last executing test programs: 5m40.090764086s ago: executing program 2 (id=836): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) 5m39.986820847s ago: executing program 2 (id=839): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="cc400000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf250800000008000200080000000800030005000000050005008300000008000300000000001c000180060005004e240000060001000200000005000200000000002c00068008000300ac1414bb060001000a000000050002005c00000008000700", @ANYRES32=0x0, @ANYBLOB="080006000e0000000800040001000000480006800800030064010100080006001000000014000400fe8000000000000000000000000000bb08000700", @ANYRES32=0x0, @ANYBLOB="0600010002000000080003000a010100060005004e230000"], 0xcc}, 0x1, 0x0, 0x0, 0x400c0d5}, 0x800) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f00000005c0)="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") r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) syz_read_part_table(0x104d, &(0x7f0000001080)="$eJzszzEKwjAUBuBUY9FJj2BnT1F3x95HPImLi4c0ktcIXkCw8H1DXn5C/pDEP9i22ceaW9p3rzLbRB7W7aCUeV6Pw3265Xp/19WO8ZAe51MUfCrT2H+/VJtWsbvkND1//TEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWIJ3AAAA///ZrQ+k") sendfile(r6, r7, 0x0, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0xc7, 0x0, 0x0, 0x0, 0x6, 0x510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r6, 0x0) r10 = semget(0x3, 0x0, 0x482) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000240)=[0x401, 0x0, 0x180, 0x7]) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf2502000900080000ff070000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000"], 0x80}, 0x1, 0x7}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @mcast1, 0xfffffffc}, 0x1c) 5m39.080384285s ago: executing program 2 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x4}]}, {0x0, [0x61, 0x2e, 0x61]}}, 0x0, 0x29, 0x0, 0x8}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000004c0)=ANY=[]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa269862a395a8f3a08d8319cb600000000000007020000f9ffffffb7030000080000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe69, 0xfffffffffffffdf1, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 5m38.81175647s ago: executing program 2 (id=866): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0xd5d1, 0x80042) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$tun(r3, &(0x7f0000002180)={@val={0x0, 0x8917}, @val={0x1, 0x80, 0x4, 0x6, 0x8000, 0xec}, @mpls={[{}, {0x4}, {0x101}], @ipv6=@gre_packet={0xe, 0x6, "6d5acf", 0x1372, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[@srh={0x73, 0x10, 0x4, 0x8, 0x9, 0x8, 0x7, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @private1, @empty, @local, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}, @srh={0x2f, 0x4, 0x4, 0x2, 0x2, 0x8, 0x200, [@local, @local]}, @fragment={0x6, 0x0, 0x40, 0x1, 0x0, 0x11, 0x68}, @hopopts={0x2e, 0x210, '\x00', [@ra={0x5, 0x2, 0x9}, @generic={0x4, 0x1000, "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"}, @ra={0x5, 0x2, 0xffff}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x38, {0x0, 0xc, 0x3, 0x6, [0x401, 0xa46, 0x5920, 0x1000, 0xfff, 0x7ff]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x11, 0xc, [0x2, 0x7]}}, @generic={0x4, 0x7, "1d7f45a7dd25db"}, @hao={0xc9, 0x10, @remote}]}, @routing={0x2c, 0x2, 0x1, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}]}, @fragment={0x16, 0x0, 0x21, 0x0, 0x0, 0x3, 0x67}, @dstopts={0x2b, 0xf, '\x00', [@enc_lim={0x4, 0x1, 0x64}, @pad1, @generic={0x0, 0x6a, "32b711cbf0d9faac87f978291577db7551ede66d0cab80b6d436cf5e5d73d9fd202468146cc3c74cf6b6cbe8cadff6aeaf62d3ed4e0a0107fb601cb61620ff389063fdf29cb0fc50f5e1898ccebf054a4a4b5f8d9423ec011ca4eba2fab04284cbda2f19822184c951a7"}, @jumbo={0xc2, 0x4, 0x1}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x27, 0x2, [0x4f], "2465ab2580c3bbac7d4164d65ef90b24406e9cb999ef5ed5ecae37d768f5116d1cfdb8b26d6984"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "c354df1736546e46a2758a50f737cf3a6ae57a7654193487aebbf0e182330888d278335cf162bf7aa8480560d1d4c8a452"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0x2, 0xe612], "bcd7942aca9ddeda392bea2ad59e8b7d87e8f4ac8e1633a7791c021ff08cd781e7d10cc49b8f3f4ea469ea500d2c3900f92508b7e977c0b715f7a40c77ccb6cd811331a5df6645a8135ba15f01afafa6ae28594328a0e3641cb72b9d52a5107a1e2ef6a90fe325d16caa997b7704c3f0d18a37181964ecb0f7748177e4fa3a454e79ed2b0469"}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x3, 