last executing test programs: 4.041098955s ago: executing program 3 (id=2842): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0x1075}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040}, 0x40004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001980)={'vxcan0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=@newtaction={0x12e4, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x12d0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_police={0x1190, 0x7, 0x0, 0x0, {{0xb}, {0x1104, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x5, 0x10, 0x1000, {0x9, 0x0, 0x7ff, 0x8001, 0x5, 0x2}, {0x5, 0x1, 0x0, 0xff, 0x3}, 0x8, 0x6, 0x485}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8692, 0x2, 0x917, 0xffff2003, 0x80000001, 0xfffffffc, 0x100, 0x2, 0x3ff, 0x6, 0x3ff, 0x0, 0x80, 0xf0, 0xfffffffb, 0x4, 0x7, 0x7fff, 0x101, 0x2, 0x7ff, 0x6349901f, 0x9, 0x2, 0x4, 0x6, 0xfc08, 0x5, 0x2f, 0x6, 0x6, 0x94b, 0xe9bf, 0x2, 0x9, 0x4, 0x73, 0xa, 0xe1, 0x49fc, 0x0, 0x6cf, 0x9, 0x101, 0x9, 0xbce, 0x1, 0x2, 0x8812, 0x6, 0x8f, 0x4, 0x7, 0x1, 0x8, 0x7, 0x8, 0x80, 0x7, 0x1, 0xc908, 0x1, 0x5, 0x0, 0x3569660e, 0x1, 0xfffffeff, 0x6, 0x29e0, 0x688, 0x615, 0x2, 0x1, 0x373, 0x8, 0x0, 0x3fc, 0xfa76, 0x7, 0xc0a, 0xb, 0x10001, 0x3, 0x7fffffff, 0x60, 0x10000000, 0xffffffff, 0x4, 0x8, 0x8000, 0x0, 0x9, 0x81, 0x3, 0x8, 0x8, 0x3, 0x0, 0x7f, 0x7f, 0x8, 0x800, 0xb, 0x1, 0x0, 0x2, 0x2, 0x6e, 0x3, 0x1000, 0xb, 0x13, 0x4, 0x3, 0x0, 0x2, 0x5, 0x400, 0x9, 0x1, 0x4f7, 0xfff, 0x5, 0x3, 0x9, 0x3, 0x5, 0xc, 0x0, 0xa0e, 0x1000, 0x1812, 0x9448, 0x1, 0x8, 0x5, 0xa, 0x9, 0x4, 0x400, 0x2ae7, 0x1, 0x5, 0x98, 0x1, 0x4, 0xfffffff9, 0x3, 0x10, 0x40, 0x1761, 0x1, 0x6, 0xfff, 0xf85, 0x6, 0x5, 0x4, 0x5, 0xa7, 0x2, 0xffffffff, 0x8, 0xfff00000, 0x506, 0xfff, 0x4, 0x2, 0x1, 0x2, 0x6, 0x755, 0x1, 0x5, 0x1ff, 0x2, 0x2, 0x88ac, 0xd, 0x10000000, 0x800, 0x8, 0x3, 0x5, 0x4, 0x0, 0xe, 0x10, 0xfffffffd, 0x6, 0x6, 0x6, 0x2, 0xffffc986, 0x9, 0x6, 0x9, 0x8, 0x3, 0xbf, 0x5, 0x9, 0x7, 0x1ff, 0x6, 0x8, 0x61, 0x503c, 0x101, 0x8000, 0x0, 0x80, 0x0, 0x8, 0x7, 0x9, 0x100, 0xe541, 0x7, 0x9, 0x9, 0x8001, 0x2, 0x8001, 0x8, 0xc, 0x99f8, 0x400, 0x6, 0x1, 0x9, 0x8, 0x5, 0x6, 0x3, 0x3, 0x5, 0x7, 0x37, 0x94, 0xf, 0x8, 0x5, 0x8, 0x33b, 0x4, 0x8, 0x1b, 0x9, 0xffff, 0x4, 0x8, 0x8, 0xc77, 0x9, 0x3ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x100, 0x8001, 0x5, 0x6, 0x39748131, 0x576, 0xfff, 0x3, 0x0, 0x5c0eb5fc, 0x0, 0xff9, 0x9, 0xfffffff2, 0x3, 0x9, 0x3, 0x0, 0x1, 0xfffffffa, 0x2, 0x0, 0x7, 0x5, 0xffffff6e, 0x0, 0x9, 0x6, 0x4, 0x2c00000, 0xd, 0xfffffe00, 0x0, 0x3, 0x8, 0x7, 0xfffff25f, 0x7, 0x3272, 0x8, 0x8, 0xfffffffa, 0x20000, 0x1, 0x24508ed0, 0x7, 0x5, 0x7fffffff, 0x8000, 0x66f, 0x8, 0x3, 0xfffffff7, 0x5, 0x1, 0x20008, 0x9, 0x2589, 0x4, 0x2, 0x58f, 0x3, 0xff, 0x0, 0x9, 0x8, 0x1, 0x5, 0x194, 0x7e7df3d8, 0x8d, 0x1, 0x7, 0xedff, 0x0, 0x2, 0x4, 0x313f1ee9, 0x4, 0x1, 0x10000, 0x1ff, 0x6, 0x7, 0xba, 0xffffffff, 0x7, 0xfffffff8, 0xfffffffd, 0x8, 0x16c, 0xfffff800, 0x7, 0x1, 0x8, 0x7, 0x3, 0x8, 0x63, 0x5, 0x3, 0x3d5d, 0x5, 0x6, 0x9, 0x9, 0x40, 0xfb4, 0xf, 0x4, 0x1c8, 0x60e80fbb, 0x0, 0xbff1, 0x43c6, 0x7, 0x16, 0x7, 0x1b, 0x8000, 0x7fffffff, 0x2, 0xe, 0x7, 0x90000, 0x8, 0xd0dd, 0xff, 0x3, 0x28, 0x9, 0x9, 0x2, 0x3, 0x4, 0x2, 0x0, 0x30000, 0x4e, 0x7f, 0x1000, 0xfffffffe, 0x996, 0x100, 0xf, 0x8, 0x9, 0x1000, 0x2, 0x5, 0x8, 0x7, 0x3, 0x80000001, 0xa, 0x9, 0x2, 0xb938, 0x4f, 0x8, 0xfff, 0x0, 0x8, 0x7, 0x4, 0xfffffffe, 0x2d7, 0x5, 0x7fffffff, 0x9, 0x7fffffff, 0x400, 0x6, 0x4e, 0x0, 0xcd3, 0x4, 0x8, 0x4532, 0x8, 0xc, 0x6, 0x71, 0x6, 0xb04b, 0x9, 0x3, 0x2, 0x10001, 0x401, 0x1, 0x100, 0x3c, 0x2, 0x743a7fb3, 0x7, 0x4, 0x5, 0x7f, 0x9, 0xda, 0x1, 0x8, 0x5, 0x1ff, 0x3, 0x8, 0x5, 0x3, 0x6, 0x7, 0x25b, 0xfffffffb, 0x8000, 0x2, 0x6, 0x10b, 0x3, 0x27a, 0x406, 0x8001, 0xf3, 0x7, 0x7, 0x70988f57, 0xba7b, 0x1, 0x9, 0x1, 0x10000, 0x8, 0x0, 0x2, 0xf, 0x7, 0x6, 0x7, 0x7fffffff, 0x7, 0x1, 0xe, 0x7, 0x6, 0xd, 0xffffffff, 0xfff, 0x1, 0x8, 0x7, 0x4, 0x0, 0x7, 0x5, 0x2, 0xef]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0xedef}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x4, 0x10, 0x7, {0x5, 0x1, 0x2, 0x2, 0x2, 0x8}, {0x4, 0x1, 0x4, 0x9, 0x7f, 0x7}, 0x100, 0x5, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffff81}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x1, 0x7fff, 0x3, {0xff, 0x2, 0x7, 0x6, 0x4, 0x40}, {0x5, 0x3, 0xb038, 0x8, 0x100, 0x2213d980}, 0xfff, 0x2, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x41e}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfff, 0x8, 0xffffffff, 0x6, 0x8, 0x6, 0xf, 0x5, 0x6, 0x2a, 0x5, 0x4, 0x8, 0xffff11f3, 0x2, 0x1, 0x5, 0x0, 0x7e, 0x1, 0x81, 0x2, 0x7fff, 0x81, 0x4, 0x4f01, 0x1, 0x3e7c, 0x1964a100, 0x7, 0x6, 0x7, 0x1003, 0x3ff, 0x4, 0x0, 0x9, 0x9, 0x3, 0x8, 0x1, 0x8, 0x40000, 0x4, 0xb701, 0xffffffff, 0x3, 0xffff0000, 0x5, 0xfff, 0x7ab, 0x1, 0xd3, 0x7, 0x10000, 0x1, 0x6, 0x3, 0x3, 0x7f, 0xb6, 0x3, 0x7, 0x8, 0xfffffffb, 0x2, 0x8001, 0xd10, 0x3, 0x7fffffff, 0x9, 0x8, 0x6, 0x1, 0x4, 0x0, 0x9, 0x40, 0x5, 0x4, 0x7, 0x4, 0x9, 0xc1, 0x6, 0x4, 0xf, 0x101, 0x6, 0x4, 0x1, 0x1, 0xfff, 0x8de6, 0x800, 0x5, 0x80000001, 0x0, 0x4, 0x7, 0x7, 0xadb3, 0x3, 0x5, 0x7, 0x100, 0x5, 0x6, 0x8, 0x2182, 0x3, 0x0, 0xb, 0x4, 0x7, 0xfff, 0x2, 0x2, 0x800, 0x1000007, 0x0, 0x6, 0x6, 0x6, 0x80000000, 0x0, 0xc0000000, 0x4, 0x2, 0x3, 0x5, 0xb, 0x6, 0x100, 0x7, 0x2, 0x1, 0x5, 0x4, 0x0, 0x1000, 0x67, 0x8, 0x18a9, 0x1, 0xa, 0x48, 0x4, 0x81, 0xe0a, 0x1, 0x8, 0x2, 0x5, 0x9, 0x1, 0x8, 0x7d749fbd, 0xcc, 0x1, 0x1, 0xb294, 0xfcd2, 0x3, 0x4, 0x7, 0x6, 0x3, 0x1000, 0x6, 0x4, 0x56, 0x4, 0x80000000, 0x736, 0xffff, 0x1, 0x4, 0x0, 0x5, 0x7, 0x2, 0x10, 0x3, 0x9, 0x9, 0xf2, 0x3, 0x1, 0x10, 0x6d85, 0x9d5b, 0x0, 0x2, 0x2, 0x0, 0xbb2, 0x0, 0x1, 0x2, 0x7, 0xaf2c, 0x0, 0x10000, 0x3000, 0x7, 0x3, 0xfffffff9, 0xff, 0x3, 0x7fff, 0x6, 0x2173b7db, 0x80, 0x8, 0x4, 0x10000, 0x80, 0x8, 0x7, 0xfffffff9, 0x0, 0x400, 0x1000, 0x8, 0x8, 0xffff, 0x9, 0xfffffff8, 0xfffffffe, 0x1000, 0x5, 0x6, 0x99b, 0x5, 0x17, 0x10000, 0xfff, 0x5, 0x400000, 0x80, 0x8, 0x800, 0x8001, 0x1, 0x5, 0x8000, 0x400, 0x4, 0x200, 0x0, 0x8, 0xffffffff, 0xc0, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x7ff, 0x8, 0x2, 0x89, 0xf, 0x6, 0xb964, 0x0, 0xfffffffc, 0x8, 0x9, 0x0, 0x44, 0x2, 0x1000, 0x0, 0x9, 0x23, 0xfffff465, 0x80000001, 0x3, 0x9, 0x5, 0x0, 0x7, 0x5, 0xfffffffa, 0x7, 0x4, 0x40, 0x3, 0x3, 0x9, 0xae, 0x1, 0x76fa, 0x8a28, 0xfffffff7, 0x23ab82a6, 0xe296, 0x4ce475c2, 0x5, 0x7, 0x0, 0x93dd, 0xf66, 0x8, 0x1, 0x2, 0x8, 0x6, 0xfea2, 0x41a, 0x9, 0x7fffffff, 0x7, 0xe6, 0xa, 0x7ff, 0x7, 0x9, 0xf5, 0x1, 0xc3, 0x9, 0x10, 0xd8bf, 0x9b91, 0x4, 0x9, 0x800, 0x8, 0x5, 0x8001, 0x400, 0x6, 0xfffffff8, 0x7f, 0x4, 0x9, 0x4, 0x4, 0x3ff, 0x7, 0x5, 0x6, 0x7fffffff, 0x2, 0x38e5c4, 0x1000, 0xb, 0x8, 0xf8, 0x8, 0x27b3, 0x5, 0x771, 0x9, 0x3ff, 0x2, 0x2, 0xfffffff0, 0x65, 0x6, 0x2, 0xfffffffb, 0x8, 0x9, 0x5, 0x0, 0x9, 0x7ff, 0x3, 0x7f, 0x1, 0x6, 0x8, 0x1, 0xfffffff9, 0x1, 0x368d, 0xfffffff8, 0x9, 0xe0, 0x7ff, 0x9, 0x8, 0x7fff, 0x4, 0x0, 0x80, 0x2, 0x80, 0x200, 0x6, 0xb1, 0x5a6, 0xce7a, 0x7, 0x3579, 0x0, 0x3, 0x7fffffff, 0xdb0, 0x8001, 0xc00, 0x0, 0x7, 0x894, 0x6, 0xffffffff, 0x5, 0x0, 0x5, 0x8, 0x1000, 0x8, 0xe7, 0x9, 0x10, 0x6, 0x1, 0x7, 0x4, 0x7f, 0x5a88, 0xf, 0x8, 0x80, 0x0, 0x81, 0x81, 0xb1, 0xff, 0x8000, 0x8000, 0x3, 0x9, 0x9, 0xe00, 0x4, 0x3, 0x7, 0x2c8, 0x7ff, 0xba9, 0xbafa, 0x80000000, 0x1, 0x2, 0x7ff, 0x8, 0x0, 0x3, 0x4949, 0x9, 0x4, 0x0, 0x4, 0x3, 0x8, 0x80, 0x0, 0x9a, 0x7, 0x7, 0x5, 0x0, 0x9, 0x0, 0x10000, 0x80000001, 0x6, 0xdd9, 0x1, 0x4, 0x6, 0xac50, 0x200, 0x2, 0x3, 0xb7, 0x8, 0x0, 0x9, 0x0, 0x81, 0x7, 0xe3, 0x41, 0x3, 0x4, 0x2, 0x4, 0x4, 0x2, 0x8, 0x0, 0x28, 0xed19, 0x0, 0x100, 0x10001, 0x4, 0x7, 0x9, 0x4, 0x7, 0xa9aa, 0x9, 0x400, 0x7fff, 0x2, 0x596f]}]]}, {0x61, 0x6, "48ef2b2347b3d373e459eab3e0334e12ff6f3e3155d25147ef9e9636a9593352ff7b5d892ab14d19381c9167869c9b9b3eb2e20df329ce50f9669cabf7dad266639e5415919e1f3869ed48e152d487b50effc4cfc667b942eb1f9c1132"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_police={0xec, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0xc0, 0x6, "08e519b88eebb9ac163a80afc426cedf2634254fa37f3a07dab2eda8149d746b2896e4604e63083dee4404a479ca97c3d24d796d5429c1f181bbd758434c7dfaa7e4a98899cddbeff8d164654ff839187bf011dc17e0d39a93b5df13b4336eeac48c0a0d007f510c5f4d3f99f4e9f48e9de9863250bd99cfc2c515cdc8be8f53b14607cffca0103100042cfd233f2736d402e690a39e6f4daa6b9b6ec0705aacdd2bcc948fcd1e76b29a2b24aadaaec1fa88785293673314f982aa79"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x12e4}}, 0x2000a804) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[@ANYBLOB="f0010000160001000000000000000000ffffffff000000000000000000000000ac1e0001000000000000000000000000fffc0000001000040000a0003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ff02000000000000000000000000000100000010000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000e80000000000000000000000000000000000000000000000000000400000000002000000000000000a00000001000000000000000a000000f60000000000000005000000050000000c0015005a073500008000000800"], 0x1f0}}, 0x20004000) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/137, 0x89}, 0x1}], 0x1, 0x22, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) 3.336175615s ago: executing program 1 (id=2849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00'], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@decl_tag={0x27, 0x0, 0x0, 0x11, 0x5, 0x4}, @const={0x4, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) close(0xffffffffffffffff) r7 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r8 = socket(0x80000000000000a, 0x4, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x9, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r9) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r13, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xffffffffffffff7b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 3.177444022s ago: executing program 3 (id=2851): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@block_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x503, &(0x7f0000000800)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000004c0)={0x2, 0xfffffffffffff000, 0x2, 0x5, 0x3, [0x4, 0xcb53, 0x5, 0x5]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x401}]}}}]}, 0x38}}, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r5, r2, 0x7fff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000070000009500000000000000f42603262f564daa872e65493ded09846f21fdbe6de2da265f594d58051000ae3a7b41b6e191d745e23a3e6b7249a2acf0df29814041464469992c23e4402ff91623e0bc25d905a09e6ec92f2f86a3c1792742fc1d78a80ac00bfda44a1baf9c46525af40c7968e31c1a25bf1c"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='mm_page_free\x00', r6, 0x0, 0x2000000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000d40)="62c56cfeef2d5ee336e18a7401733493ad44aedc53270b46e2cf511618453879211511ce0644c34019f179b7baa4ac439e8e03899488448ea9b8604a9898619c2ed153beeb3e6c9a276db865636df5dc6f8022e5bddba507ae33ce3d879752bfaf751487fb3d0c4b90ac103f70d0d9da3ae51c4e82cad839b76c74fbe350bcdf19bcc0bfcb590c9c386b6116d2ca283dfc582e37e707fb5acffb3e4b8d2b6caf1eb9f9f3508e5dbc3760c358c2e839b1ed52661f179b2ab1af2339a055fa59f6b9bb10", 0xc3, 0x1, &(0x7f0000000340)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) sendmsg$inet6(r8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) 2.788193119s ago: executing program 1 (id=2855): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x3ac, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x27c, 0x3, 0x0, 0x1, [{0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x178, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_KEY={0x80, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x57, 0x1, "cb927026782d993e362dfd99fa89c9df7faae5f3b89457357baaac26a979a74bd0900c0d55e3c4522ebdda07faaf5803792bffcd4caee79c15b5ba8834bb4b6030356b64db918e671dde4c2e45e93e4b450e29"}, @NFTA_DATA_VALUE={0x24, 0x1, "0d6989aa35a5f36d1e916a7e882c7802f94fa2632aaf36c463781a88464a86ab"}]}, @NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "46780f1d8246fbf930d3a6ec286dc330109acd5edaabf7b2472378afba443edfef1bd5f36a3c149d19b3f5c76d7e679c0f9fbce1abba1a7c894c83e4f910462221d4ebf7c9abbcc099"}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x110, 0x3, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "6396447a4e90fc99bcc8860f3d1720269e30a676409e1b1e3b0dac928fb1a00850d8105bfd5597"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x55fa1340dd3cd933}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, {0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3d4}, 0x1, 0x0, 0x0, 0x40}, 0x40010) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, r5}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9b, 0x4ef, &(0x7f0000000a40)="$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") timerfd_settime(r6, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000400)) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x8, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) timer_delete(r1) mount$9p_rdma(0x0, &(0x7f0000001540)='.\x00', &(0x7f0000001580), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='trans=r']) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r8, 0xb5, 0x4d}, &(0x7f00000001c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d766d6163363428617263342900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000"], &(0x7f0000000240)="e2070f6ebda166b485c0c634b3b73cd9d965f8e7660ddbd94264aac18758769f8a66a3fe91f4db1370e88b82c3c355a6af6c85307adbb0b2b6588a9f7c5ffb1e1ee96edc77ad755d84805fa686f61015dc779e31c57c84b84cca156a7a2e453befee2e9a3d5f5f2406477359712fa36bdeb39567276e95669232a2d65f5be06331f03653c5001819245c9ed4741ec534bc92649d0a46f4b91e639e3c73535cc136c720fa82778be3867405f71f5770725f25547895", &(0x7f0000000300)=""/77) 2.785647989s ago: executing program 4 (id=2856): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2.212755984s ago: executing program 0 (id=2857): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r2, 0x1}}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x9, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@remote, r7}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 2.197072105s ago: executing program 2 (id=2858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r3, 0x1}}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) timerfd_create(0x9, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x482000, 0x734c6fc4f278d9da, 0x1}, 0x18) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000280)={@remote, r8}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r8, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) dup2(r6, r7) 2.151456376s ago: executing program 0 (id=2859): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x505, &(0x7f0000000f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x28, 0x0, 0x310, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYBLOB="89e6827bebd1ef17ff490177bd5678da6c", @ANYRES64, @ANYBLOB="fca11ce99886377c5c8d5b293ddaa9812918d206d2f6f80312efd9da360a158de63e6b0ea1d1f4766c4088395d12a9875c3cb87559e90502b117b53ef518a5d5cf2923bc5b0628ef71ff45ad40da49f23656c9dc02efa47f3ea0c4b231c1d8e26f", @ANYRES16=r0, @ANYRESDEC=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.150669186s ago: executing program 2 (id=2860): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8d805100, &(0x7f0000000500)="fbf74c63e121834a6a76bb60de0b983345e03626c4d27618eecc3994261922aa1a4890884ab70ee770092db34c6bda25e364e0466ec8928787e5d3cd446a507e626692e896e922b2c5e5c61807e6c6ec5118157ff1c180c0e42511c3aa37e30b74cb47c49797e4fc306bf04c", 0x6c, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000200)="436393eb36010afe0ca18902") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="854b", 0x2}, {&(0x7f0000000a00)="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", 0x1000}], 0x2, 0x14, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x24000840) 2.08015432s ago: executing program 3 (id=2861): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0x1075}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040}, 0x40004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001980)={'vxcan0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=@newtaction={0x12e4, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x12d0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_police={0x1190, 0x7, 0x0, 0x0, {{0xb}, {0x1104, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x5, 0x10, 0x1000, {0x9, 0x0, 0x7ff, 0x8001, 0x5, 0x2}, {0x5, 0x1, 0x0, 0xff, 0x3}, 0x8, 0x6, 0x485}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8692, 0x2, 0x917, 0xffff2003, 0x80000001, 0xfffffffc, 0x100, 0x2, 0x3ff, 0x6, 0x3ff, 0x0, 0x80, 0xf0, 0xfffffffb, 0x4, 0x7, 0x7fff, 0x101, 0x2, 0x7ff, 0x6349901f, 0x9, 0x2, 0x4, 0x6, 0xfc08, 0x5, 0x2f, 0x6, 0x6, 0x94b, 0xe9bf, 0x2, 0x9, 0x4, 0x73, 0xa, 0xe1, 0x49fc, 0x0, 0x6cf, 0x9, 0x101, 0x9, 0xbce, 0x1, 0x2, 0x8812, 0x6, 0x8f, 0x4, 0x7, 0x1, 0x8, 0x7, 0x8, 0x80, 0x7, 0x1, 0xc908, 0x1, 0x5, 0x0, 0x3569660e, 0x1, 0xfffffeff, 0x6, 0x29e0, 0x688, 0x615, 0x2, 0x1, 0x373, 0x8, 0x0, 0x3fc, 0xfa76, 0x7, 0xc0a, 0xb, 0x10001, 0x3, 0x7fffffff, 0x60, 0x10000000, 0xffffffff, 0x4, 0x8, 0x8000, 0x0, 0x9, 0x81, 0x3, 0x8, 0x8, 0x3, 0x0, 0x7f, 0x7f, 0x8, 0x800, 0xb, 0x1, 0x0, 0x2, 0x2, 0x6e, 0x3, 0x1000, 0xb, 0x13, 0x4, 0x3, 0x0, 0x2, 0x5, 0x400, 0x9, 0x1, 0x4f7, 0xfff, 0x5, 0x3, 0x9, 0x3, 0x5, 0xc, 0x0, 0xa0e, 0x1000, 0x1812, 0x9448, 0x1, 0x8, 0x5, 0xa, 0x9, 0x4, 0x400, 0x2ae7, 0x1, 0x5, 0x98, 0x1, 0x4, 0xfffffff9, 0x3, 0x10, 0x40, 0x1761, 0x1, 0x6, 0xfff, 0xf85, 0x6, 0x5, 0x4, 0x5, 0xa7, 0x2, 0xffffffff, 0x8, 0xfff00000, 0x506, 0xfff, 0x4, 0x2, 0x1, 0x2, 0x6, 0x755, 0x1, 0x5, 0x1ff, 0x2, 0x2, 0x88ac, 0xd, 0x10000000, 0x800, 0x8, 0x3, 0x5, 0x4, 0x0, 0xe, 0x10, 0xfffffffd, 0x6, 0x6, 0x6, 0x2, 0xffffc986, 0x9, 0x6, 0x9, 0x8, 0x3, 0xbf, 0x5, 0x9, 0x7, 0x1ff, 0x6, 0x8, 0x61, 0x503c, 0x101, 0x8000, 0x0, 0x80, 0x0, 0x8, 0x7, 0x9, 0x100, 0xe541, 0x7, 0x9, 0x9, 0x8001, 0x2, 0x8001, 0x8, 0xc, 0x99f8, 0x400, 0x6, 0x1, 0x9, 0x8, 0x5, 0x6, 0x3, 0x3, 0x5, 0x7, 0x37, 0x94, 0xf, 0x8, 0x5, 0x8, 0x33b, 0x4, 0x8, 0x1b, 0x9, 0xffff, 0x4, 0x8, 0x8, 0xc77, 0x9, 0x3ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x100, 0x8001, 0x5, 0x6, 0x39748131, 0x576, 0xfff, 0x3, 0x0, 0x5c0eb5fc, 0x0, 0xff9, 0x9, 0xfffffff2, 0x3, 0x9, 0x3, 0x0, 0x1, 0xfffffffa, 0x2, 0x0, 0x7, 0x5, 0xffffff6e, 0x0, 0x9, 0x6, 0x4, 0x2c00000, 0xd, 0xfffffe00, 0x0, 0x3, 0x8, 0x7, 0xfffff25f, 0x7, 0x3272, 0x8, 0x8, 0xfffffffa, 0x20000, 0x1, 0x24508ed0, 0x7, 0x5, 0x7fffffff, 0x8000, 0x66f, 0x8, 0x3, 0xfffffff7, 0x5, 0x1, 0x20008, 0x9, 0x2589, 0x4, 0x2, 0x58f, 0x3, 0xff, 0x0, 0x9, 0x8, 0x1, 0x5, 0x194, 0x7e7df3d8, 0x8d, 0x1, 0x7, 0xedff, 0x0, 0x2, 0x4, 0x313f1ee9, 0x4, 0x1, 0x10000, 0x1ff, 0x6, 0x7, 0xba, 0xffffffff, 0x7, 0xfffffff8, 0xfffffffd, 0x8, 0x16c, 0xfffff800, 0x7, 0x1, 0x8, 0x7, 0x3, 0x8, 0x63, 0x5, 0x3, 0x3d5d, 0x5, 0x6, 0x9, 0x9, 0x40, 0xfb4, 0xf, 0x4, 0x1c8, 0x60e80fbb, 0x0, 0xbff1, 0x43c6, 0x7, 0x16, 0x7, 0x1b, 0x8000, 0x7fffffff, 0x2, 0xe, 0x7, 0x90000, 0x8, 0xd0dd, 0xff, 0x3, 0x28, 0x9, 0x9, 0x2, 0x3, 0x4, 0x2, 0x0, 0x30000, 0x4e, 0x7f, 0x1000, 0xfffffffe, 0x996, 0x100, 0xf, 0x8, 0x9, 0x1000, 0x2, 0x5, 0x8, 0x7, 0x3, 0x80000001, 0xa, 0x9, 0x2, 0xb938, 0x4f, 0x8, 0xfff, 0x0, 0x8, 0x7, 0x4, 0xfffffffe, 0x2d7, 0x5, 0x7fffffff, 0x9, 0x7fffffff, 0x400, 0x6, 0x4e, 0x0, 0xcd3, 0x4, 0x8, 0x4532, 0x8, 0xc, 0x6, 0x71, 0x6, 0xb04b, 0x9, 0x3, 0x2, 0x10001, 0x401, 0x1, 0x100, 0x3c, 0x2, 0x743a7fb3, 0x7, 0x4, 0x5, 0x7f, 0x9, 