047773][ T6985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.