0x3, 0x1, 0x1, 0x1, 0x1}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x6, 0x3, 0x1, 0x1, 0x7, 0x9}, 0x2, {0xffff, 0x2, 0x3, 0x18, 0x1, 0x1}}}, {0x8, 0x6558, 0x8, "f94ff9992cdf4d8da02f2dd6657fede26e45b5dabd28bc21b12b364acebbbb6d205452a866ce506e88e1f36f26c295e672783dc7fa3c471dbbdc9795fac9ae0b816683dc7e87b7b7019e038985cb976119f10731ea16c0890692d4344097e786790bbe51ed404d39"}}}}}}, 0x13b4) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x90a}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20010000}, 0x800) r5 = fsopen(&(0x7f0000000180)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@usrquota}, {@errors_continue}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) rt_sigqueueinfo(r9, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) getdents64(r8, 0xfffffffffffffffe, 0x29) socket$inet6(0xa, 0x80001, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r10}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) r11 = fsmount(r5, 0x0, 0xf1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r11, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) fchdir(r11) r12 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400280, 0x0) fchown(r12, 0x0, 0x0) 5m37.932782978s ago: executing program 2 (id=893): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f0000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 5m37.549954705s ago: executing program 2 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a4000000000090002007379"], 0x159c}}, 0x40000) 5m37.532645536s ago: executing program 32 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a4000000000090002007379"], 0x159c}}, 0x40000) 3m54.378052309s ago: executing program 1 (id=2790): socket$netlink(0x10, 0x3, 0x10) r0 = open(0x0, 0x400, 0x1d2) dup3(r0, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000950000000000000026dab632b3c65e9b27b90c38ca4a55ff50dffff74d6d55c487ce78d1eb66ac839e8dfc3cac3c0058fb0e6a9f0fcd5cd5ced7687cba7cafd80927b986b578846f9e7d0f2bd0084467894bc5d4dddea012d842313cc702d11cc25ad92d00b02e7dcdbc9c02ed095c0680fc374946104fb247a8fba8ff02d1d63a082550a64e18a47226d2ca2ce8fae9d1423046e37807dadd366073588208c386"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r4, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 3m54.332150641s ago: executing program 1 (id=2792): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) mmap(&(0x7f000029a000/0x1000)=nil, 0x1000, 0x0, 0x4002011, r6, 0x0) r7 = fcntl$dupfd(r5, 0x0, r5) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x165000, 0x0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x21, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffff801}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xa4, &(0x7f0000000180)=""/164, 0x41100, 0x59, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0x2, 0x3, 0x3b}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r2, r2, r2, 0xffffffffffffffff, r2, r7, r2], &(0x7f00000005c0)=[{0x3, 0x3, 0x0, 0xc}, {0x5, 0x4, 0x6, 0x8}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 3m54.216527243s ago: executing program 1 (id=2793): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)="26388c", &(0x7f0000000140)=@udp6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") 3m53.83499316s ago: executing program 1 (id=2799): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x4, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x10, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000046, &(0x7f0000000940)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@resgid}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nomblk_io_submit}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x553, &(0x7f0000000a40)="$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") utime(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r6}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m53.388229529s ago: executing program 1 (id=2804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000003413e028d7bf5091f700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0xff00, 0x8000, 0x9, 0x6, {{0x1c, 0x4, 0x0, 0x3, 0x70, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @remote, {[@noop, @end, @rr={0x7, 0x1b, 