0xda, 0x1, 0x8, 0x5, 0x1ff, 0x3, 0x8, 0x5, 0x3, 0x6, 0x7, 0x25b, 0xfffffffb, 0x8000, 0x2, 0x6, 0x10b, 0x3, 0x27a, 0x406, 0x8001, 0xf3, 0x7, 0x7, 0x70988f57, 0xba7b, 0x1, 0x9, 0x1, 0x10000, 0x8, 0x0, 0x2, 0xf, 0x7, 0x6, 0x7, 0x7fffffff, 0x7, 0x1, 0xe, 0x7, 0x6, 0xd, 0xffffffff, 0xfff, 0x1, 0x8, 0x7, 0x4, 0x0, 0x7, 0x5, 0x2, 0xef]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0xedef}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x4, 0x10, 0x7, {0x5, 0x1, 0x2, 0x2, 0x2, 0x8}, {0x4, 0x1, 0x4, 0x9, 0x7f, 0x7}, 0x100, 0x5, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffff81}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x1, 0x7fff, 0x3, {0xff, 0x2, 0x7, 0x6, 0x4, 0x40}, {0x5, 0x3, 0xb038, 0x8, 0x100, 0x2213d980}, 0xfff, 0x2, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x41e}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfff, 0x8, 0xffffffff, 0x6, 0x8, 0x6, 0xf, 0x5, 0x6, 0x2a, 0x5, 0x4, 0x8, 0xffff11f3, 0x2, 0x1, 0x5, 0x0, 0x7e, 0x1, 0x81, 0x2, 0x7fff, 0x81, 0x4, 0x4f01, 0x1, 0x3e7c, 0x1964a100, 0x7, 0x6, 0x7, 0x1003, 0x3ff, 0x4, 0x0, 0x9, 0x9, 0x3, 0x8, 0x1, 0x8, 0x40000, 0x4, 0xb701, 0xffffffff, 0x3, 0xffff0000, 0x5, 0xfff, 0x7ab, 0x1, 0xd3, 0x7, 0x10000, 0x1, 0x6, 0x3, 0x3, 0x7f, 0xb6, 0x3, 0x7, 0x8, 0xfffffffb, 0x2, 0x8001, 0xd10, 0x3, 0x7fffffff, 0x9, 0x8, 0x6, 0x1, 0x4, 0x0, 0x9, 0x40, 0x5, 0x4, 0x7, 0x4, 0x9, 0xc1, 0x6, 0x4, 0xf, 0x101, 0x6, 0x4, 0x1, 0x1, 0xfff, 0x8de6, 0x800, 0x5, 0x80000001, 0x0, 0x4, 0x7, 0x7, 0xadb3, 0x3, 0x5, 0x7, 0x100, 0x5, 0x6, 0x8, 0x2182, 0x3, 0x0, 0xb, 0x4, 0x7, 0xfff, 0x2, 0x2, 0x800, 0x1000007, 0x0, 0x6, 0x6, 0x6, 0x80000000, 0x0, 0xc0000000, 0x4, 0x2, 0x3, 0x5, 0xb, 0x6, 0x100, 0x7, 0x2, 0x1, 0x5, 0x4, 0x0, 0x1000, 0x67, 0x8, 0x18a9, 0x1, 0xa, 0x48, 0x4, 0x81, 0xe0a, 0x1, 0x8, 0x2, 0x5, 0x9, 0x1, 0x8, 0x7d749fbd, 0xcc, 0x1, 0x1, 0xb294, 0xfcd2, 0x3, 0x4, 0x7, 0x6, 0x3, 0x1000, 0x6, 0x4, 0x56, 0x4, 0x80000000, 0x736, 0xffff, 0x1, 0x4, 0x0, 0x5, 0x7, 0x2, 0x10, 0x3, 0x9, 0x9, 0xf2, 0x3, 0x1, 0x10, 0x6d85, 0x9d5b, 0x0, 0x2, 0x2, 0x0, 0xbb2, 0x0, 0x1, 0x2, 0x7, 0xaf2c, 0x0, 0x10000, 0x3000, 0x7, 0x3, 0xfffffff9, 0xff, 0x3, 0x7fff, 0x6, 0x2173b7db, 0x80, 0x8, 0x4, 0x10000, 0x80, 0x8, 0x7, 0xfffffff9, 0x0, 0x400, 0x1000, 0x8, 0x8, 0xffff, 0x9, 0xfffffff8, 0xfffffffe, 0x1000, 0x5, 0x6, 0x99b, 0x5, 0x17, 0x10000, 0xfff, 0x5, 0x400000, 0x80, 0x8, 0x800, 0x8001, 0x1, 0x5, 0x8000, 0x400, 0x4, 0x200, 0x0, 0x8, 0xffffffff, 0xc0, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x7ff, 0x8, 0x2, 0x89, 0xf, 0x6, 0xb964, 0x0, 0xfffffffc, 0x8, 0x9, 0x0, 0x44, 0x2, 0x1000, 0x0, 0x9, 0x23, 0xfffff465, 0x80000001, 0x3, 0x9, 0x5, 0x0, 0x7, 0x5, 0xfffffffa, 0x7, 0x4, 0x40, 0x3, 0x3, 0x9, 0xae, 0x1, 0x76fa, 0x8a28, 0xfffffff7, 0x23ab82a6, 0xe296, 0x4ce475c2, 0x5, 0x7, 0x0, 0x93dd, 0xf66, 0x8, 0x1, 0x2, 0x8, 0x6, 0xfea2, 0x41a, 0x9, 0x7fffffff, 0x7, 0xe6, 0xa, 0x7ff, 0x7, 0x9, 0xf5, 0x1, 0xc3, 0x9, 0x10, 0xd8bf, 0x9b91, 0x4, 0x9, 0x800, 0x8, 0x5, 0x8001, 0x400, 0x6, 0xfffffff8, 0x7f, 0x4, 0x9, 0x4, 0x4, 0x3ff, 0x7, 0x5, 0x6, 0x7fffffff, 0x2, 0x38e5c4, 0x1000, 0xb, 0x8, 0xf8, 0x8, 0x27b3, 0x5, 0x771, 0x9, 0x3ff, 0x2, 0x2, 0xfffffff0, 0x65, 0x6, 0x2, 0xfffffffb, 0x8, 0x9, 0x5, 0x0, 0x9, 0x7ff, 0x3, 0x7f, 0x1, 0x6, 0x8, 0x1, 0xfffffff9, 0x1, 0x368d, 0xfffffff8, 0x9, 0xe0, 0x7ff, 0x9, 0x8, 0x7fff, 0x4, 0x0, 0x80, 0x2, 0x80, 0x200, 0x6, 0xb1, 0x5a6, 0xce7a, 0x7, 0x3579, 0x0, 0x3, 0x7fffffff, 0xdb0, 0x8001, 0xc00, 0x0, 0x7, 0x894, 0x6, 0xffffffff, 0x5, 0x0, 0x5, 0x8, 0x1000, 0x8, 0xe7, 0x9, 0x10, 0x6, 0x1, 0x7, 0x4, 0x7f, 0x5a88, 0xf, 0x8, 0x80, 0x0, 0x81, 0x81, 0xb1, 0xff, 0x8000, 0x8000, 0x3, 0x9, 0x9, 0xe00, 0x4, 0x3, 0x7, 0x2c8, 0x7ff, 0xba9, 0xbafa, 0x80000000, 0x1, 0x2, 0x7ff, 0x8, 0x0, 0x3, 0x4949, 0x9, 0x4, 0x0, 0x4, 0x3, 0x8, 0x80, 0x0, 0x9a, 0x7, 0x7, 0x5, 0x0, 0x9, 0x0, 0x10000, 0x80000001, 0x6, 0xdd9, 0x1, 0x4, 0x6, 0xac50, 0x200, 0x2, 0x3, 0xb7, 0x8, 0x0, 0x9, 0x0, 0x81, 0x7, 0xe3, 0x41, 0x3, 0x4, 0x2, 0x4, 0x4, 0x2, 0x8, 0x0, 0x28, 0xed19, 0x0, 0x100, 0x10001, 0x4, 0x7, 0x9, 0x4, 0x7, 0xa9aa, 0x9, 0x400, 0x7fff, 0x2, 0x596f]}]]}, {0x61, 0x6, "48ef2b2347b3d373e459eab3e0334e12ff6f3e3155d25147ef9e9636a9593352ff7b5d892ab14d19381c9167869c9b9b3eb2e20df329ce50f9669cabf7dad266639e5415919e1f3869ed48e152d487b50effc4cfc667b942eb1f9c1132"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_police={0xec, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0xc0, 0x6, "08e519b88eebb9ac163a80afc426cedf2634254fa37f3a07dab2eda8149d746b2896e4604e63083dee4404a479ca97c3d24d796d5429c1f181bbd758434c7dfaa7e4a98899cddbeff8d164654ff839187bf011dc17e0d39a93b5df13b4336eeac48c0a0d007f510c5f4d3f99f4e9f48e9de9863250bd99cfc2c515cdc8be8f53b14607cffca0103100042cfd233f2736d402e690a39e6f4daa6b9b6ec0705aacdd2bcc948fcd1e76b29a2b24aadaaec1fa88785293673314f982aa79"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x12e4}}, 0x2000a804) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[@ANYBLOB="f0010000160001000000000000000000ffffffff000000000000000000000000ac1e0001000000000000000000000000fffc0000001000040000a0003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ff02000000000000000000000000000100000010000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000e80000000000000000000000000000000000000000000000000000400000000002000000000000000a00000001000000000000000a000000f60000000000000005000000050000000c0015005a073500008000000800"], 0x1f0}}, 0x20004000) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/137, 0x89}, 0x1}], 0x1, 0x22, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) 1.976339534s ago: executing program 0 (id=2862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00'], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@decl_tag={0x27, 0x0, 0x0, 0x11, 0x5, 0x4}, @const={0x4, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) close(0xffffffffffffffff) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r7 = socket(0x80000000000000a, 0x4, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x9, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r8) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r12, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xffffffffffffff7b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 1.925330566s ago: executing program 1 (id=2863): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f00000004c0)=[{0x0}], 0x1) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000015c0)={0x0, "b2c2e1004e620f38a2442e9fd768bb13"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000a00)={0x0, "e5e20d6d976a4d2167b330487a9c7ead"}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000025c0)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000640)={0x5, 0x3, {0xbf6f, @struct={0x6, 0x9}, 0x0, 0x0, 0x6, 0x9, 0x2, 0x7, 0x0, @struct={0xc35, 0x2}, 0x7fffffff, 0xd7, [0x2fc, 0x70, 0x0, 0x8000000000000000, 0xd4f, 0x74]}, {0x0, @usage=0xfffffffffffffff4, 0x0, 0x8, 0x401, 0xffffffffffff8001, 0xfffffffffffffffe, 0x0, 0x42a, @struct={0x1, 0x2}, 0xffffffff, 0x7fff, [0x9, 0x1, 0x6, 0x7ff, 0x4, 0xffffffffffffffff]}, {0x1, @usage=0x2, r3, 0x0, 0x5, 0x4, 0x5, 0x4071, 0x450, @usage=0x9, 0x2, 0x0, [0x9, 0x7, 0x8, 0x9, 0x4, 0x8]}, {0x0, 0x7, 0xecc}}) 1.869030499s ago: executing program 4 (id=2864): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x505, &(0x7f0000000f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000002fc815", @ANYRES32=r1, @ANYBLOB="000000000000bddbd0a32b3c190000b702000014000000b7030000000000008500000083000000bf0900000000000097050100000000009500000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xc, 0xe3, &(0x7f0000000280)=""/227, 0x40f00, 0x68, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xe, 0x6, 0x8}, 0x10, 0x0, r1, 0x2, &(0x7f0000000400)=[r1], &(0x7f0000000440)=[{0x0, 0x2, 0x7, 0x7}, {0x5, 0x4, 0xd, 0xb}], 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x30, 0x0, 0x310, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private1}, @GTPA_FAMILY={0x5, 0xd, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES16=r2, @ANYBLOB="89e6827bebd1ef17ff490177bd5678da6c", @ANYRES64, @ANYBLOB="fca11ce99886377c5c8d5b293ddaa9812918d206d2f6f80312efd9da360a158de63e6b0ea1d1f4766c4088395d12a9875c3cb87559e90502b117b53ef518a5d5cf2923bc5b0628ef71ff45ad40da49f23656c9dc02efa47f3ea0c4b231c1d8e26f86cc3add44e1d13f5ee05b4776554fdc4e30b535872f3d8fe378491168273851", @ANYRES16=r0, @ANYRESDEC=r10], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.731265765s ago: executing program 0 (id=2865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/13], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d) r8 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r8, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.543041763s ago: executing program 4 (id=2866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00'], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@decl_tag={0x27, 0x0, 0x0, 0x11, 0x5, 0x4}, @const={0x4, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) close(0xffffffffffffffff) r7 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r8 = socket(0x80000000000000a, 0x4, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x9, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r9) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r13, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xffffffffffffff7b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 1.426231048s ago: executing program 2 (id=2867): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r5, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 1.229960326s ago: executing program 4 (id=2868): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1fff}]}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000440)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000009c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000008c0)="6f9ea08071e2bf1ffa7f4335f72a1ee24d5959b23051fd01fd4b2b1b1128cfebf49a4d6dd8a298fc08a89abf50dbdeca7e09b570751262940126504a7172e93e43d63b125d4fc279ed0938d4ee30a2d49095667b4f71272185b00468ece4cd7c9e48551d24a503d6c0dc0681ebd2ae09be91172926bd5b3141b6aa634ed8618352af26ec3ca826a63f90c5ef55f288cc7c71bb7ef13a6f3351264bc549a3d4da09a1400af77d5004cbcde053a8c2a31605405cdd5f623b661629a982ba3aca11d3465cf6c366201623d323f93b3acb8fa699abb0", 0xd4, r4}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpid}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r10, r0, r0, 0x0) 1.218452327s ago: executing program 0 (id=2869): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1a0}}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='writeback_pages_written\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a000400003e426f6af85ddf0003f7af8b8d733bab5cf9d87e0800ad176dd345aa5153c4654993acc1e668091d5379838e1724ae4b6f0000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x440c5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000000c0)='sched_process_wait\x00', r4, 0x0, 0x39e}, 0x18) r5 = memfd_secret(0x0) close(r5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) write$UHID_CREATE(r5, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) read(r7, &(0x7f00000002c0)=""/157, 0x9d) setpriority(0x2, 0xff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 1.199462228s ago: executing program 3 (id=2870): socket(0x2, 0x80805, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x2) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x1, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x200, 0x0, 0xfffffffd, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x8000000}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0xfffffffd, 0xc3}, {0x2, 0x5}, {0x3}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {0x0, 0x0, 0x10, 0x0, 0xfffffffc}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {0x80}, {0x80, 0x2}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x9}, {0x0, 0xffffffff, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8510, 0x400}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffff9, 0x200}, {0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x800, 0x0, 0x2}, {0xdb3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x56}, {0x0, 0x9797, 0x0, 0xec33, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x10000, 0x0, 0x0, 0xfffffffc}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000, 0x0, 0x0, 0x1000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x80, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x4}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x4}, {}, {}, {}, {}, {}, {0x5}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {0x1}, {}, {0x5}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3c, @broadcast, 0x4e23, 0x3, 'none\x00', 0x9, 0x1ff, 0x3d}, {@local, 0x4e22, 0x2000, 0x8, 0x810, 0x6}}, 0x44) 1.067916944s ago: executing program 2 (id=2871): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r3, 0x1}}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) timerfd_create(0x9, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x482000, 0x734c6fc4f278d9da, 0x1}, 0x18) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000280)={@remote, r8}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r8, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) dup2(r6, r7) 976.684628ms ago: executing program 1 (id=2872): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x505, &(0x7f0000000f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x28, 0x0, 0x310, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYBLOB="89e6827bebd1ef17ff490177bd5678da6c", @ANYRES64, @ANYBLOB="fca11ce99886377c5c8d5b293ddaa9812918d206d2f6f80312efd9da360a158de63e6b0ea1d1f4766c4088395d12a9875c3cb87559e90502b117b53ef518a5d5cf2923bc5b0628ef71ff45ad40da49f23656c9dc02efa47f3ea0c4b231c1d8e26f", @ANYRES16=r0, @ANYRESDEC=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 959.734198ms ago: executing program 2 (id=2873): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r2, 0x1}}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x9, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@remote, r7}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 958.653269ms ago: executing program 3 (id=2874): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x3ac, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x27c, 0x3, 0x0, 0x1, [{0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x178, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_KEY={0x80, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x57, 0x1, "cb927026782d993e362dfd99fa89c9df7faae5f3b89457357baaac26a979a74bd0900c0d55e3c4522ebdda07faaf5803792bffcd4caee79c15b5ba8834bb4b6030356b64db918e671dde4c2e45e93e4b450e29"}, @NFTA_DATA_VALUE={0x24, 0x1, "0d6989aa35a5f36d1e916a7e882c7802f94fa2632aaf36c463781a88464a86ab"}]}, @NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "46780f1d8246fbf930d3a6ec286dc330109acd5edaabf7b2472378afba443edfef1bd5f36a3c149d19b3f5c76d7e679c0f9fbce1abba1a7c894c83e4f910462221d4ebf7c9abbcc099"}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x110, 0x3, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "6396447a4e90fc99bcc8860f3d1720269e30a676409e1b1e3b0dac928fb1a00850d8105bfd5597"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x55fa1340dd3cd933}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, {0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3d4}, 0x1, 0x0, 0x0, 0x40}, 0x40010) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, r5}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9b, 0x4ef, &(0x7f0000000a40)="$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") timerfd_settime(r6, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000400)) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x8, &(0x7f0000003140), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) timer_delete(r1) mount$9p_rdma(0x0, &(0x7f0000001540)='.\x00', &(0x7f0000001580), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='trans=r']) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r8, 0xb5, 0x4d}, &(0x7f00000001c0)=ANY=[@ANYBLOB="656e633d706b63733120686173683d766d6163363428617263342900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000"], &(0x7f0000000240)="e2070f6ebda166b485c0c634b3b73cd9d965f8e7660ddbd94264aac18758769f8a66a3fe91f4db1370e88b82c3c355a6af6c85307adbb0b2b6588a9f7c5ffb1e1ee96edc77ad755d84805fa686f61015dc779e31c57c84b84cca156a7a2e453befee2e9a3d5f5f2406477359712fa36bdeb39567276e95669232a2d65f5be06331f03653c5001819245c9ed4741ec534bc92649d0a46f4b91e639e3c73535cc136c720fa82778be3867405f71f5770725f25547895", &(0x7f0000000300)=""/77) 895.645421ms ago: executing program 4 (id=2875): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 732.954108ms ago: executing program 2 (id=2876): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@block_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x503, &(0x7f0000000800)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000004c0)={0x2, 0xfffffffffffff000, 0x2, 0x5, 0x3, [0x4, 0xcb53, 0x5, 0x5]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000e40)={{r0}, "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"}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x401}]}}}]}, 0x38}}, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r5, r2, 0x7fff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000070000009500000000000000f42603262f564daa872e65493ded09846f21fdbe6de2da265f594d58051000ae3a7b41b6e191d745e23a3e6b7249a2acf0df29814041464469992c23e4402ff91623e0bc25d905a09e6ec92f2f86a3c1792742fc1d78a80ac00bfda44a1baf9c46525af40c7968e31c1a25bf1c"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='mm_page_free\x00', r6, 0x0, 0x2000000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000d40)="62c56cfeef2d5ee336e18a7401733493ad44aedc53270b46e2cf511618453879211511ce0644c34019f179b7baa4ac439e8e03899488448ea9b8604a9898619c2ed153beeb3e6c9a276db865636df5dc6f8022e5bddba507ae33ce3d879752bfaf751487fb3d0c4b90ac103f70d0d9da3ae51c4e82cad839b76c74fbe350bcdf19bcc0bfcb590c9c386b6116d2ca283dfc582e37e707fb5acffb3e4b8d2b6caf1eb9f9f3508e5dbc3760c358c2e839b1ed52661f179b2ab1af2339a055fa59f6b9bb10", 0xc3, 0x1, &(0x7f0000000340)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) sendmsg$inet6(r8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) 547.559766ms ago: executing program 1 (id=2877): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x505, &(0x7f0000000f40)="$eJzs3b9vW1sdAPDvdeIkL8956YM3AAJeeRQKqur8aBtVZaBdQKiqhKiYGNqQuFEUuw5xUprQIR3ZkajEBH8CGwNSJwY2NthYyoBUoAI1SAxG9/o2cZO4SV6TuIk/H+nm3nOO2+85cc85vqe2TwA962xErEfEQETcjYjRPD/Jj7jeOtLHvXzxaGbjxaOZJJrN2/9MsvI0L9r+TOr9/O8ciogffDfix8nOuI3VtYXparWylKfHlmuLY43VtYvzhTxncmpiavzqpSuTB29UM7ct++Pab59/Z/7mD3//uy89+9P6N3+WVqv085GsrL0dh6nV9GKU2vL6I+LmUQTrkv783w8nT9rbPhMRn2T9fzT6smcTADjNms3RaI62pwGA0y69/y9FUijnawGlKBTK5dYa3kcxXKjWG8sXRusr92cjW8M6E8XCvflqZTxfKzwTxSRNT2TXW+nJbelLEfFhRPxi8L0sXZ6pV2e7+cIHAHrY+9vm//8MtuZ/AOCUGzrg471FAABOvoPO/wDAyWf+B4Dec4D539I/AJwS7v8BoPeY/wGg9+w5/z8+nnoAAMfi+7dupUdzI//+69kHqyvfKj24OFtpLJRrKzPlmfrSYnmuXp+rVsozO75Se4dqvb44cXkz2Vhdu1Orr9xfvjNfm56r3KkUR464QQDAnj78+OlfkohYv/ZedkTbXg7FrtYMOGqFblcA6Jq+blcA6Bqf54HetY97fMsAcMrtskXvazq+ReiJzV/hpDr/eev/0Kus/0Pv+nTr/98+9HoAx8/6P/SuZjOx5z8A9Bhr/MBb/f8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9KhSdiSFcrYX+Hr6s1AuR4xExJkoJvfmq5XxiPggIv48WBxM0xPdrjQA8JYKf0/y/b/Oj54rbS8dSP47mJ0j4qe/uv3Lh9PLy0sTaf6/NvOXn+T5kwPdaAAA0O76zqzWPJ2f227kX754NPPqOM4qPr/R2lw0jbuRH62S/ujPzkNRjIjhfyd5uiV9vdJ3CPHXH0fE57ba/7AtQilbA2ntfLo9fhp75Ajib/3+t8cvvBa/kJWl52L2u/jsIdQFes3TG61xMu97aRfL+18hzmbn3fv/UDZCvb1X49/GjvGvsDn+9e2In2R9/uxm+s01eX75D9/bkdkcbZU9jvhC/27xk834SYfx99w+2/jXL375k05lzV9HnI/d47fUsmF2bLm2ONZYXbs4X5ueq8xV7k9OTk1MjV+9dGVyLFujbv38424x/nHtwgev52ztZp22f7hD/KE92v+1fbb/N/+7+6OvdChL43/jq7s//x+9IX46J359n/Gnh6933L47jT/bof17Pf8X9oi78pPW+dnf1mb3WVUA4Bg0VtcWpqvVytIeF+lrzb0e4+JkXsR6xDtQjfxiIN6JavT8RbdHJuCobXX6btcEAAAAAAAAAAAAAADopLG6tjAYR/txom63EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPr/wEAAP//MzfW/Q==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000002fc815", @ANYRES32=r1, @ANYBLOB="000000000000bddbd0a32b3c190000b702000014000000b7030000000000008500000083000000bf0900000000000097050100000000009500000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xc, 