0x20, [@private=0xa010101, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local]}, @end, @timestamp={0x44, 0x14, 0x98, 0x0, 0x3, [0x5, 0x7, 0xd7, 0x3]}, @timestamp_addr={0x44, 0xc, 0x97, 0x1, 0x6, [{@broadcast, 0x7}]}, @timestamp_prespec={0x44, 0xc, 0x59, 0x3, 0x8, [{@multicast2, 0x4}]}, @generic={0x88, 0x7, "b0d1e86f17"}, @lsrr={0x83, 0x7, 0xf7, [@loopback]}, @end]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @remote}, 0x63, r3}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x4, 0xfc, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000800)="2f653db1", 0x0, 0xffffffff, 0x0, 0x1, 0x0}) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94, 0x7}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 3m52.867902609s ago: executing program 1 (id=2809): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x61, 0x61]}}, 0x0, 0x1c, 0x0, 0x8}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa269862a395a8f3a08d8319cb600000000000007"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe69, 0xfffffffffffffdf1, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 3m52.867351649s ago: executing program 33 (id=2809): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x61, 0x61]}}, 0x0, 0x1c, 0x0, 0x8}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa269862a395a8f3a08d8319cb600000000000007"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe69, 0xfffffffffffffdf1, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 6.003962332s ago: executing program 0 (id=6339): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getpid() syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.983024502s ago: executing program 0 (id=6349): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000003b2db0f8423ec953a76ec8d038000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4004090) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r4, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/cgroup.procs\x00', 0x10400, 0x0) socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x81}, 0x100b28, 0x3, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) 4.09499791s ago: executing program 0 (id=6356): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000380)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@fat=@tz_utc}, {@shortname_win95}, {@rodir}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {}]}, 0x6, 0x2c2, &(0x7f0000000900)="$eJzs3UFrI2UYB/Bn0skkq4fk4EkEB/Tgadnu1UuK7ILYk0sO6kGL2wVpgtBCQQWznrx68eDBTyAIfhAvfgavgjdXWHhlJjObpBuyzbqpSH+/S5++ef8zz7wd2imlbz55bXpyv4wHaS9qnVGM4lEWw+hE62GsGH0XAMD/2aOU4s80t00ui4j+7toCAHbocj//80X5y5W0BQDs0L0PPnzv4PDwzvtl2Y+702/Px9Vv9tXH+esHD+KzmMRx3IpBPI6oHxS6UT8tVOXdlNIsLyvDeHM6Ox9XyenHvzbHP/gjos7vxyCG9dCTp406/+7hnf1ybik/q/p4qTn/qMrfjkG88iS8kr+9Jh/jIt56Y6n/mzGI3z6Nz2MS9+smFvmv98vynfT9X199VLVX5bPZ+bhXz1to/0ICAAAAAAAAAAAAAAAAAAAAAAD/3s1m75xe1Pv3VEPN/jt7j6tPulG2hqv788zzWXug5f2BUkqzFD+2++vcKssyNRMX+TxezZc3FgQAAAAAAAAAAAAAAAAAAIDr6+yLL0+OJpPj0xdStLsB5BHx972I5z3OaGnk9dg8udec82gy6TTl6px8eST22jlZxMY2qot43tXIY6trv/FUz03x08/bnr3/7Dnd9ed6IcWNqIv27jo5ytavYS/akX6zUD8UEYs5RVzypMXFkTSYHydt9SUo6iJ7GCs322DrRSherovZhjmRbWrs7d/nK9eMZBevoqhXdW282xRL8Qv3xqXu5+jP409/r8js1gEAAAAAAAAAAAAAAAAAADu1+O/fNS9+szHaSb2dtQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2rx/v9bFLMmfHx6lj9jchGnZ//xJQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAN/BMAAP//yChWqA==") prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f00000011c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "b537cb248aad679a227950fc4f6c288253a5da2eed9156884056037fcf5c3d66ed69178eba6d4bbfba761c73b42002ff89f60a8672efdcffc3b113da9d69802d", 0x3f}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r5, 0x0) 3.628317699s ago: executing program 3 (id=6367): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getpid() syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.093983229s ago: executing program 0 (id=6372): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000440)=@sr0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000004c0)={r4, 0xfff, 0x8ea}) 2.852245614s ago: executing program 0 (id=6376): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) 2.703547987s ago: executing program 0 (id=6377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='freezer.self_freezing\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r4, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x2a}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x3c}}, @NL80211_ATTR_PID={0x8, 0x52, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r9) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setsig(r10, 0xa, 0x13) fcntl$setlease(r10, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2.622233169s ago: executing program 3 (id=6380): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getpid() syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.614999139s ago: executing program 4 (id=6381): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x2a4, 0x30, 0x51b, 0x0, 0x0, {}, [{0x290, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xb1f9, 0x2, 0x4, 0xfffffffc, 0x4}, 0x2000000004}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x3}}}}, @m_csum={0x17c, 0x10, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x7, 0x8001, 0xfffffff0}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xdde, 0x10000000, 0xe63b, 0x1}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x2, 0x1, 0x81}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x8, 0x5, 0x8, 0x2874}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xd, 0x2, 0x5, 0x4}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x1, 0xf, 0xb3afdec}, 0x10}}]}, {0xa5, 0x6, "ba9f2b31d8999737fc2d9262988b0edcfbdc3d9a88ac91973266d84c3b65340baedf414deb85320c4fae1e443fb48afa2b3fc99b33b9c9ccffb50001fcd3f9fec5396df793f0c7e2e79c6c6b1f074e8126514f863999a3f9c907a77a91c1b3c8ac5f49d178f7468799b2f038343471997e01734ed8370edf72e8293651f8d3159277ac4104e40a2b6eaf21a7fe35b6e074a1ec7765f88b9bfdf3d6510548932c06"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xa4, 0x1b, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @TCA_IFE_TYPE={0x6, 0x5, 0x49f}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7f, 0x7fff, 0x20000000, 0x6, 0xc}}}]}, {0x4c, 0x6, "424271043e3526994161de824bc22eb3728afc8c820740867dae11d09aafa76223d7ce60c9e4b13cbc57797a0cef348c30460194c3b36f6ff306fe4efe3a105097e16e39f8b13419"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0xeed1bd769ea22d9c}, 0x0) 2.593899439s ago: executing program 4 (id=6382): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000003b2db0f8423ec953a76ec8d038000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4004090) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r4, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/cgroup.procs\x00', 0x10400, 0x0) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x81}, 0x100b28, 0x3, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r11, 0x5437, 0x2) connect$vsock_stream(r10, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r8}, 0xc) 2.446661312s ago: executing program 4 (id=6384): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@usrjquota}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x8950a4233d6ea0ee}, 0x24000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x8, 0x4) close_range(r1, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_adjtime(0x0, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0xffffffffda48a110, 0x7, 0x20000000089, 0x3, 0x6, 0x7ffffffe, 0x6, 0x801, 0x6, 0x2, 0x8001, 0xffffffffffffffff, 0x800001, 0x3, 0xc, 0x5, 0x200, 0xb9c, 0x2000000000011cb, 0xff, 0x40, 0xd}) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREAD(r2, &(0x7f0000000580)=ANY=[], 0xa0) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7fffeffd) 1.594530119s ago: executing program 3 (id=6387): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) 1.54474755s ago: executing program 3 (id=6389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 1.54404417s ago: executing program 4 (id=6390): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000003b2db0f8423ec953a76ec8d038000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4004090) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r4, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/cgroup.procs\x00', 0x10400, 0x0) socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x81}, 0x100b28, 0x3, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) 1.506168461s ago: executing program 3 (id=6392): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@usrjquota}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x8950a4233d6ea0ee}, 0x24000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x8, 0x4) close_range(r1, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0xffffffffda48a110, 