0xe3, &(0x7f0000000280)=""/227, 0x40f00, 0x68, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xe, 0x6, 0x8}, 0x10, 0x0, r1, 0x2, &(0x7f0000000400)=[r1], &(0x7f0000000440)=[{0x0, 0x2, 0x7, 0x7}, {0x5, 0x4, 0xd, 0xb}], 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x30, 0x0, 0x310, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private1}, @GTPA_FAMILY={0x5, 0xd, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES16=r2, @ANYBLOB="89e6827bebd1ef17ff490177bd5678da6c", @ANYRES64, @ANYBLOB="fca11ce99886377c5c8d5b293ddaa9812918d206d2f6f80312efd9da360a158de63e6b0ea1d1f4766c4088395d12a9875c3cb87559e90502b117b53ef518a5d5cf2923bc5b0628ef71ff45ad40da49f23656c9dc02efa47f3ea0c4b231c1d8e26f86cc3add44e1d13f5ee05b4776554fdc4e30b535872f3d8fe378491168273851", @ANYRES16=r0, @ANYRESDEC=r10], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 253.205389ms ago: executing program 0 (id=2878): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8d805100, &(0x7f0000000500)="fbf74c63e121834a6a76bb60de0b983345e03626c4d27618eecc3994261922aa1a4890884ab70ee770092db34c6bda25e364e0466ec8928787e5d3cd446a507e626692e896e922b2c5e5c61807e6c6ec5118157ff1c180c0e42511c3aa37e30b74cb47c49797e4fc306bf04c", 0x6c, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000200)="436393eb36010afe0ca18902") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="854b", 0x2}, {&(0x7f0000000a00)="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", 0x1000}], 0x2, 0x14, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x24000840) 98.581805ms ago: executing program 3 (id=2879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00'], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@decl_tag={0x27, 0x0, 0x0, 0x11, 0x5, 0x4}, @const={0x4, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) close(0xffffffffffffffff) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r7 = socket(0x80000000000000a, 0x4, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x9, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r8) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r12, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xffffffffffffff7b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 67.094927ms ago: executing program 1 (id=2880): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="87eb503e303871014b7b9b89f6d8770bf70878c2981d10c976d3fffec180fda539657a1e599627d88bcf518359413e764838ba1f6ad2db65567dbfb7a7f0a4d88e146a2a5597f9774ea3378d0476be28aa8715267ac72f365b6ac54f05865bc2dca5efc7502c602eb17a14d32238c69209000624662cd8e677d4efbaf0c33329c11f535c4165a8e3b679e2a170", 0x8d) r8 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r8, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2881): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0x1075}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040}, 0x40004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001980)={'vxcan0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=@newtaction={0x12e4, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x12d0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_police={0x1190, 0x7, 0x0, 0x0, {{0xb}, {0x1104, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x5, 0x10, 0x1000, {0x9, 0x0, 0x7ff, 0x8001, 0x5, 0x2}, {0x5, 0x1, 0x0, 0xff, 0x3}, 0x8, 0x6, 0x485}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8692, 0x2, 0x917, 0xffff2003, 0x80000001, 0xfffffffc, 0x100, 0x2, 0x3ff, 0x6, 0x3ff, 0x0, 0x80, 0xf0, 0xfffffffb, 0x4, 0x7, 0x7fff, 0x101, 0x2, 0x7ff, 0x6349901f, 0x9, 0x2, 0x4, 0x6, 0xfc08, 0x5, 0x2f, 0x6, 0x6, 0x94b, 0xe9bf, 0x2, 0x9, 0x4, 0x73, 0xa, 0xe1, 0x49fc, 0x0, 0x6cf, 0x9, 0x101, 0x9, 0xbce, 0x1, 0x2, 0x8812, 0x6, 0x8f, 0x4, 0x7, 0x1, 0x8, 0x7, 0x8, 0x80, 0x7, 0x1, 0xc908, 0x1, 0x5, 0x0, 0x3569660e, 0x1, 0xfffffeff, 0x6, 0x29e0, 0x688, 0x615, 0x2, 0x1, 0x373, 0x8, 0x0, 0x3fc, 0xfa76, 0x7, 0xc0a, 0xb, 0x10001, 0x3, 0x7fffffff, 0x60, 0x10000000, 0xffffffff, 0x4, 0x8, 0x8000, 0x0, 0x9, 0x81, 0x3, 0x8, 0x8, 0x3, 0x0, 0x7f, 0x7f, 0x8, 0x800, 0xb, 0x1, 0x0, 0x2, 0x2, 0x6e, 0x3, 0x1000, 0xb, 0x13, 0x4, 0x3, 0x0, 0x2, 0x5, 0x400, 0x9, 0x1, 0x4f7, 0xfff, 0x5, 0x3, 0x9, 0x3, 0x5, 0xc, 0x0, 0xa0e, 0x1000, 0x1812, 0x9448, 0x1, 0x8, 0x5, 0xa, 0x9, 0x4, 0x400, 0x2ae7, 0x1, 0x5, 0x98, 0x1, 0x4, 0xfffffff9, 0x3, 0x10, 0x40, 0x1761, 0x1, 0x6, 0xfff, 0xf85, 0x6, 0x5, 0x4, 0x5, 0xa7, 0x2, 0xffffffff, 0x8, 0xfff00000, 0x506, 0xfff, 0x4, 0x2, 0x1, 0x2, 0x6, 0x755, 0x1, 0x5, 0x1ff, 0x2, 0x2, 0x88ac, 0xd, 0x10000000, 0x800, 0x8, 0x3, 0x5, 0x4, 0x0, 0xe, 0x10, 0xfffffffd, 0x6, 0x6, 0x6, 0x2, 0xffffc986, 0x9, 0x6, 0x9, 0x8, 0x3, 0xbf, 0x5, 0x9, 0x7, 0x1ff, 0x6, 0x8, 0x61, 0x503c, 0x101, 0x8000, 0x0, 0x80, 0x0, 0x8, 0x7, 0x9, 0x100, 0xe541, 0x7, 0x9, 0x9, 0x8001, 0x2, 0x8001, 0x8, 0xc, 0x99f8, 0x400, 0x6, 0x1, 0x9, 0x8, 0x5, 0x6, 0x3, 0x3, 0x5, 0x7, 0x37, 0x94, 0xf, 0x8, 0x5, 0x8, 0x33b, 0x4, 0x8, 0x1b, 0x9, 0xffff, 0x4, 0x8, 0x8, 0xc77, 0x9, 0x3ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x100, 0x8001, 0x5, 0x6, 0x39748131, 0x576, 0xfff, 0x3, 0x0, 0x5c0eb5fc, 0x0, 0xff9, 0x9, 0xfffffff2, 0x3, 0x9, 0x3, 0x0, 0x1, 0xfffffffa, 0x2, 0x0, 0x7, 0x5, 0xffffff6e, 0x0, 0x9, 0x6, 0x4, 0x2c00000, 0xd, 0xfffffe00, 0x0, 0x3, 0x8, 0x7, 0xfffff25f, 0x7, 0x3272, 0x8, 0x8, 0xfffffffa, 0x20000, 0x1, 0x24508ed0, 0x7, 0x5, 0x7fffffff, 0x8000, 0x66f, 0x8, 0x3, 0xfffffff7, 0x5, 0x1, 0x20008, 0x9, 0x2589, 0x4, 0x2, 0x58f, 0x3, 0xff, 0x0, 0x9, 0x8, 0x1, 0x5, 0x194, 0x7e7df3d8, 0x8d, 0x1, 0x7, 0xedff, 0x0, 0x2, 0x4, 0x313f1ee9, 0x4, 0x1, 0x10000, 0x1ff, 0x6, 0x7, 0xba, 0xffffffff, 0x7, 0xfffffff8, 0xfffffffd, 0x8, 0x16c, 0xfffff800, 0x7, 0x1, 0x8, 0x7, 0x3, 0x8, 0x63, 0x5, 0x3, 0x3d5d, 0x5, 0x6, 0x9, 0x9, 0x40, 0xfb4, 0xf, 0x4, 0x1c8, 0x60e80fbb, 0x0, 0xbff1, 0x43c6, 0x7, 0x16, 0x7, 0x1b, 0x8000, 0x7fffffff, 0x2, 0xe, 0x7, 0x90000, 0x8, 0xd0dd, 0xff, 0x3, 0x28, 0x9, 0x9, 0x2, 0x3, 0x4, 0x2, 0x0, 0x30000, 0x4e, 0x7f, 0x1000, 0xfffffffe, 0x996, 0x100, 0xf, 0x8, 0x9, 0x1000, 0x2, 0x5, 0x8, 0x7, 0x3, 0x80000001, 0xa, 0x9, 0x2, 0xb938, 0x4f, 0x8, 0xfff, 0x0, 0x8, 0x7, 0x4, 0xfffffffe, 0x2d7, 0x5, 0x7fffffff, 0x9, 0x7fffffff, 0x400, 0x6, 0x4e, 0x0, 0xcd3, 0x4, 0x8, 0x4532, 0x8, 0xc, 0x6, 0x71, 0x6, 0xb04b, 0x9, 0x3, 0x2, 0x10001, 0x401, 0x1, 0x100, 0x3c, 0x2, 0x743a7fb3, 0x7, 0x4, 0x5, 0x7f, 0x9, 0xda, 0x1, 0x8, 0x5, 0x1ff, 0x3, 0x8, 0x5, 0x3, 0x6, 0x7, 0x25b, 0xfffffffb, 0x8000, 0x2, 0x6, 0x10b, 0x3, 0x27a, 0x406, 0x8001, 0xf3, 0x7, 0x7, 0x70988f57, 0xba7b, 0x1, 0x9, 0x1, 0x10000, 0x8, 0x0, 0x2, 0xf, 0x7, 0x6, 0x7, 0x7fffffff, 0x7, 0x1, 0xe, 0x7, 0x6, 0xd, 0xffffffff, 0xfff, 0x1, 0x8, 0x7, 0x4, 0x0, 0x7, 0x5, 0x2, 0xef]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0xedef}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x4, 0x10, 0x7, {0x5, 0x1, 0x2, 0x2, 0x2, 0x8}, {0x4, 0x1, 0x4, 0x9, 0x7f, 0x7}, 0x100, 0x5, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffff81}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x1, 0x7fff, 0x3, {0xff, 0x2, 0x7, 0x6, 0x4, 0x40}, {0x5, 0x3, 0xb038, 0x8, 0x100, 0x2213d980}, 0xfff, 0x2, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x41e}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfff, 0x8, 0xffffffff, 0x6, 0x8, 0x6, 0xf, 0x5, 0x6, 0x2a, 0x5, 0x4, 0x8, 0xffff11f3, 0x2, 0x1, 0x5, 0x0, 0x7e, 0x1, 0x81, 0x2, 0x7fff, 0x81, 0x4, 0x4f01, 0x1, 0x3e7c, 0x1964a100, 0x7, 0x6, 0x7, 0x1003, 0x3ff, 0x4, 0x0, 0x9, 0x9, 0x3, 0x8, 0x1, 0x8, 0x40000, 0x4, 0xb701, 0xffffffff, 0x3, 0xffff0000, 0x5, 0xfff, 0x7ab, 0x1, 0xd3, 0x7, 0x10000, 0x1, 0x6, 0x3, 0x3, 0x7f, 0xb6, 0x3, 0x7, 0x8, 0xfffffffb, 0x2, 0x8001, 0xd10, 0x3, 0x7fffffff, 0x9, 0x8, 0x6, 0x1, 0x4, 0x0, 0x9, 0x40, 0x5, 0x4, 0x7, 0x4, 0x9, 0xc1, 0x6, 0x4, 0xf, 0x101, 0x6, 0x4, 0x1, 0x1, 0xfff, 0x8de6, 0x800, 0x5, 0x80000001, 0x0, 0x4, 0x7, 0x7, 0xadb3, 0x3, 0x5, 0x7, 0x100, 0x5, 0x6, 0x8, 0x2182, 0x3, 0x0, 0xb, 0x4, 0x7, 0xfff, 0x2, 0x2, 0x800, 0x1000007, 0x0, 0x6, 0x6, 0x6, 0x80000000, 0x0, 0xc0000000, 0x4, 0x2, 0x3, 0x5, 0xb, 0x6, 0x100, 0x7, 0x2, 0x1, 0x5, 0x4, 0x0, 0x1000, 0x67, 0x8, 0x18a9, 0x1, 0xa, 0x48, 0x4, 0x81, 0xe0a, 0x1, 0x8, 0x2, 0x5, 0x9, 0x1, 0x8, 0x7d749fbd, 0xcc, 0x1, 0x1, 0xb294, 0xfcd2, 0x3, 0x4, 0x7, 0x6, 0x3, 0x1000, 0x6, 0x4, 0x56, 0x4, 0x80000000, 0x736, 0xffff, 0x1, 0x4, 0x0, 0x5, 0x7, 0x2, 0x10, 0x3, 0x9, 0x9, 0xf2, 0x3, 0x1, 0x10, 0x6d85, 0x9d5b, 0x0, 0x2, 0x2, 0x0, 0xbb2, 0x0, 0x1, 0x2, 0x7, 0xaf2c, 0x0, 0x10000, 0x3000, 0x7, 0x3, 0xfffffff9, 0xff, 0x3, 0x7fff, 0x6, 0x2173b7db, 0x80, 0x8, 0x4, 0x10000, 0x80, 0x8, 0x7, 0xfffffff9, 0x0, 0x400, 0x1000, 0x8, 0x8, 0xffff, 0x9, 0xfffffff8, 0xfffffffe, 0x1000, 0x5, 0x6, 0x99b, 0x5, 0x17, 0x10000, 0xfff, 0x5, 0x400000, 0x80, 0x8, 0x800, 0x8001, 0x1, 0x5, 0x8000, 0x400, 0x4, 0x200, 0x0, 0x8, 0xffffffff, 0xc0, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x7ff, 0x8, 0x2, 0x89, 0xf, 0x6, 0xb964, 0x0, 0xfffffffc, 0x8, 0x9, 0x0, 0x44, 0x2, 0x1000, 0x0, 0x9, 0x23, 0xfffff465, 0x80000001, 0x3, 0x9, 0x5, 0x0, 0x7, 0x5, 0xfffffffa, 0x7, 0x4, 0x40, 0x3, 0x3, 0x9, 0xae, 0x1, 0x76fa, 0x8a28, 0xfffffff7, 0x23ab82a6, 0xe296, 0x4ce475c2, 0x5, 0x7, 0x0, 0x93dd, 0xf66, 0x8, 0x1, 0x2, 0x8, 0x6, 0xfea2, 0x41a, 0x9, 0x7fffffff, 0x7, 0xe6, 0xa, 0x7ff, 0x7, 0x9, 0xf5, 0x1, 0xc3, 0x9, 0x10, 0xd8bf, 0x9b91, 0x4, 0x9, 0x800, 0x8, 0x5, 0x8001, 0x400, 0x6, 0xfffffff8, 0x7f, 0x4, 0x9, 0x4, 0x4, 0x3ff, 0x7, 0x5, 0x6, 0x7fffffff, 0x2, 0x38e5c4, 0x1000, 0xb, 0x8, 0xf8, 0x8, 0x27b3, 0x5, 0x771, 0x9, 0x3ff, 0x2, 0x2, 0xfffffff0, 0x65, 0x6, 0x2, 0xfffffffb, 0x8, 0x9, 0x5, 0x0, 0x9, 0x7ff, 0x3, 0x7f, 0x1, 0x6, 0x8, 0x1, 0xfffffff9, 0x1, 0x368d, 0xfffffff8, 0x9, 0xe0, 0x7ff, 0x9, 0x8, 0x7fff, 0x4, 0x0, 0x80, 0x2, 0x80, 0x200, 0x6, 0xb1, 0x5a6, 0xce7a, 0x7, 0x3579, 0x0, 0x3, 0x7fffffff, 0xdb0, 0x8001, 0xc00, 0x0, 0x7, 0x894, 0x6, 0xffffffff, 0x5, 0x0, 0x5, 0x8, 0x1000, 0x8, 0xe7, 0x9, 0x10, 0x6, 0x1, 0x7, 0x4, 0x7f, 0x5a88, 0xf, 0x8, 0x80, 0x0, 0x81, 0x81, 0xb1, 0xff, 0x8000, 0x8000, 0x3, 0x9, 0x9, 0xe00, 0x4, 0x3, 0x7, 0x2c8, 0x7ff, 0xba9, 0xbafa, 0x80000000, 0x1, 0x2, 0x7ff, 0x8, 0x0, 0x3, 0x4949, 0x9, 0x4, 0x0, 0x4, 0x3, 0x8, 0x80, 0x0, 0x9a, 0x7, 0x7, 0x5, 0x0, 0x9, 0x0, 0x10000, 0x80000001, 0x6, 0xdd9, 0x1, 0x4, 0x6, 0xac50, 0x200, 0x2, 0x3, 0xb7, 0x8, 0x0, 0x9, 0x0, 0x81, 0x7, 0xe3, 0x41, 0x3, 0x4, 0x2, 0x4, 0x4, 0x2, 0x8, 0x0, 0x28, 0xed19, 0x0, 0x100, 0x10001, 0x4, 0x7, 0x9, 0x4, 0x7, 0xa9aa, 0x9, 0x400, 0x7fff, 0x2, 0x596f]}]]}, {0x61, 0x6, "48ef2b2347b3d373e459eab3e0334e12ff6f3e3155d25147ef9e9636a9593352ff7b5d892ab14d19381c9167869c9b9b3eb2e20df329ce50f9669cabf7dad266639e5415919e1f3869ed48e152d487b50effc4cfc667b942eb1f9c1132"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_police={0xec, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0xc0, 0x6, "08e519b88eebb9ac163a80afc426cedf2634254fa37f3a07dab2eda8149d746b2896e4604e63083dee4404a479ca97c3d24d796d5429c1f181bbd758434c7dfaa7e4a98899cddbeff8d164654ff839187bf011dc17e0d39a93b5df13b4336eeac48c0a0d007f510c5f4d3f99f4e9f48e9de9863250bd99cfc2c515cdc8be8f53b14607cffca0103100042cfd233f2736d402e690a39e6f4daa6b9b6ec0705aacdd2bcc948fcd1e76b29a2b24aadaaec1fa88785293673314f982aa79"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x12e4}}, 0x2000a804) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fec"], 0x0}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_xfrm(r7, 0x0, 0x20004000) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/137, 0x89}, 0x1}], 0x1, 0x22, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) kernel console output (not intermixed with test programs): uota mode: writeback. [ 186.768818][T12398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.914886][T12416] loop7: unable to read partition table [ 186.943428][T12416] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 187.028622][T12416] loop7: unable to read partition table [ 187.035005][T12416] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 187.080982][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.115710][T12430] netlink: 'syz.4.2529': attribute type 21 has an invalid length. [ 187.123929][T12430] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 187.199941][T12434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.221142][T12437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=12437 comm=syz.4.2531 [ 187.249513][T12434] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.284416][T12437] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.330106][T12437] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 187.361178][T12437] EXT4-fs (loop4): orphan cleanup on readonly fs [ 187.368151][T12437] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2531: Allocating blocks 41-42 which overlap fs metadata [ 187.382061][T12437] EXT4-fs (loop4): Remounting filesystem read-only [ 187.388758][T12437] __quota_error: 709 callbacks suppressed [ 187.388771][T12437] Quota error (device loop4): write_blk: dquota write failed [ 187.401977][T12437] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 187.412175][T12437] EXT4-fs (loop4): 1 truncate cleaned up [ 187.417971][T12437] EXT4-fs (loop4): pa ffff888107a73a10: logic 1, phys. 41, len 23 [ 187.426416][ T29] audit: type=1326 audit(1765459680.287:24512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9be82f749 code=0x7ffc0000 [ 187.433671][T12437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.518936][ T29] audit: type=1400 audit(1765459680.337:24513): avc: denied { allowed } for pid=12433 comm="syz.3.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 187.538497][ T29] audit: type=1400 audit(1765459680.337:24514): avc: denied { sqpoll } for pid=12433 comm="syz.3.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 187.576702][T12449] __nla_validate_parse: 8 callbacks suppressed [ 187.576717][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2533'. [ 187.579489][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.603946][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.613006][ T29] audit: type=1326 audit(1765459680.417:24515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12433 comm="syz.3.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f7f9f65e7 code=0x7ffc0000 [ 187.636635][ T29] audit: type=1326 audit(1765459680.417:24516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12433 comm="syz.3.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f7f99b829 code=0x7ffc0000 [ 187.660171][ T29] audit: type=1326 audit(1765459680.417:24517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12433 comm="syz.3.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f7f9f65e7 code=0x7ffc0000 [ 187.683785][ T29] audit: type=1326 audit(1765459680.417:24518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12433 comm="syz.3.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f7f99b829 code=0x7ffc0000 [ 187.707842][ T29] audit: type=1326 audit(1765459680.417:24519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12433 comm="syz.3.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7f9ff749 code=0x7ffc0000 [ 187.728358][T12439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.744053][T12439] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.775920][T12453] EXT4-fs: Ignoring removed orlov option [ 187.888136][T12453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.903772][T12455] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2535'. [ 188.043916][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2534'. [ 188.183005][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.372372][T12437] 9p: Could not find request transport: r [ 188.402650][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2537'. [ 188.481790][T12477] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 188.497905][T12477] vhci_hcd vhci_hcd.2: invalid port number 96 [ 188.504045][T12477] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 188.512677][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.555046][T12480] set_capacity_and_notify: 12 callbacks suppressed [ 188.555062][T12480] loop4: detected capacity change from 0 to 1024 [ 188.570842][T12480] EXT4-fs: Ignoring removed orlov option [ 188.584131][T12480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.700752][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.713225][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2540'. [ 188.758503][T12488] netlink: 'syz.2.2542': attribute type 21 has an invalid length. [ 188.758523][T12488] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2542'. [ 188.758793][T12488] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 188.867770][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.879143][T12494] netlink: 'syz.1.2543': attribute type 4 has an invalid length. [ 188.905535][T12499] loop4: detected capacity change from 0 to 512 [ 188.910626][T12496] loop3: detected capacity change from 0 to 512 [ 188.929816][T12493] loop7: detected capacity change from 0 to 7 [ 188.936062][ C0] blk_print_req_error: 24 callbacks suppressed [ 188.936075][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.951829][ C0] buffer_io_error: 24 callbacks suppressed [ 188.951856][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 188.965715][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.975305][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 188.983160][T12493] loop7: unable to read partition table [ 188.989342][T12493] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 189.009737][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.019346][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.027455][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.037038][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.048123][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.057750][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.065835][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.075388][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.084624][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.094233][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.111321][T12499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.121612][T12496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.143369][T12496] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.157311][T12499] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.2545: Bad quota inum: 4, type: 2 [ 189.168366][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.177948][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.185984][T12499] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 189.185984][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.186020][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.217979][T12501] loop7: unable to read partition table [ 189.218263][T12499] EXT4-fs (loop4): mount failed [ 189.223684][T12501] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 