0x7, 0x20000000089, 0x3, 0x6, 0x7ffffffe, 0x6, 0x801, 0x6, 0x2, 0x8001, 0xffffffffffffffff, 0x800001, 0x3, 0xc, 0x5, 0x200, 0xb9c, 0x2000000000011cb, 0xff, 0x40, 0xd}) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREAD(r2, &(0x7f0000000580)=ANY=[], 0xa0) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7fffeffd) 1.440155302s ago: executing program 6 (id=6395): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) acct(0x0) 1.406644443s ago: executing program 6 (id=6397): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000003b2db0f8423ec953a76ec8d038000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4004090) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r4, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/cgroup.procs\x00', 0x10400, 0x0) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x81}, 0x100b28, 0x3, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r10, 0x5437, 0x2) connect$vsock_stream(r9, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, {0xa, 0x4e22, 0x6fe3, @mcast2, 0x3d3}, 0x0, {[0xfffffffc, 0x8, 0x3, 0x9, 0xd6, 0x7ff, 0xbb23, 0x400]}}, 0x5c) 1.398186793s ago: executing program 4 (id=6398): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getpid() syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.246851636s ago: executing program 6 (id=6399): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@usrjquota}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="c4020000020201010000000000000000050000042c0002800c0002800500010006000000060003400000000006000340000200000c000280050001000100000028010a80080001400000000008000140000000015c000280140001800800010064010102080002007f0000010c00028005000100880000000c00028005000100880000002c00018014000300ff010000000000000000000000000001140004002001000000000000000000000000000208000140000000000800014000000000a00002800c000280050001002f000000060003400004000006000340000100000c00028005000100840000000c00028005000100110000002c00018014000300fc010000000000000000000000000000140004000000000000000000000000000000000006000340000000001400018008000100ac1414aa08000200ac1414301400018008000100e000000108000200000000000c0002800500010006000000080001400000000008000840000000020800084000000003fc00038014000180080001006401010108000200ffffffff06000340000300000c0002800500"], 0x2c4}, 0x1, 0x0, 0x0, 0x8950a4233d6ea0ee}, 0x24000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x8, 0x4) close_range(r1, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500fb870000000000001af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_adjtime(0x0, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0xffffffffda48a110, 0x7, 0x20000000089, 0x3, 0x6, 0x7ffffffe, 0x6, 0x801, 0x6, 0x2, 0x8001, 0xffffffffffffffff, 0x800001, 0x3, 0xc, 0x5, 0x200, 0xb9c, 0x2000000000011cb, 0xff, 0x40, 0xd}) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREAD(r2, &(0x7f0000000580)=ANY=[], 0xa0) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7fffeffd) 486.448611ms ago: executing program 4 (id=6401): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@usrjquota}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x8950a4233d6ea0ee}, 0x24000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x8, 0x4) close_range(r1, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_adjtime(0x0, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0xffffffffda48a110, 0x7, 0x20000000089, 0x3, 0x6, 0x7ffffffe, 0x6, 0x801, 0x6, 0x2, 0x8001, 0xffffffffffffffff, 0x800001, 0x3, 0xc, 0x5, 0x200, 0xb9c, 0x2000000000011cb, 0xff, 0x40, 0xd}) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREAD(r2, &(0x7f0000000580)=ANY=[], 0xa0) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7fffeffd) 415.879033ms ago: executing program 5 (id=6403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) fsetxattr$security_selinux(r1, &(0x7f00000002c0), &(0x7f0000000380)='system_u:object_r:policy_src_t:s0\x00', 0x22, 0x3) 367.542873ms ago: executing program 5 (id=6404): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket(0x2, 0x80805, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x2, 0x2}, 0x8, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xfd44) 317.988095ms ago: executing program 3 (id=6405): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000380)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@fat=@tz_utc}, {@shortname_win95}, {@rodir}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {}]}, 0x6, 0x2c2, &(0x7f0000000900)="$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") prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "b537cb248aad679a227950fc4f6c288253a5da2eed9156884056037fcf5c3d66ed69178eba6d4bbfba761c73b42002ff89f60a8672efdcffc3b113da9d69802d", 0x3f}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r5, 0x0) 303.669595ms ago: executing program 6 (id=6406): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x2a4, 0x30, 0x51b, 0x0, 0x0, {}, [{0x290, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xb1f9, 0x2, 0x4, 0xfffffffc, 0x4}, 0x2000000004}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x3}}}}, @m_csum={0x17c, 0x10, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x7, 0x8001, 0xfffffff0}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xdde, 0x10000000, 0xe63b, 0x1}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xb7, 0x7, 0x7, 0x385}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x8, 0x5, 0x8, 0x2874}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xd, 0x2, 0x5, 0x4}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x1, 0xf, 0xb3afdec}, 0x10}}]}, {0xa5, 0x6, "ba9f2b31d8999737fc2d9262988b0edcfbdc3d9a88ac91973266d84c3b65340baedf414deb85320c4fae1e443fb48afa2b3fc99b33b9c9ccffb50001fcd3f9fec5396df793f0c7e2e79c6c6b1f074e8126514f863999a3f9c907a77a91c1b3c8ac5f49d178f7468799b2f038343471997e01734ed8370edf72e8293651f8d3159277ac4104e40a2b6eaf21a7fe35b6e074a1ec7765f88b9bfdf3d6510548932c06"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xa4, 0x1b, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @TCA_IFE_TYPE={0x6, 0x5, 0x49f}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7f, 0x7fff, 0x20000000, 0x6, 0xc}}}]}, {0x4c, 0x6, "424271043e3526994161de824bc22eb3728afc8c820740867dae11d09aafa76223d7ce60c9e4b13cbc57797a0cef348c30460194c3b36f6ff306fe4efe3a105097e16e39f8b13419"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0xeed1bd769ea22d9c}, 0x0) 261.514005ms ago: executing program 5 (id=6407): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) acct(0x0) 231.018506ms ago: executing program 6 (id=6408): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume', 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000300)=[{&(0x7f0000001440)=""/4114, 0x1012}, {0x0}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000600000000000000fffa0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f0000000000000041e4b74f37e295e4feffffffffffffff02000000fcfffffd000000002abd70000435000002000100000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2844f1e, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x101}}, {@inlinecrypt}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x481, &(0x7f0000002480)="$eJzs3M1vFVUbAPBnph980768vK+CqCgxaTS2tKCycKPRxBiMJrrAZW0LabhQQ6sRJFKMwY2JIdG1Ma6M/gXujIlRVyZudePKkBBlA+jmmpk7U9rbe4Ha206lv19y23PunHvneTpfZ84ZCGDd2pv9SCK2RsTPEdHXqC5s0N0o/lWv169fOTuWRL3+8u9J3u7qlbNjZdPyc1uKykAakb6XFCtZaPr0meOjtdrEqaI+NHPi9aHp02ceffPE6LGJYxMnRw4dOnhg+InHRx7rSJ5ZXld3vzO1Z9dzr158YezIxde+/zKLd2uxfH4enbI3S/yPeq552UOdXlnFts0rJ90VBsKSdBWHd09+/PdFV9zYeH3x7LuVBgesqOzatKH94tk6cAdLouoIgGqUF/rs/rd8rVLXY024/FTjBijL+1rxaizpjrRo09N0f9tJeyPiyOyfn2SvWKFxCACA+T4Y+/hwb0S8ff2L57O+R9/ckjT+n//+Nf+5vZhD6Y+I/0TEjoj4b0TsjIj/ReRt74qIu5cZz+L+T3ppmV95U1n/78mIuLao/1f2/qK/q6hty/PvSY5O1ib2F3+TgejZkNWHb7KOr5/56cN2y+b3/7JXtv6yL1jEcam7aYBufHRmNO+UdsDl8xG7u1vln8zNBCQRsSsidi/tq7eXhcmHP9/TrtGt8y9sbvHhDswz1T/N0pvN8p+NpvxLyfz5yclF85NDG6M2sX+o3CsW++HHCy+1W/9t579CLk80fs/b/s1N+pP587XTS1/HhV/eb3tP8w/3/7Q3eSWfZ+4t3ntrdGbm1HBEb3I4ry94f+TGZ8t62T7b/wf2tT7+dxSfyfK/JyKynfjeiLgvIu4vYn8gIh6MiH03yf+7p9svK/OPtKLtfz5ivOX5b27/b9r+Sy90Hf/2q3brv73tfzAvDRTv5Oe/W2gVTna6aA5wOX87AAAA+LdI82fgk3Rwrpymg4ONZ/h3xua0NjU988jRqTdOjjeele+PnrQc6eorxkNrk7WJ4WS2+MbG+OhIMVZcjpceKMaNP+ralNcHx6Zq4xXnDuvdljbHf+a3rqqjA1bYppbvjvSueiBABZrn0dOF1XMvhpMB3Km6r1YdAVCVWzxHl65WHMDq8/+1wPrV6vg/11Q3FwB3Jtd/WJc+C8c/rF/pN1VHAFTI9R/WpeX8u/4VLGxcG2FUU1irGyUvRJSFdE3Eo7BCharPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//dCfrZQ==") r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r8, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000007102a00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 227.886526ms ago: executing program 5 (id=6409): socket$inet6_sctp(0xa, 