189.247865][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.257471][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.278793][T12499] loop4: detected capacity change from 0 to 512 [ 189.321576][T12499] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.342895][T12512] loop2: detected capacity change from 0 to 512 [ 189.365439][T12499] EXT4-fs (loop4): 1 truncate cleaned up [ 189.384602][T12512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.386797][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2547'. [ 189.398285][T12499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.421566][T12512] ext4 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.449120][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.549703][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2549'. [ 189.649895][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.669536][T12532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=12532 comm=syz.0.2550 [ 189.709231][T12534] netlink: 'syz.1.2554': attribute type 21 has an invalid length. [ 189.717085][T12534] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2554'. [ 189.753746][T12532] loop0: detected capacity change from 0 to 512 [ 189.758773][T12534] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 189.768957][T12532] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.863785][T12540] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2552'. [ 189.869648][T12532] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 189.881116][T12532] EXT4-fs (loop0): orphan cleanup on readonly fs [ 189.894566][T12532] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2550: Allocating blocks 41-42 which overlap fs metadata [ 189.908835][T12532] EXT4-fs (loop0): Remounting filesystem read-only [ 189.915450][T12532] EXT4-fs (loop0): 1 truncate cleaned up [ 189.921378][T12532] EXT4-fs (loop0): pa ffff888107a2d1c0: logic 1, phys. 41, len 23 [ 189.929859][T12532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.972574][T12544] loop7: detected capacity change from 0 to 7 [ 189.980607][T12544] loop7: unable to read partition table [ 189.987845][T12544] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 190.266862][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.376340][T12532] 9p: Could not find request transport: r [ 190.394360][T12552] loop4: detected capacity change from 0 to 1024 [ 190.401117][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.410722][T12549] loop7: unable to read partition table [ 190.411039][T12552] EXT4-fs: Ignoring removed orlov option [ 190.416412][T12549] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 190.438624][T12552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.502981][T12555] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 190.510671][T12555] vhci_hcd vhci_hcd.2: invalid port number 96 [ 190.516785][T12555] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 190.647471][T12564] loop2: detected capacity change from 0 to 512 [ 190.684290][T12562] loop7: unable to read partition table [ 190.690203][T12562] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 190.755571][T12564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.768744][T12564] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.796650][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.849229][T12575] loop7: unable to read partition table [ 190.854925][T12575] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 190.909349][T12578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.958370][T12578] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.045423][T12592] netlink: 'syz.4.2565': attribute type 4 has an invalid length. [ 191.065080][T12595] netlink: 'syz.1.2566': attribute type 21 has an invalid length. [ 191.101504][T12595] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 191.283831][T12598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=12598 comm=syz.1.2567 [ 191.297983][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.365811][T12601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.410550][T12601] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.2568: Bad quota inum: 4, type: 2 [ 191.428891][T12601] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 191.443919][T12601] EXT4-fs (loop2): mount failed [ 191.506107][T12601] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.526149][T12607] loop7: unable to read partition table [ 191.542835][T12601] EXT4-fs (loop2): 1 truncate cleaned up [ 191.563163][T12607] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 191.564641][T12601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.598838][T12598] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.629755][T12598] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 191.637677][T12598] EXT4-fs (loop1): orphan cleanup on readonly fs [ 191.694744][T12598] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2567: Allocating blocks 41-42 which overlap fs metadata [ 191.711993][T12598] EXT4-fs (loop1): Remounting filesystem read-only [ 191.720866][T12598] EXT4-fs (loop1): 1 truncate cleaned up [ 191.735473][T12598] EXT4-fs (loop1): pa ffff888107a73a10: logic 1, phys. 41, len 23 [ 191.753191][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.762523][T12609] loop7: unable to read partition table [ 191.770763][T12598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.792423][T12609] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 192.010227][T12624] EXT4-fs: Ignoring removed orlov option [ 192.047242][T12624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.071138][T12598] 9p: Could not find request transport: r [ 192.262965][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.413329][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.566415][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 192.566428][ T29] audit: type=1400 audit(1765459685.417:25018): avc: denied { read write } for pid=12632 comm="syz.1.2574" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 192.596983][ T29] audit: type=1400 audit(1765459685.417:25019): avc: denied { open } for pid=12632 comm="syz.1.2574" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 192.631060][ T29] audit: type=1326 audit(1765459685.437:25020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12622 comm="syz.0.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415df8f749 code=0x7ffc0000 [ 192.647240][T12633] loop7: unable to read partition table [ 192.654686][ T29] audit: type=1326 audit(1765459685.437:25021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12622 comm="syz.0.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415df8f749 code=0x7ffc0000 [ 192.660519][T12633] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 192.707353][ T29] audit: type=1400 audit(1765459685.557:25022): avc: denied { wake_alarm } for pid=12632 comm="syz.1.2574" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.730606][T12634] __nla_validate_parse: 6 callbacks suppressed [ 192.730621][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2574'. [ 192.746588][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.769683][T12640] loop7: unable to read partition table [ 192.802040][T12640] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 192.834726][T12647] netlink: 'syz.4.2578': attribute type 21 has an invalid length. [ 192.842591][T12647] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2578'. [ 192.852628][ T29] audit: type=1400 audit(1765459685.707:25023): avc: denied { write } for pid=12649 comm="syz.3.2580" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 192.856644][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'. [ 192.887056][T12650] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.894818][T12650] vhci_hcd vhci_hcd.2: invalid port number 96 [ 192.900928][T12650] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 192.901404][T12654] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 192.929081][T12648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.952054][T12648] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.953179][ T29] audit: type=1400 audit(1765459685.737:25024): avc: denied { map } for pid=12649 comm="syz.3.2580" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 192.998547][ T29] audit: type=1400 audit(1765459685.857:25025): avc: denied { append } for pid=12646 comm="syz.1.2579" path="/514/file0/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 193.084099][ T29] audit: type=1400 audit(1765459685.937:25026): avc: denied { create } for pid=12664 comm="syz.2.2582" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 193.107086][ T29] audit: type=1404 audit(1765459685.957:25027): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 193.186412][T12668] netlink: 'syz.2.2582': attribute type 4 has an invalid length. [ 193.290070][T12660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.309607][ T3530] loop7: unable to read partition table [ 193.326439][T12671] loop7: unable to read partition table [ 193.328287][T12660] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.338257][T12671] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 193.362906][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.398512][T12671] loop7: unable to read partition table [ 193.404321][T12671] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 193.455781][T12680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=12680 comm=syz.1.2585 [ 193.513842][T12682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.523548][T12682] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.2586: Bad quota inum: 4, type: 2 [ 193.559849][T12682] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 193.560240][T12680] set_capacity_and_notify: 12 callbacks suppressed [ 193.560252][T12680] loop1: detected capacity change from 0 to 512 [ 193.607389][T12682] EXT4-fs (loop4): mount failed [ 193.614388][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.640808][T12680] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.649563][T12682] loop4: detected capacity change from 0 to 512 [ 193.657227][T12680] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 193.667910][T12682] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 193.685987][T12682] EXT4-fs (loop4): 1 truncate cleaned up [ 193.693951][T12680] EXT4-fs (loop1): orphan cleanup on readonly fs [ 193.727285][T12682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.746603][T12680] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2585: Allocating blocks 41-42 which overlap fs metadata [ 193.767862][T12687] loop0: detected capacity change from 0 to 1024 [ 193.805996][T12680] EXT4-fs (loop1): Remounting filesystem read-only [ 193.812992][T12687] EXT4-fs: Ignoring removed orlov option [ 193.819037][T12680] EXT4-fs (loop1): 1 truncate cleaned up [ 193.825771][T12680] EXT4-fs (loop1): pa ffff888107a73700: logic 1, phys. 41, len 23 [ 193.835910][T12687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.842609][T12689] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2588'. [ 193.848802][T12680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.019588][T12680] 9p: Could not find request transport: r [ 194.054246][T12696] loop2: detected capacity change from 0 to 1024 [ 194.074222][T12696] EXT4-fs: Ignoring removed orlov option [ 194.096341][T12696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.234687][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2589'. [ 194.244483][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.277264][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.395968][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.416114][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.436239][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2591'. [ 194.493942][T12715] netlink: 'syz.4.2594': attribute type 21 has an invalid length. [ 194.501879][T12715] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2594'. [ 194.534247][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'. [ 194.571317][T12720] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 194.590217][T12721] loop1: detected capacity change from 0 to 512 [ 194.760968][T12721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.761141][T12721] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.829840][T12732] loop4: detected capacity change from 0 to 512 [ 194.842640][T12732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.842762][T12732] ext4 filesystem being mounted at /567/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.003792][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.061698][T12745] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 195.070390][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.080281][T12746] netlink: 'syz.2.2599': attribute type 4 has an invalid length. [ 195.088582][T12745] vhci_hcd vhci_hcd.2: invalid port number 96 [ 195.094713][T12745] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 195.180797][T12749] loop7: detected capacity change from 0 to 7 [ 195.187152][ C1] blk_print_req_error: 61 callbacks suppressed [ 195.187165][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.202904][ C1] buffer_io_error: 61 callbacks suppressed [ 195.202920][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.216845][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.226429][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.234640][T12749] loop7: unable to read partition table [ 195.244949][T12749] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 195.246161][T12754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=12754 comm=syz.0.2602 [ 195.358365][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.367946][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.376986][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.386603][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.395705][ T3529] loop7: unable to read partition table [ 195.401670][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.411257][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.419399][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.428974][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.436883][T12755] loop7: unable to read partition table [ 195.442589][T12755] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 195.456508][T12757] loop0: detected capacity change from 0 to 512 [ 195.463892][T12757] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.473516][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.483127][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.492098][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.501684][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.510291][T12757] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 195.518894][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.528487][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.537598][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.547176][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.573144][T12760] loop1: detected capacity change from 0 to 512 [ 195.579951][T12760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.589801][T12757] EXT4-fs (loop0): orphan cleanup on readonly fs [ 195.596891][T12757] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2602: Allocating blocks 41-42 which overlap fs metadata [ 195.611515][T12760] EXT4-fs error (device loop1): ext4_quota_enable:7173: comm syz.1.2603: Bad quota inum: 4, type: 2 [ 195.651534][T12757] EXT4-fs (loop0): Remounting filesystem read-only [ 195.667311][T12757] EXT4-fs (loop0): 1 truncate cleaned up [ 195.688341][T12757] EXT4-fs (loop0): pa ffff888107a73af0: logic 1, phys. 41, len 23 [ 195.688542][T12760] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 195.697615][T12757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.732528][T12760] EXT4-fs (loop1): mount failed [ 195.802460][T12760] loop1: detected capacity change from 0 to 512 [ 195.822410][T12760] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 195.854928][T12760] EXT4-fs (loop1): 1 truncate cleaned up [ 195.863822][T12760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.034829][T12754] 9p: Could not find request transport: r [ 196.088564][T12764] EXT4-fs: Ignoring removed orlov option [ 196.120181][T12764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.170938][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.261779][T12773] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2608'. [ 196.287876][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'. [ 196.360616][T12784] netlink: 'syz.4.2609': attribute type 21 has an invalid length. [ 196.412254][T12784] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 196.422522][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.493702][T12789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.511959][T12789] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.542764][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.705049][T12801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.720247][ T3530] loop7: unable to read partition table [ 196.724644][T12801] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.726803][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.218810][T12809] loop7: unable to read partition table [ 197.224630][T12809] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 197.260260][T12803] loop7: unable to read partition table [ 197.265944][T12803] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 197.281853][T12822] netlink: 'syz.2.2615': attribute type 4 has an invalid length. [ 197.291430][T12821] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 197.306565][T12821] vhci_hcd vhci_hcd.2: invalid port number 96 [ 197.312837][T12821] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 197.557996][T12833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=12833 comm=syz.3.2619 [ 197.578311][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 197.578324][ T29] audit: type=1326 audit(1765459690.437:25470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12834 comm="syz.1.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9be82df90 code=0x7ffc0000 [ 197.609557][T12835] EXT4-fs: Ignoring removed orlov option [ 197.686860][ T29] audit: type=1326 audit(1765459690.467:25471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12834 comm="syz.1.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff9be82f34b code=0x7ffc0000 [ 197.710487][ T29] audit: type=1326 audit(1765459690.467:25472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12834 comm="syz.1.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff9be82e3aa code=0x7ffc0000 [ 197.733965][ T29] audit: type=1326 audit(1765459690.467:25473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12834 comm="syz.1.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff9be82e3aa code=0x7ffc0000 [ 197.757424][ T29] audit: type=1326 audit(1765459690.467:25474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12834 comm="syz.1.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff9be82de97 code=0x7ffc0000 [ 197.780996][ T29] audit: type=1326 audit(1765459690.467:25475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12834 comm="syz.1.