0x1, 0x84) creat(&(0x7f00000000c0)='./file0\x00', 0xce) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000c80)='./file1\x00', 0x10804, &(0x7f00000005c0)={[{@data_err_abort}, {@journal_async_commit}, {@grpjquota}, {@i_version}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x7}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'norecovery'}}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'i_version'}}]}, 0xfc, 0x572, &(0x7f0000000e40)="$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") setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x14d, 0x5}, {0x10000, 0x1}]}, 0x14, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r5, &(0x7f00000013c0)="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", 0xfffffffffffffddb, 0x6d91fb6122d80188, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000a80), 0x0, 0x4000801) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, &(0x7f0000000380), 0x0}, 0x20) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r7) 85.453209ms ago: executing program 5 (id=6410): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x2, 0x2}, 0x8, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0}) 37.6786ms ago: executing program 5 (id=6411): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="cc400000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf250800000008000200080000000800030005000000050005008300000008000300000000001c000180060005004e240000060001000200000005000200000000002c00068008000300ac1414bb060001000a000000050002005c00000008000700", @ANYRES32=0x0, @ANYBLOB="080006000e0000000800040001000000480006800800030064010100080006001000000014000400fe8000000000000000000000000000bb080007", @ANYRES32=0x0, @ANYBLOB="0600010002000000080003000a010100060005004e230000"], 0xcc}, 0x1, 0x0, 0x0, 0x400c0d5}, 0x800) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000004004b64000f0000009502c746f000f7a04e8bca2691bd8d1fe1841eb845ac4cfc7a7391a2668822412ace83f85f3575587ec6fe0ef4c9d2030094ffd2499e40e9f65340c1fc717bd26a33ba6b5b413b59b1bd65fb2c126f4116a12b6d16d4203eb9ab9d2f3a1a32697b909bc66248643831b8084154c6b1c0a3d1eaa13fb6fa344cf515c43f46a33e851f28298772e0328504388e4ee0437ef04de45084cdb62a33a24a206b35692a668cd2014630add89b93649f6dea04db6e219a6c82bfbaaa58fdb2f5382249780d80a58670c76a03bb5e6097ef14652d9dbfc6006a90a08c7ef2b10a4dc3ab2099e119c98588abc5079a7ae5f341908442bd2085867ad214454e0e2d85f8dd460414f6c93d4be443701fd80fb81d431421a5ce"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f00000005c0)="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") r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000700000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) syz_read_part_table(0x104d, &(0x7f0000001080)="$eJzszzEKwjAUBuBUY9FJj2BnT1F3x95HPImLi4c0ktcIXkCw8H1DXn5C/pDEP9i22ceaW9p3rzLbRB7W7aCUeV6Pw3265Xp/19WO8ZAe51MUfCrT2H+/VJtWsbvkND1//TEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWIJ3AAAA///ZrQ+k") sendfile(r6, r7, 0x0, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0xc7, 0x0, 0x0, 0x0, 0x6, 0x510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r6, 0x0) r10 = semget(0x3, 0x0, 0x482) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000240)=[0x401, 0x0, 0x180, 0x4, 0x7]) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf2502000900080000ff070000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000"], 0x80}, 0x1, 0x7}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1ff, @mcast1, 0xfffffffc}, 0x1c) 0s ago: executing program 6 (id=6412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$tipc(r1, &(0x7f0000000300)=@name, &(0x7f0000000340)=0x10, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) memfd_create(&(0x7f00000001c0)='\x00', 0x6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e000000080005", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r8, 0x400, 0x0) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r9, 0x400, 0x0) fcntl$setlease(r9, 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x470, 0x3f4, 0x100, 0x70bd2c, 0x25dfdbfc, {0x3, 0x2, 0x2a, [0x3, 0x4, 0x8, 0x9, 0xfff, 0xb, 0x6, 0x9, 0x9, 0x9, 0x4, 0x8, 0x0, 0x1, 0x2, 0x6, 0x8, 0x8f8c, 0x7744, 0x5, 0x8000, 0xb6, 0x5, 0x0, 0xf, 0x39, 0x8, 0x4, 0x4cdf, 0x7, 0x3, 0x8, 0x6, 0x3, 0x80000000, 0x6, 0xac0, 0x8, 0x1000, 0x0, 0x4, 0x2, 0x8, 0x9, 0xfffffc80, 0x101, 0x1, 0x7adc, 0x4, 0x3, 0xfffffffe, 