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff9be830eea code=0x7ffc0000 [ 197.804698][ T29] audit: type=1400 audit(1765459690.467:25476): avc: denied { mounton } for pid=12834 comm="syz.1.2621" path="/522/bus" dev="tmpfs" ino=2823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 198.011965][T12837] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 198.022684][T12837] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 198.040127][T12837] EXT4-fs (loop3): orphan cleanup on readonly fs [ 198.046503][ T29] audit: type=1400 audit(1765459690.887:25477): avc: denied { mount } for pid=12834 comm="syz.1.2621" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 198.068415][ T29] audit: type=1326 audit(1765459690.887:25478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12834 comm="syz.1.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9be82df90 code=0x7ffc0000 [ 198.092096][ T29] audit: type=1326 audit(1765459690.887:25479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12834 comm="syz.1.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff9be82e497 code=0x7ffc0000 [ 198.124742][T12837] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2619: Allocating blocks 41-42 which overlap fs metadata [ 198.149167][T12841] __nla_validate_parse: 4 callbacks suppressed [ 198.149181][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'. [ 198.164665][T12837] EXT4-fs (loop3): Remounting filesystem read-only [ 198.216973][T12837] EXT4-fs (loop3): 1 truncate cleaned up [ 198.233193][T12837] EXT4-fs (loop3): pa ffff888107a73070: logic 1, phys. 41, len 23 [ 198.267758][T12847] EXT4-fs: Ignoring removed orlov option [ 198.328986][T12848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.415537][T12833] 9p: Could not find request transport: r [ 198.448439][T12848] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.2623: Bad quota inum: 4, type: 2 [ 198.558974][T12848] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 198.591116][T12854] set_capacity_and_notify: 8 callbacks suppressed [ 198.591129][T12854] loop1: detected capacity change from 0 to 512 [ 198.616132][T12856] loop3: detected capacity change from 0 to 512 [ 198.645454][T12848] EXT4-fs (loop4): mount failed [ 198.662875][T12856] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.689318][T12854] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.709278][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'. [ 198.782974][T12848] loop4: detected capacity change from 0 to 512 [ 198.823652][T12848] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 198.857902][T12869] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2628'. [ 198.897799][T12848] EXT4-fs (loop4): 1 truncate cleaned up [ 199.038463][T12879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2632'. [ 199.149101][T12883] loop0: detected capacity change from 0 to 512 [ 199.191390][T12887] netlink: 'syz.1.2633': attribute type 4 has an invalid length. [ 199.213460][T12883] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.560127][T12894] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.567587][T12894] vhci_hcd vhci_hcd.2: invalid port number 96 [ 199.573767][T12894] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 199.665437][T12898] loop2: detected capacity change from 0 to 1024 [ 199.673689][T12898] EXT4-fs: Ignoring removed orlov option [ 199.762879][T12902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=12902 comm=syz.4.2636 [ 199.820485][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2635'. [ 199.865507][T12902] loop4: detected capacity change from 0 to 512 [ 199.887076][T12902] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.897046][T12902] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 199.926966][T12902] EXT4-fs (loop4): orphan cleanup on readonly fs [ 199.956147][T12902] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2636: Allocating blocks 41-42 which overlap fs metadata [ 200.053470][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2639'. [ 200.079860][T12902] EXT4-fs (loop4): Remounting filesystem read-only [ 200.099379][T12917] loop7: detected capacity change from 0 to 7 [ 200.112081][T12902] EXT4-fs (loop4): 1 truncate cleaned up [ 200.139137][T12902] EXT4-fs (loop4): pa ffff888107a734d0: logic 1, phys. 41, len 23 [ 200.148482][T12917] loop7: unable to read partition table [ 200.157535][T12917] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 200.248089][T12902] 9p: Could not find request transport: r [ 200.278483][ C1] blk_print_req_error: 19 callbacks suppressed [ 200.278501][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.294319][ C1] buffer_io_error: 19 callbacks suppressed [ 200.294335][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.308065][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.317660][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.325499][ T3530] loop7: unable to read partition table [ 200.331443][T12920] loop0: detected capacity change from 0 to 1024 [ 200.337890][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.347477][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.347781][T12920] EXT4-fs: Ignoring removed orlov option [ 200.356451][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.367942][T12922] loop2: detected capacity change from 0 to 512 [ 200.370479][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.370827][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.394040][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.401927][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.411526][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.419509][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.429123][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.437305][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.446868][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.454714][T12910] loop7: unable to read partition table [ 200.454764][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.462243][T12910] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 200.469887][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.511491][T12922] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.602530][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.612129][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 200.692284][T12935] loop3: detected capacity change from 0 to 512 [ 200.709952][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2644'. [ 200.754507][T12935] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.877891][T12945] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2646'. [ 201.381859][T12952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.420330][T12952] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.2648: Bad quota inum: 4, type: 2 [ 201.452249][T12952] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 201.452497][T12952] EXT4-fs (loop3): mount failed [ 201.477961][T12952] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 201.483883][T12952] EXT4-fs (loop3): 1 truncate cleaned up [ 201.537462][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2651'. [ 201.567502][T12960] EXT4-fs: Ignoring removed orlov option [ 201.700358][T12966] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 201.707670][T12966] vhci_hcd vhci_hcd.2: invalid port number 96 [ 201.713855][T12966] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 201.730778][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2652'. [ 201.747686][T12970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=12970 comm=syz.4.2653 [ 201.866380][T12978] netlink: 'syz.1.2650': attribute type 4 has an invalid length. [ 201.882000][T12970] 9p: Could not find request transport: r [ 202.132031][T12983] ext4 filesystem being mounted at /522/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.369601][T12994] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.543492][T13001] loop7: unable to read partition table [ 202.566370][T13006] EXT4-fs: Ignoring removed orlov option [ 202.590042][T13001] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 202.650563][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 202.650576][ T29] audit: type=1400 audit(1765459695.507:25901): avc: denied { setopt } for pid=13005 comm="syz.4.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.690523][T13014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.710429][T13008] loop7: unable to read partition table [ 202.744279][T13008] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 202.781137][ T29] audit: type=1400 audit(1765459695.537:25902): avc: denied { read } for pid=13009 comm="syz.1.2663" dev="nsfs" ino=4026532627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 202.781175][ T29] audit: type=1400 audit(1765459695.537:25903): avc: denied { open } for pid=13009 comm="syz.1.2663" path="net:[4026532627]" dev="nsfs" ino=4026532627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 202.781210][ T29] audit: type=1400 audit(1765459695.557:25904): avc: denied { ioctl } for pid=13000 comm="syz.2.2660" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 202.781307][ T29] audit: type=1400 audit(1765459695.617:25905): avc: denied { lock } for pid=13005 comm="syz.4.2661" path="socket:[30231]" dev="sockfs" ino=30231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 203.241901][T13025] __nla_validate_parse: 2 callbacks suppressed [ 203.241935][T13025] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2665'. [ 203.308381][ T29] audit: type=1400 audit(1765459696.077:25906): avc: denied { ioctl } for pid=13022 comm="syz.2.2665" path="socket:[30250]" dev="sockfs" ino=30250 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.334319][ T29] audit: type=1400 audit(1765459696.097:25907): avc: denied { write } for pid=13022 comm="syz.2.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.354715][ T29] audit: type=1400 audit(1765459696.097:25908): avc: denied { nlmsg_write } for pid=13022 comm="syz.2.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.394249][T13027] EXT4-fs: Ignoring removed orlov option [ 203.419450][ T29] audit: type=1326 audit(1765459696.247:25909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.3.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7f9ff749 code=0x7ffc0000 [ 203.443219][ T29] audit: type=1326 audit(1765459696.247:25910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13026 comm="syz.3.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7f9ff749 code=0x7ffc0000 [ 203.510117][T13032] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.595512][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 203.723033][T13040] set_capacity_and_notify: 9 callbacks suppressed [ 203.723048][T13040] loop1: detected capacity change from 0 to 512 [ 203.740603][T13040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.774580][T13040] EXT4-fs error (device loop1): ext4_quota_enable:7173: comm syz.1.2669: Bad quota inum: 4, type: 2 [ 203.790636][T13040] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 203.814731][T13040] EXT4-fs (loop1): mount failed [ 203.827980][T13052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13052 comm=syz.4.2671 [ 203.859994][T13040] loop1: detected capacity change from 0 to 512 [ 203.880782][T13040] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 203.905206][T13052] loop4: detected capacity change from 0 to 512 [ 203.924392][T13052] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 203.937647][T13051] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 203.945491][T13051] vhci_hcd vhci_hcd.2: invalid port number 96 [ 203.951676][T13051] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 203.953861][T13040] EXT4-fs (loop1): 1 truncate cleaned up [ 203.959992][T13052] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 203.975912][T13052] EXT4-fs (loop4): orphan cleanup on readonly fs [ 203.982815][T13052] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2671: Allocating blocks 41-42 which overlap fs metadata [ 203.998487][T13052] EXT4-fs (loop4): Remounting filesystem read-only [ 204.005142][T13052] EXT4-fs (loop4): 1 truncate cleaned up [ 204.035422][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'. [ 204.058882][T13052] EXT4-fs (loop4): pa ffff888107a2d8c0: logic 1, phys. 41, len 23 [ 204.121456][T13064] netlink: 'syz.2.2674': attribute type 4 has an invalid length. [ 204.152113][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 204.178585][T13069] loop3: detected capacity change from 0 to 512 [ 204.196074][T13069] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.288856][T13052] 9p: Could not find request transport: r [ 204.496626][T13079] loop7: detected capacity change from 0 to 7 [ 204.504044][T13079] loop7: unable to read partition table [ 204.510001][T13079] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 204.576275][T13079] loop7: unable to read partition table [ 204.581998][T13079] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 204.743666][T13089] loop0: detected capacity change from 0 to 512 [ 204.770490][T13089] ext4 filesystem being mounted at /527/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.041636][T13100] loop2: detected capacity change from 0 to 1024 [ 205.059161][T13103] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2684'. [ 205.113108][T13100] EXT4-fs: Ignoring removed orlov option [ 205.247204][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2685'. [ 205.281578][T13107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.512281][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2687'. [ 205.526367][T13112] loop0: detected capacity change from 0 to 1024 [ 205.533190][T13112] EXT4-fs: Ignoring removed orlov option [ 205.548084][T13116] loop4: detected capacity change from 0 to 512 [ 205.572776][T13116] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.722808][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 205.789457][T13129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13129 comm=syz.2.2690 [ 205.847309][T13129] loop2: detected capacity change from 0 to 512 [ 205.859434][T13129] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.928615][T13129] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 206.010981][T13129] EXT4-fs (loop2): orphan cleanup on readonly fs [ 206.018802][T13134] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 206.037165][T13136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 206.049214][T13129] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2690: Allocating blocks 41-42 which overlap fs metadata [ 206.060935][T13134] vhci_hcd vhci_hcd.2: invalid port number 96 [ 206.069056][T13134] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 206.087862][T13136] EXT4-fs error (device loop0): ext4_quota_enable:7173: comm syz.0.2691: Bad quota inum: 4, type: 2 [ 206.099388][ C1] blk_print_req_error: 32 callbacks suppressed [ 206.099401][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.115131][ C1] buffer_io_error: 32 callbacks suppressed [ 206.115145][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.128756][T13129] EXT4-fs (loop2): Remounting filesystem read-only [ 206.136070][T13129] EXT4-fs (loop2): 1 truncate cleaned up [ 206.136065][T13136] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 206.156684][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.166279][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.174306][T13135] loop7: unable to read partition table [ 206.174776][T13136] EXT4-fs (loop0): mount failed [ 206.180246][T13135] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 206.185446][T13129] EXT4-fs (loop2): pa ffff888107a73460: logic 1, phys. 41, len 23 [ 206.251587][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.261174][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.269622][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.279217][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.287092][ T3530] loop7: unable to read partition table [ 206.293943][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.303531][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.312469][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.322055][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.329900][T13142] loop7: unable to read partition table [ 206.341297][T13136] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 206.355322][T13142] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 206.369427][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.379006][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.387016][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.387685][T13136] EXT4-fs (loop0): 1 truncate cleaned up [ 206.396583][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.411205][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.420777][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.429875][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.439474][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 206.614561][T13129] 9p: Could not find request transport: r [ 206.622558][T13150] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.628201][T13154] netlink: 'syz.1.2694': attribute type 4 has an invalid length. [ 206.796741][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2697'. [ 206.856872][T13161] EXT4-fs: Ignoring removed orlov option [ 206.981191][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2700'. [ 207.000343][T13170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.199939][T13176] EXT4-fs: Ignoring removed orlov option [ 207.522952][T13181] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.748247][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 207.748263][ T29] audit: type=1326 audit(1765459700.597:26259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9be8265e7 code=0x7ffc0000 [ 207.748317][ T29] audit: type=1326 audit(1765459700.597:26260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9be7cb829 code=0x7ffc0000 [ 207.748341][ T29] audit: type=1326 audit(1765459700.597:26261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9be8265e7 code=0x7ffc0000 [ 207.748366][ T29] audit: type=1326 audit(1765459700.597:26262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9be7cb829 code=0x7ffc0000 [ 207.748467][ T29] audit: type=1326 audit(1765459700.597:26263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9be82f749 code=0x7ffc0000 [ 207.748489][ T29] audit: type=1326 audit(1765459700.597:26264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9be82f749 code=0x7ffc0000 [ 207.748724][ T29] audit: type=1326 audit(1765459700.597:26265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff9be82f749 code=0x7ffc0000 [ 207.748751][ T29] audit: type=1326 audit(1765459700.597:26266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9be82f749 code=0x7ffc0000 [ 207.748833][ T29] audit: type=1326 audit(1765459700.597:26267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13180 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9be82f749 code=0x7ffc0000 [ 207.834156][ T29] audit: type=1400 audit(1765459700.687:26268): avc: denied { read } for pid=13194 comm="syz.2.2705" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 208.095978][T13204] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.156116][T13201] loop7: unable to read partition table [ 208.161841][T13201] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 208.234297][T13211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13211 comm=syz.3.2708 [ 208.260611][T13208] loop7: unable to read partition table [ 208.267150][T13208] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 208.388802][T13213] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 208.424474][T13213] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 208.441002][T13213] EXT4-fs (loop3): orphan cleanup on readonly fs [ 208.448652][T13213] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2708: Allocating blocks 41-42 which overlap fs metadata [ 208.465240][T13227] __nla_validate_parse: 2 callbacks suppressed [ 208.465277][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2711'. [ 208.482062][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2712'. [ 208.491099][T13213] EXT4-fs (loop3): Remounting filesystem read-only [ 208.497838][T13213] EXT4-fs (loop3): 1 truncate cleaned up [ 208.499239][T13217] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 208.511156][T13213] EXT4-fs (loop3): pa ffff888107a2d8c0: logic 1, phys. 41, len 23 [ 208.511954][T13217] vhci_hcd vhci_hcd.2: invalid port number 96 [ 208.525095][T13217] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 208.558088][T13211] 9p: Could not find request transport: r [ 208.596589][T13232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.619014][T13235] netlink: 'syz.1.2713': attribute type 4 has an invalid length. [ 208.628831][T13232] EXT4-fs error (device loop0): ext4_quota_enable:7173: comm syz.0.2714: Bad quota inum: 4, type: 2 [ 208.661226][T13232] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 208.687830][T13232] EXT4-fs (loop0): mount failed [ 208.715152][T13232] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 208.749637][T13232] EXT4-fs (loop0): 1 truncate cleaned up [ 208.904335][T13240] set_capacity_and_notify: 12 callbacks suppressed [ 208.904351][T13240] loop3: detected capacity change from 0 to 1024 [ 208.923980][T13240] EXT4-fs: Ignoring removed orlov option [ 209.133169][T13246] loop2: detected capacity change from 0 to 1024 [ 209.140676][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2716'. [ 209.172355][T13246] EXT4-fs: Ignoring removed orlov option [ 209.432259][T13254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.441043][T13256] loop1: detected capacity change from 0 to 512 [ 209.472387][T13256] ext4 filesystem being mounted at /539/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.932113][T13270] loop3: detected capacity change from 0 to 512 [ 209.964645][T13270] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.999319][T13271] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2722'. [ 210.094030][T13278] loop7: detected capacity change from 0 to 7 [ 210.100756][T13278] loop7: unable to read partition table [ 210.108207][T13278] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 210.123313][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2724'. [ 210.208714][T13278] loop7: unable to read partition table [ 210.217017][T13278] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 210.256203][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'. [ 210.294593][T13302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13302 comm=syz.2.2727 [ 210.330496][T13305] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 210.340046][T13305] vhci_hcd vhci_hcd.2: invalid port number 96 [ 210.346191][T13305] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 210.346785][T13302] loop2: detected capacity change from 0 to 512 [ 210.360755][T13308] loop4: detected capacity change from 0 to 512 [ 210.370146][T13309] netlink: 'syz.1.2729': attribute type 4 has an invalid length. [ 210.381567][T13308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.391483][T13302] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.408271][T13308] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.2730: Bad quota inum: 4, type: 2 [ 210.419402][T13308] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 210.435845][T13302] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 210.443891][T13308] EXT4-fs (loop4): mount failed [ 210.448426][T13302] EXT4-fs (loop2): orphan cleanup on readonly fs [ 210.468692][T13302] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2727: Allocating blocks 41-42 which overlap fs metadata [ 210.482599][T13302] EXT4-fs (loop2): Remounting filesystem read-only [ 210.489268][T13302] EXT4-fs (loop2): 1 truncate cleaned up [ 210.495011][T13302] EXT4-fs (loop2): pa ffff888107a735b0: logic 1, phys. 41, len 23 [ 210.513513][T13308] loop4: detected capacity change from 0 to 512 [ 210.543358][T13308] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 210.588080][T13302] 9p: Could not find request transport: r [ 210.594635][T13308] EXT4-fs (loop4): 1 truncate cleaned up [ 210.798030][T13320] loop0: detected capacity change from 0 to 1024 [ 210.805297][T13320] EXT4-fs: Ignoring removed orlov option [ 210.927875][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2731'. [ 211.096215][T13329] loop0: detected capacity change from 0 to 512 [ 211.129427][T13333] EXT4-fs: Ignoring removed orlov option [ 211.136485][T13329] ext4 filesystem being mounted at /539/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.257488][T13342] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.304927][T13332] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.535778][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2738'. [ 211.784631][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2739'. [ 211.820966][ C0] blk_print_req_error: 29 callbacks suppressed [ 211.820982][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.836732][ C0] buffer_io_error: 29 callbacks suppressed [ 211.836749][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 211.851820][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.861405][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 211.869361][T13356] loop7: unable to read partition table [ 211.875113][T13356] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 211.888901][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.898489][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 211.918462][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 211.927432][T13374] EXT4-fs: Ignoring removed orlov option [ 211.932798][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.943220][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 211.950452][T13369] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2742'. [ 211.951975][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.969588][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 211.977423][T13370] loop7: unable to read partition table [ 211.977510][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.984528][T13370] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 211.992670][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.008173][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.023518][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.031948][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.041537][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.049692][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.059266][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.076790][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 212.156030][T13386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13386 comm=syz.4.2745 [ 212.240442][T13390] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 212.255182][T13390] vhci_hcd vhci_hcd.2: invalid port number 96 [ 212.261310][T13390] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 212.317234][T13386] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 212.337974][T13394] netlink: 'syz.1.2748': attribute type 4 has an invalid length. [ 212.357743][T13386] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 212.368701][T13386] EXT4-fs (loop4): orphan cleanup on readonly fs [ 212.414705][T13399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.438868][T13386] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2745: Allocating blocks 41-42 which overlap fs metadata [ 212.457645][T13386] EXT4-fs (loop4): Remounting filesystem read-only [ 212.464578][T13386] EXT4-fs (loop4): 1 truncate cleaned up [ 212.470523][T13386] EXT4-fs (loop4): pa ffff888107a73690: logic 1, phys. 41, len 23 [ 212.582853][T13386] 9p: Could not find request transport: r [ 212.590185][T13399] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.2749: Bad quota inum: 4, type: 2 [ 212.601534][T13399] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 212.616835][T13399] EXT4-fs (loop2): mount failed [ 212.652230][T13399] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.677110][T13399] EXT4-fs (loop2): 1 truncate cleaned up [ 212.729817][T13404] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.825791][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 212.825806][ T29] audit: type=1400 audit(1765459705.677:26702): avc: denied { allowed } for pid=13403 comm="syz.0.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 212.858653][ T29] audit: type=1400 audit(1765459705.707:26703): avc: denied { sqpoll } for pid=13403 comm="syz.0.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 212.879449][ T29] audit: type=1400 audit(1765459705.737:26704): avc: denied { map } for pid=13403 comm="syz.0.2750" path="/542/file0/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 212.945428][ T29] audit: type=1326 audit(1765459705.797:26705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.0.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f415df865e7 code=0x7ffc0000 [ 212.968989][ T29] audit: type=1326 audit(1765459705.797:26706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.0.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f415df2b829 code=0x7ffc0000 [ 212.992568][ T29] audit: type=1326 audit(1765459705.797:26707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.0.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f415df865e7 code=0x7ffc0000 [ 213.016050][ T29] audit: type=1326 audit(1765459705.797:26708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.0.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f415df2b829 code=0x7ffc0000 [ 213.039559][ T29] audit: type=1326 audit(1765459705.797:26709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.0.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415df8f749 code=0x7ffc0000 [ 213.063484][ T29] audit: type=1326 audit(1765459705.797:26710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.0.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415df8f749 code=0x7ffc0000 [ 213.100565][ T29] audit: type=1326 audit(1765459705.797:26711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13403 comm="syz.0.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f415df8f749 code=0x7ffc0000 [ 213.258117][T13422] EXT4-fs: Ignoring removed orlov option [ 213.320246][T13424] loop7: unable to read partition table [ 213.328114][T13424] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 213.464869][T13422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.570622][T13430] ext4 filesystem being mounted at /525/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.800337][T13424] loop7: unable to read partition table [ 213.811543][T13424] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 213.994170][T13449] set_capacity_and_notify: 11 callbacks suppressed [ 213.994188][T13449] loop0: detected capacity change from 0 to 512 [ 214.008138][T13452] __nla_validate_parse: 3 callbacks suppressed [ 214.008150][T13452] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2761'. [ 214.039145][T13456] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 214.046616][T13456] vhci_hcd vhci_hcd.2: invalid port number 96 [ 214.052718][T13456] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 214.074075][T13449] EXT4-fs (loop0): too many log groups per flexible block group [ 214.082260][T13449] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 214.089343][T13449] EXT4-fs (loop0): mount failed [ 214.189940][T13477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13477 comm=syz.1.2763 [ 214.252649][T13479] netlink: 'syz.0.2764': attribute type 4 has an invalid length. [ 214.268377][ T3673] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.279317][T13477] loop1: detected capacity change from 0 to 512 [ 214.287504][T13477] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 214.310423][T13477] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 214.311967][T13451] chnl_net:caif_netlink_parms(): no params data found [ 214.346066][T13477] EXT4-fs (loop1): orphan cleanup on readonly fs [ 214.353123][T13477] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2763: Allocating blocks 41-42 which overlap fs metadata [ 214.367143][T13477] EXT4-fs (loop1): Remounting filesystem read-only [ 214.373777][T13477] EXT4-fs (loop1): 1 truncate cleaned up [ 214.379672][T13477] EXT4-fs (loop1): pa ffff888107a73380: logic 1, phys. 41, len 23 [ 214.446237][ T3673] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.489833][T13451] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.497189][T13451] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.505709][T13451] bridge_slave_0: entered allmulticast mode [ 214.512241][T13451] bridge_slave_0: entered promiscuous mode [ 214.521473][ T3673] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.531672][T13483] 9p: Could not find request transport: r [ 214.537692][T13451] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.544810][T13451] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.552488][T13451] bridge_slave_1: entered allmulticast mode [ 214.559145][T13451] bridge_slave_1: entered promiscuous mode [ 214.577944][T13451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.590105][ T3673] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.602858][T13451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.623634][T13451] team0: Port device team_slave_0 added [ 214.630266][T13451] team0: Port device team_slave_1 added [ 214.660577][T13451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.667571][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.693516][T13451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.704690][T13451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.711761][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.737731][T13451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.786127][T13488] loop3: detected capacity change from 0 to 512 [ 214.847910][ T3673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.860541][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2766'. [ 214.870176][T13488] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.881042][ T3673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.894853][ T3673] bond0 (unregistering): Released all slaves [ 214.920236][T13451] hsr_slave_0: entered promiscuous mode [ 214.927358][T13451] hsr_slave_1: entered promiscuous mode [ 214.955926][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.963364][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.988681][T13500] loop2: detected capacity change from 0 to 512 [ 215.044238][T13500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.045697][T13508] loop0: detected capacity change from 0 to 1024 [ 215.060275][T13508] EXT4-fs: Ignoring removed orlov option [ 215.060397][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.073401][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.080993][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2767'. [ 215.118583][T13500] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.2768: Bad quota inum: 4, type: 2 [ 215.132307][T13500] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 215.147215][ T3673] veth1_macvtap: left promiscuous mode [ 215.157296][ T3673] veth0_macvtap: left promiscuous mode [ 215.160160][T13511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.164060][ T3673] veth1_vlan: left promiscuous mode [ 215.185803][T13500] EXT4-fs (loop2): mount failed [ 215.197433][ T3673] veth0_vlan: left promiscuous mode [ 215.226769][T13500] loop2: detected capacity change from 0 to 512 [ 215.239912][T13500] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.257879][T13500] EXT4-fs (loop2): 1 truncate cleaned up [ 215.412350][T13519] loop0: detected capacity change from 0 to 512 [ 215.453324][T13519] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.479323][T13517] loop7: detected capacity change from 0 to 7 [ 215.488070][ T3530] loop7: unable to read partition table [ 215.495492][T13517] loop7: unable to read partition table [ 215.503554][T13517] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 215.616346][T13517] loop7: unable to read partition table [ 215.622992][T13517] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 215.745328][T13538] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 215.756436][T13538] vhci_hcd vhci_hcd.2: invalid port number 96 [ 215.762613][T13538] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 215.978607][T13451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.995868][T13547] loop7: detected capacity change from 0 to 7 [ 216.055507][T13451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.062509][T13547] loop7: unable to read partition table [ 216.068188][T13547] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 216.083923][T13451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.103963][T13451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.118618][ T3529] loop7: unable to read partition table [ 216.126431][T13549] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2776'. [ 216.137156][T13553] loop7: unable to read partition table [ 216.145025][T13553] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 216.216175][T13451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.245598][T13451] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.257059][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.264146][ T3664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.283815][T13451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.294303][T13451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.308473][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.315530][ T3664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.367626][T13568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13568 comm=syz.1.2777 [ 216.416252][T13451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.463669][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2778'. [ 216.507557][T13566] loop1: detected capacity change from 0 to 512 [ 216.537210][T13566] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 216.553378][T13566] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 216.561499][T13566] EXT4-fs (loop1): orphan cleanup on readonly fs [ 216.570542][T13566] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2777: Allocating blocks 41-42 which overlap fs metadata [ 216.580954][T13451] veth0_vlan: entered promiscuous mode [ 216.593890][T13566] EXT4-fs (loop1): Remounting filesystem read-only [ 216.601064][T13566] EXT4-fs (loop1): 1 truncate cleaned up [ 216.602870][T13451] veth1_vlan: entered promiscuous mode [ 216.613161][T13566] EXT4-fs (loop1): pa ffff888107a730e0: logic 1, phys. 41, len 23 [ 216.628519][T13584] netlink: 'syz.3.2779': attribute type 4 has an invalid length. [ 216.634434][T13451] veth0_macvtap: entered promiscuous mode [ 216.642390][T13566] EXT4-fs mount: 113 callbacks suppressed [ 216.642404][T13566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.650861][T13451] veth1_macvtap: entered promiscuous mode [ 216.715781][T13588] EXT4-fs: Ignoring removed orlov option [ 216.733421][T13451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.745922][T13451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.760851][T13588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.775721][ T3664] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.790021][T13566] 9p: Could not find request transport: r [ 216.802634][ T3664] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.817272][ T3664] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.845530][T13593] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.864242][T13594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.878567][ T3664] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.905010][T13593] EXT4-fs: Ignoring removed orlov option [ 216.940315][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2781'. [ 216.952842][T13593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.990707][T13603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.003861][T13603] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.074556][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2760'. [ 217.097314][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.329299][T13612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.375296][T13612] ext4 filesystem being mounted at /553/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.414569][T13451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.424135][ C1] blk_print_req_error: 46 callbacks suppressed [ 217.424152][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.439881][ C1] buffer_io_error: 45 callbacks suppressed [ 217.439898][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.454229][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.463802][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.471756][T13616] loop7: unable to read partition table [ 217.478934][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.480336][T13616] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 217.488362][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.503323][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.520089][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.549976][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.559590][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.609075][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.618729][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.628462][T13627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.638215][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.647803][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.654082][T13621] loop7: unable to read partition table [ 217.667113][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.676730][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.688246][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.697849][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.698235][T13621] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 217.708381][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.729104][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.932596][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 217.942236][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.953541][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2789'. [ 217.968115][T13643] loop7: unable to read partition table [ 218.020081][T13643] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 218.057803][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.116358][T13627] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.2786: Bad quota inum: 4, type: 2 [ 218.129447][T13627] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 218.144483][T13632] loop7: unable to read partition table [ 218.150234][T13627] EXT4-fs (loop4): mount failed [ 218.151381][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 218.151392][ T29] audit: type=1400 audit(1765459711.007:27086): avc: denied { write } for pid=13648 comm="syz.1.2790" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 218.161327][T13632] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 218.207069][T13649] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 218.228417][ T29] audit: type=1400 audit(1765459711.087:27087): avc: denied { ioctl } for pid=13626 comm="syz.4.2786" path="socket:[32033]" dev="sockfs" ino=32033 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.258691][T13651] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2791'. [ 218.262001][T13649] vhci_hcd vhci_hcd.2: invalid port number 96 [ 218.273870][T13649] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 218.274504][ T29] audit: type=1326 audit(1765459711.087:27088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13626 comm="syz.4.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91e62f749 code=0x7ffc0000 [ 218.305492][ T29] audit: type=1326 audit(1765459711.087:27089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13626 comm="syz.4.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91e62f749 code=0x7ffc0000 [ 218.329091][ T29] audit: type=1326 audit(1765459711.087:27090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13626 comm="syz.4.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd91e62f749 code=0x7ffc0000 [ 218.352700][ T29] audit: type=1400 audit(1765459711.107:27091): avc: denied { ioctl } for pid=13650 comm="syz.3.2791" path="socket:[33183]" dev="sockfs" ino=33183 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.378602][ T29] audit: type=1400 audit(1765459711.107:27092): avc: denied { write } for pid=13650 comm="syz.3.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.398900][ T29] audit: type=1400 audit(1765459711.117:27093): avc: denied { nlmsg_write } for pid=13650 comm="syz.3.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.459402][T13627] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.501189][ T29] audit: type=1326 audit(1765459711.287:27094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13626 comm="syz.4.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91e62f749 code=0x7ffc0000 [ 218.524857][ T29] audit: type=1326 audit(1765459711.287:27095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13626 comm="syz.4.2786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd91e62f749 code=0x7ffc0000 [ 218.539048][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2793'. [ 218.558451][T13627] EXT4-fs (loop4): 1 truncate cleaned up [ 218.564575][T13627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.589008][T13659] EXT4-fs (loop0): too many log groups per flexible block group [ 218.598380][T13659] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 218.640416][T13659] EXT4-fs (loop0): mount failed [ 218.692991][T13674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13674 comm=syz.2.2794 [ 218.759777][T13674] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.801170][T13674] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 218.848321][T13674] EXT4-fs (loop2): orphan cleanup on readonly fs [ 218.873857][T13674] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2794: Allocating blocks 41-42 which overlap fs metadata [ 218.890527][T13681] netlink: 'syz.0.2796': attribute type 4 has an invalid length. [ 218.949219][T13674] EXT4-fs (loop2): Remounting filesystem read-only [ 218.955860][T13674] EXT4-fs (loop2): 1 truncate cleaned up [ 218.962731][T13674] EXT4-fs (loop2): pa ffff888107a2d850: logic 1, phys. 41, len 23 [ 218.971113][T13674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.019841][T13674] 9p: Could not find request transport: r [ 219.032891][T13685] set_capacity_and_notify: 10 callbacks suppressed [ 219.032905][T13685] loop1: detected capacity change from 0 to 1024 [ 219.053059][T13687] loop3: detected capacity change from 0 to 1024 [ 219.061299][T13687] EXT4-fs: Ignoring removed orlov option [ 219.079009][T13687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.104285][T13451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.132672][T13685] EXT4-fs: Ignoring removed orlov option [ 219.151440][T13690] loop4: detected capacity change from 0 to 512 [ 219.183582][T13685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.201124][T13692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.225947][T13690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.238848][T13690] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.330777][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'. [ 219.440859][T13451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.470086][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.491763][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.503720][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.524045][T13701] loop3: detected capacity change from 0 to 512 [ 219.569669][T13701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.572270][T13698] loop7: detected capacity change from 0 to 7 [ 219.589896][T13698] loop7: unable to read partition table [ 219.604456][T13701] ext4 filesystem being mounted at /537/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.609555][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2802'. [ 219.619798][T13698] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 219.761814][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2804'. [ 219.776832][T13698] loop7: unable to read partition table [ 219.820458][T13698] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 219.873543][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.081491][T13733] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 220.081513][T13733] vhci_hcd vhci_hcd.2: invalid port number 96 [ 220.081553][T13733] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 220.120656][T13738] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2809'. [ 220.176112][T13740] loop2: detected capacity change from 0 to 512 [ 220.214316][T13740] EXT4-fs (loop2): too many log groups per flexible block group [ 220.225631][T13740] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 220.232473][T13740] EXT4-fs (loop2): mount failed [ 220.278396][T13748] loop3: detected capacity change from 0 to 512 [ 220.298076][T13748] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.308446][T13748] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.2810: Bad quota inum: 4, type: 2 [ 220.319756][T13748] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 220.335093][T13748] EXT4-fs (loop3): mount failed [ 220.362067][T13751] loop2: detected capacity change from 0 to 512 [ 220.374564][T13748] loop3: detected capacity change from 0 to 512 [ 220.382202][T13748] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 220.407171][T13748] EXT4-fs (loop3): 1 truncate cleaned up [ 220.421610][T13751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.437416][T13748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.456508][T13751] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.522656][T13756] loop1: detected capacity change from 0 to 1024 [ 220.533303][T13756] EXT4-fs: Ignoring removed orlov option [ 220.551362][T13756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.634932][T13758] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.819043][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.903434][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.953866][T13769] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 220.998509][T13770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13770 comm=syz.2.2813 [ 221.022667][T13771] netlink: 'syz.1.2816': attribute type 4 has an invalid length. [ 221.081031][T13770] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 221.113526][T13770] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 221.117782][T13773] EXT4-fs: Ignoring removed orlov option [ 221.127694][T13770] EXT4-fs (loop2): orphan cleanup on readonly fs [ 221.137851][T13773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.147331][T13770] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2813: Allocating blocks 41-42 which overlap fs metadata [ 221.174847][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.184356][T13770] EXT4-fs (loop2): Remounting filesystem read-only [ 221.208385][T13770] EXT4-fs (loop2): 1 truncate cleaned up [ 221.214705][T13770] EXT4-fs (loop2): pa ffff888107a730e0: logic 1, phys. 41, len 23 [ 221.223964][T13770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.242392][T13777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.256510][T13777] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.277290][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2814'. [ 221.384447][T13770] 9p: Could not find request transport: r [ 221.413514][T13451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.442229][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2818'. [ 221.488567][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.525611][T13788] loop7: unable to read partition table [ 221.531514][T13788] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 221.558611][T13788] loop7: unable to read partition table [ 221.565065][T13788] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 221.584322][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2820'. [ 221.667489][ T3530] loop7: unable to read partition table [ 221.673563][T13796] loop7: unable to read partition table [ 221.673583][T13796] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 221.718830][T13796] loop7: unable to read partition table [ 221.722452][T13800] EXT4-fs (loop3): too many log groups per flexible block group [ 221.724553][T13796] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 221.745752][T13800] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 221.758372][T13800] EXT4-fs (loop3): mount failed [ 221.848608][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.877567][T13812] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 221.908343][T13812] vhci_hcd vhci_hcd.2: invalid port number 96 [ 221.914579][T13812] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 222.086149][T13825] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2826'. [ 222.151601][T13824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.229555][T13824] ext4 filesystem being mounted at /543/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.360499][T13831] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.391090][T13831] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.2828: Bad quota inum: 4, type: 2 [ 222.408353][T13831] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 222.440793][T13831] EXT4-fs (loop4): mount failed [ 222.484981][T13831] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.504853][T13831] EXT4-fs (loop4): 1 truncate cleaned up [ 222.511461][T13831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.550044][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.595266][T13838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.675686][T13844] EXT4-fs: Ignoring removed orlov option [ 222.681500][T13838] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.718771][T13844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.798727][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2831'. [ 222.814280][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'. [ 222.887422][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.929330][ C0] blk_print_req_error: 57 callbacks suppressed [ 222.929352][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.945093][ C0] buffer_io_error: 57 callbacks suppressed [ 222.945107][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.968436][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.978044][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.986807][T13861] loop7: unable to read partition table [ 222.992948][T13861] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 223.023181][T13866] EXT4-fs: Ignoring removed orlov option [ 223.038455][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 223.048044][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 223.057785][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 223.067365][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 223.076169][ T3529] loop7: unable to read partition table [ 223.082802][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 223.092384][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 223.098077][T13866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.106801][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 223.122201][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 223.130364][T13857] loop7: unable to read partition table [ 223.142191][T13857] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 223.157095][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 223.166702][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 223.177630][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 223.187204][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 223.196260][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 223.205854][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 223.213897][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 223.214254][ T29] kauditd_printk_skb: 896 callbacks suppressed [ 223.214267][ T29] audit: type=1400 audit(1765459716.067:27988): avc: denied { setopt } for pid=13863 comm="syz.1.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.223504][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 223.275429][T13875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.295659][ T29] audit: type=1404 audit(1765459716.127:27989): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 223.310754][ T29] audit: type=1404 audit(1765459716.127:27990): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 223.325872][ T29] audit: type=1400 audit(1765459716.127:27991): avc: denied { create } for pid=13876 comm="syz.3.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.345776][ T29] audit: type=1400 audit(1765459716.127:27992): avc: denied { create } for pid=13863 comm="syz.1.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.366481][ T29] audit: type=1400 audit(1765459716.127:27993): avc: denied { write } for pid=13863 comm="syz.1.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.387209][ T29] audit: type=1400 audit(1765459716.127:27994): avc: denied { getopt } for pid=13876 comm="syz.3.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.406966][ T29] audit: type=1400 audit(1765459716.127:27995): avc: denied { read } for pid=13876 comm="syz.3.2836" path="socket:[32271]" dev="sockfs" ino=32271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.430460][ T29] audit: type=1400 audit(1765459716.137:27996): avc: denied { read open } for pid=13863 comm="syz.1.2835" path="/561/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 223.443268][T13880] netlink: 'syz.3.2836': attribute type 4 has an invalid length. [ 223.453504][ T29] audit: type=1326 audit(1765459716.137:27997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13843 comm="syz.0.2830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415df8f749 code=0x7ffc0000 [ 223.486166][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.505862][T13884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13884 comm=syz.2.2837 [ 223.523011][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.568134][T13884] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 223.592009][T13451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.649644][T13884] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 223.649914][T13884] EXT4-fs (loop2): orphan cleanup on readonly fs [ 223.650350][T13884] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.2837: Allocating blocks 41-42 which overlap fs metadata [ 223.651308][T13884] EXT4-fs (loop2): Remounting filesystem read-only [ 223.651476][T13884] EXT4-fs (loop2): 1 truncate cleaned up [ 223.651726][T13884] EXT4-fs (loop2): pa ffff888107a733f0: logic 1, phys. 41, len 23 [ 223.652189][T13884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.734950][T13884] 9p: Could not find request transport: r [ 223.738256][T13889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.738383][T13889] ext4 filesystem being mounted at /562/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.888187][T13894] EXT4-fs (loop0): too many log groups per flexible block group [ 223.948515][T13894] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 223.985335][T13894] EXT4-fs (loop0): mount failed [ 224.032729][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.160144][T13908] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 224.167483][T13908] vhci_hcd vhci_hcd.2: invalid port number 96 [ 224.173637][T13908] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 224.206042][T13916] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 224.216506][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.340320][T13924] set_capacity_and_notify: 16 callbacks suppressed [ 224.340335][T13924] loop2: detected capacity change from 0 to 512 [ 224.363302][T13924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.379888][T13924] ext4 filesystem being mounted at /559/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.546192][T13928] __nla_validate_parse: 3 callbacks suppressed [ 224.546208][T13928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2846'. [ 224.620652][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.659406][T13933] loop7: detected capacity change from 0 to 7 [ 224.664890][T13939] loop2: detected capacity change from 0 to 1024 [ 224.666130][T13933] loop7: unable to read partition table [ 224.678612][T13933] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 224.693892][T13939] EXT4-fs: Ignoring removed orlov option [ 224.710211][T13939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.768458][T13933] loop7: unable to read partition table [ 224.782066][T13933] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 224.855268][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2848'. [ 224.934644][T13947] loop4: detected capacity change from 0 to 1024 [ 224.968109][T13947] EXT4-fs: Ignoring removed orlov option [ 224.976516][T13947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.027094][T13951] loop3: detected capacity change from 0 to 512 [ 225.045753][T13953] loop0: detected capacity change from 0 to 512 [ 225.056074][T13951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.065481][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.083735][T13951] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.2851: Bad quota inum: 4, type: 2 [ 225.101467][T13957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.120728][T13953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.134121][T13951] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 225.153022][T13953] ext4 filesystem being mounted at /561/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.165423][T13963] loop7: detected capacity change from 0 to 7 [ 225.202300][T13963] loop7: unable to read partition table [ 225.209399][T13965] netlink: 'syz.2.2853': attribute type 4 has an invalid length. [ 225.217261][T13951] EXT4-fs (loop3): mount failed [ 225.222607][T13963] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 225.262088][T13951] loop3: detected capacity change from 0 to 512 [ 225.270714][T13951] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 225.283154][T13951] EXT4-fs (loop3): 1 truncate cleaned up [ 225.288757][T13956] loop7: unable to read partition table [ 225.289428][T13951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.304150][T13956] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 225.366942][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.395743][T13451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.471586][T13975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13975 comm=syz.1.2855 [ 225.527109][T13971] loop0: detected capacity change from 0 to 512 [ 225.561328][T13975] loop1: detected capacity change from 0 to 512 [ 225.662225][T13975] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 225.684363][T13971] EXT4-fs (loop0): too many log groups per flexible block group [ 225.692828][T13971] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 225.700138][T13971] EXT4-fs (loop0): mount failed [ 225.718973][T13975] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 225.727827][T13975] EXT4-fs (loop1): orphan cleanup on readonly fs [ 225.746277][T13975] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2855: Allocating blocks 41-42 which overlap fs metadata [ 225.799788][T13975] EXT4-fs (loop1): Remounting filesystem read-only [ 225.825075][T13975] EXT4-fs (loop1): 1 truncate cleaned up [ 225.850188][T13975] EXT4-fs (loop1): pa ffff888107a73150: logic 1, phys. 41, len 23 [ 225.882698][T13975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.962002][T13975] 9p: Could not find request transport: r [ 225.994805][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2857'. [ 226.003734][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2858'. [ 226.040152][T13998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.052954][T13998] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.069896][T13996] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 226.077463][T13996] vhci_hcd vhci_hcd.2: invalid port number 96 [ 226.083563][T13996] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 226.093853][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.159360][T14004] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2861'. [ 226.200564][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.248769][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.278420][T14013] loop7: unable to read partition table [ 226.284470][T14013] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 226.338706][T14009] loop7: unable to read partition table [ 226.344655][T14009] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 226.359500][T14015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.372964][T14015] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.385989][T14020] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 226.556278][T14022] EXT4-fs: Ignoring removed orlov option [ 226.570009][T14022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.695887][T14026] loop7: unable to read partition table [ 226.701796][T14026] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 226.758316][T14030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 226.784802][T14033] EXT4-fs: Ignoring removed orlov option [ 226.817395][T14031] loop7: unable to read partition table [ 226.827270][T14031] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 226.935193][T14035] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.122422][T14039] EXT4-fs (loop4): too many log groups per flexible block group [ 227.142393][T14039] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 227.149469][T14039] EXT4-fs (loop4): mount failed [ 227.151039][T14049] netlink: 'syz.0.2869': attribute type 4 has an invalid length. [ 227.176821][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2871'. [ 227.184287][T14039] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 227.222328][T14052] ext4 filesystem being mounted at /567/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.294499][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2873'. [ 227.427618][T14065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=14065 comm=syz.3.2874 [ 227.451363][T14067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.479624][T14067] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.2876: Bad quota inum: 4, type: 2 [ 227.563931][T14067] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=4). Please run e2fsck to fix. [ 227.643324][T14067] EXT4-fs (loop2): mount failed [ 227.723768][T14069] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 227.770055][T14069] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 227.779314][T14069] EXT4-fs (loop3): orphan cleanup on readonly fs [ 227.786462][T14069] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2874: Allocating blocks 41-42 which overlap fs metadata [ 227.801107][T14069] EXT4-fs (loop3): Remounting filesystem read-only [ 227.807726][T14069] EXT4-fs (loop3): 1 truncate cleaned up [ 227.813954][T14069] EXT4-fs (loop3): pa ffff888107a735b0: logic 1, phys. 41, len 23 [ 227.869632][T14067] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.884484][T14065] 9p: Could not find request transport: r [ 227.891768][T14067] EXT4-fs (loop2): 1 truncate cleaned up [ 227.900367][T14073] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.960601][T14079] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 227.968013][T14079] vhci_hcd vhci_hcd.2: invalid port number 96 [ 227.974300][T14079] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 228.198636][T14095] team0 (unregistering): Port device team_slave_0 removed [ 228.212216][T14091] EXT4-fs: Ignoring removed orlov option [ 228.219969][ C0] blk_print_req_error: 52 callbacks suppressed [ 228.219987][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 228.235754][ C0] buffer_io_error: 52 callbacks suppressed [ 228.235769][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.249729][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 228.251416][T14095] team0 (unregistering): Port device team_slave_1 removed [ 228.259330][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.259504][T14088] loop7: unable to read partition table [ 228.281957][T14088] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 228.338318][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 228.347932][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.356019][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 228.365579][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.373868][ T3529] loop7: unable to read partition table [ 228.374547][ T29] kauditd_printk_skb: 1162 callbacks suppressed [ 228.374559][ T29] audit: type=1326 audit(1765459721.227:29154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14066 comm="syz.2.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066040f749 code=0x7ffc0000 [ 228.383916][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 228.385772][ T29] audit: type=1326 audit(1765459721.227:29155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14066 comm="syz.2.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066040f749 code=0x7ffc0000 [ 228.409261][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.450569][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 228.460179][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.469017][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 228.478606][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.486923][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 228.496496][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.504578][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 228.514162][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.514306][ T2991] ================================================================== [ 228.522554][ T29] audit: type=1400 audit(1765459721.357:29156): avc: denied { ioctl } for pid=14087 comm="syz.3.2879" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 228.530040][ T2991] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 228.562090][ T2991] [ 228.564409][ T2991] write to 0xffffffff86869fe8 of 8 bytes by interrupt on cpu 0: [ 228.572033][ T2991] data_alloc+0x310/0x390 [ 228.576367][ T2991] prb_reserve+0x964/0xb60 [ 228.580780][ T2991] vprintk_store+0x56d/0x860 [ 228.585368][ T2991] vprintk_emit+0x15a/0x610 [ 228.589870][ T2991] vprintk_default+0x26/0x30 [ 228.594467][ T2991] vprintk+0x1d/0x30 [ 228.598348][ T2991] _printk+0x79/0xa0 [ 228.602223][ T2991] end_buffer_async_read_io+0x232/0x250 [ 228.607759][ T2991] end_bio_bh_io_sync+0x79/0xa0 [ 228.612600][ T2991] bio_endio+0x37e/0x420 [ 228.616837][ T2991] blk_update_request+0x336/0x730 [ 228.621854][ T2991] blk_mq_end_request+0x26/0x50 [ 228.626695][ T2991] lo_complete_rq+0x98/0x140 [ 228.631267][ T2991] blk_done_softirq+0x77/0xb0 [ 228.635931][ T2991] handle_softirqs+0xba/0x290 [ 228.640598][ T2991] run_ksoftirqd+0x1c/0x30 [ 228.644996][ T2991] smpboot_thread_fn+0x32b/0x530 [ 228.649929][ T2991] kthread+0x489/0x510 [ 228.654002][ T2991] ret_from_fork+0x149/0x290 [ 228.658583][ T2991] ret_from_fork_asm+0x1a/0x30 [ 228.663337][ T2991] [ 228.665642][ T2991] read to 0xffffffff86869fe8 of 16 bytes by task 2991 on cpu 1: [ 228.673252][ T2991] _prb_read_valid+0x1bc/0x920 [ 228.678007][ T2991] prb_read_valid+0x3c/0x60 [ 228.682508][ T2991] syslog_print+0x23a/0x540 [ 228.687006][ T2991] do_syslog+0x52b/0x7e0 [ 228.691241][ T2991] __x64_sys_syslog+0x41/0x50 [ 228.695912][ T2991] x64_sys_call+0x27ce/0x3000 [ 228.700576][ T2991] do_syscall_64+0xd8/0x2a0 [ 228.705079][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.710966][ T2991] [ 228.713276][ T2991] Reported by Kernel Concurrency Sanitizer on: [ 228.719410][ T2991] CPU: 1 UID: 0 PID: 2991 Comm: klogd Not tainted syzkaller #0 PREEMPT(voluntary) [ 228.728680][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.738721][ T2991] ================================================================== [ 228.754941][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 228.764728][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 228.778229][T14092] loop7: unable to read partition table SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 228.784022][T14092] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 228.816669][ T29] audit: type=1400 audit(1765459721.607:29157): avc: denied { write } for pid=3301 comm="syz-executor" path="pipe:[1635]" dev="pipefs" ino=1635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 229.429970][ T3647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.439060][ T3647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.447881][ T3647] bond0 (unregistering): Released all slaves [ 229.471643][ T3647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.479056][ T3647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.793700][ T358] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.840921][ T358] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.880703][ T358] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.960376][ T358] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.014548][ T358] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.059436][ T358] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.099566][ T358] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.159500][ T358] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.243665][ T358] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.280192][ T358] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.320467][ T358] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.380333][ T358] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.453892][ T358] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.509482][ T358] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.579368][ T358] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.659571][ T358] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.723797][ T358] bridge_slave_1: left allmulticast mode [ 230.729468][ T358] bridge_slave_1: left promiscuous mode [ 230.735156][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.743227][ T358] bridge_slave_0: left allmulticast mode [ 230.748876][ T358] bridge_slave_0: left promiscuous mode [ 230.754734][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.762848][ T358] bridge_slave_1: left allmulticast mode [ 230.768514][ T358] bridge_slave_1: left promiscuous mode [ 230.774255][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.781974][ T358] bridge_slave_0: left promiscuous mode [ 230.787620][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.870578][ T358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.880661][ T358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.890213][ T358] bond0 (unregistering): Released all slaves [ 230.910052][ T358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.919780][ T358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.929789][ T358] bond0 (unregistering): Released all slaves [ 230.980892][ T358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.990759][ T358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.002024][ T358] bond0 (unregistering): Released all slaves [ 231.099921][ T358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.109416][ T358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.118915][ T358] bond0 (unregistering): Released all slaves [ 231.185467][ T358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.192969][ T358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.200680][ T358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.208101][ T358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.216937][ T358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.224409][ T358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.232137][ T358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.239557][ T358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.248555][ T358] hsr_slave_0: left promiscuous mode [ 231.254242][ T358] hsr_slave_1: left promiscuous mode [ 231.259927][ T358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.267273][ T358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.274798][ T358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.282178][ T358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.291015][ T358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.298387][ T358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.305805][ T358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.313407][ T358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.328258][ T358] veth1_macvtap: left promiscuous mode [ 231.333789][ T358] veth0_macvtap: left promiscuous mode [ 231.339379][ T358] veth1_vlan: left promiscuous mode [ 231.344583][ T358] veth0_vlan: left promiscuous mode [ 231.350541][ T358] veth1_macvtap: left promiscuous mode [ 231.356167][ T358] veth0_macvtap: left promiscuous mode [ 231.361665][ T358] veth1_vlan: left promiscuous mode [ 231.366863][ T358] veth0_vlan: left promiscuous mode [ 231.372571][ T358] veth1_macvtap: left promiscuous mode [ 231.378026][ T358] veth0_macvtap: left promiscuous mode [ 231.383601][ T358] veth1_vlan: left promiscuous mode [ 231.388865][ T358] veth0_vlan: left promiscuous mode [ 231.394483][ T358] veth1_macvtap: left promiscuous mode [ 231.400000][ T358] veth0_macvtap: left promiscuous mode [ 231.405539][ T358] veth1_vlan: left promiscuous mode [ 231.410817][ T358] veth0_vlan: left promiscuous mode