0x51, 0x5, 0x800, 0xaeda, 0xffc00, 0xa, 0x6, 0x80, 0x81, 0x1, 0xc, 0x7, 0x4], [0xd, 0x9, 0xa3b1, 0x4, 0xcb, 0x9, 0x1, 0xc7, 0x84b, 0x4, 0x1, 0x8, 0x10000000, 0x10, 0x9, 0x6, 0x7, 0x4d, 0x8, 0x1, 0x7, 0x0, 0x2, 0x1, 0x998, 0xffff, 0x1000, 0x2, 0x6, 0x1, 0xaed1, 0x9, 0x3, 0xc84, 0x2, 0x8, 0xde5, 0x19, 0x6, 0x8000, 0x9, 0xfffffff8, 0x3, 0x5, 0x8000, 0xffffffff, 0x7, 0xfff, 0x298, 0x3, 0x3, 0x9, 0x8, 0xeb, 0xfff, 0x848d, 0x8, 0x80, 0x2, 0x10001, 0x6, 0x0, 0x3, 0x1], [0x2, 0x8, 0x0, 0x3, 0x7, 0x7, 0x9, 0xc, 0xb, 0x980, 0x3, 0x9, 0x7, 0x100, 0xe, 0x9, 0x7f, 0x573, 0x5, 0x6, 0xf, 0x7, 0xffffff01, 0xf, 0x5, 0x8, 0x2, 0x1000, 0xffff, 0x7, 0x800, 0x6, 0xe, 0xb61c, 0x8, 0xe5a, 0x6, 0x4, 0x9, 0x8, 0x1924, 0x5, 0x3, 0x1, 0xfffffffb, 0x2, 0x9, 0x9, 0x6, 0x5, 0x3, 0xa06e, 0x5, 0x7, 0x16, 0x3, 0x80000001, 0x7fffffff, 0x1, 0xdc1, 0x2, 0x9, 0x1], [0xffff, 0x6dc2, 0x200, 0x9, 0x0, 0x2, 0x80000001, 0x8, 0x5, 0x2aa6, 0xc9, 0x2cc86698, 0x4, 0x7, 0xb83f, 0x5, 0x5, 0x9, 0x1, 0x400, 0x9, 0x1000, 0x90a9, 0xffff, 0x5, 0x4, 0x3ff, 0x8, 0x99, 0xa, 0x7, 0x100, 0x85, 0x98f3, 0x5968, 0x9, 0x2, 0x10000, 0x0, 0x7fffffff, 0x4, 0x1ce, 0x10, 0x2, 0x4, 0x3, 0x7, 0x45eb, 0x1000, 0x9, 0x1, 0x7, 0x8, 0xfffffffe, 0x1, 0x5, 0x8, 0x9, 0x6b6, 0x2, 0x10001, 0x910, 0xfed7, 0x401], 0x4e, ['veth1_to_hsr\x00', 'veth1_to_hsr\x00', ',-*{.-.@&{@&\xcc+@:$\'/!\x00', '$\x00', '[\x00', '\x99-\x00', '/-\x00', '%:[-*\x00', '\x00', ':)(-+{!+()$[$\x00']}, ["", "", "", "", "", "", ""]}, 0x470}, 0x1, 0x0, 0x0, 0x4}, 0x4080081) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x74, r10, {}, {0x0, 0x1}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) kernel console output (not intermixed with test programs): 373.527498][T19582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5591'. [ 373.544480][T19582] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.573768][T19586] netlink: 'syz.0.5593': attribute type 10 has an invalid length. [ 373.596196][T19582] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.612090][T19591] loop0: detected capacity change from 0 to 256 [ 373.667131][T19582] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.700447][T19596] loop4: detected capacity change from 0 to 8192 [ 373.725844][T19582] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.734507][T19596] loop4: p1[EZD] p2 p4 [ 373.740169][T19596] loop4: p1 start 150996992 is beyond EOD, truncated [ 373.747548][T19596] loop4: p4 size 281856 extends beyond EOD, truncated [ 373.779895][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.790420][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.801715][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.813239][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.839529][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5597'. [ 373.848698][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5597'. [ 373.881001][T19600] tipc: Started in network mode [ 373.885996][T19600] tipc: Node identity ac14140f, cluster identity 4711 [ 373.893026][T19600] tipc: New replicast peer: 255.255.255.255 [ 373.899093][T19600] tipc: Enabled bearer , priority 10 [ 373.920103][T19602] loop3: detected capacity change from 0 to 512 [ 373.926925][T19602] EXT4-fs: Ignoring removed mblk_io_submit option [ 373.933591][T19602] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 373.944929][T19602] EXT4-fs (loop3): 1 truncate cleaned up [ 374.404182][ T3406] tipc: Node number set to 2886997007 [ 374.605338][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5608'. [ 374.614386][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5608'. [ 374.629443][T19615] netlink: 'syz.4.5604': attribute type 10 has an invalid length. [ 374.639853][T19622] loop6: detected capacity change from 0 to 164 [ 374.773931][T19633] loop6: detected capacity change from 0 to 256 [ 374.891470][T19643] loop3: detected capacity change from 0 to 8192 [ 374.898020][ T3409] tipc: Node number set to 2886997007 [ 374.944683][T19643] loop3: p1[EZD] p2 p4 [ 374.948979][T19643] loop3: p1 start 150996992 is beyond EOD, truncated [ 374.956337][T19643] loop3: p4 size 281856 extends beyond EOD, truncated [ 375.533368][T19649] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5616'. [ 375.543869][T19649] tipc: New replicast peer: 255.255.255.255 [ 375.550124][T19649] tipc: Enabled bearer , priority 10 [ 375.586793][T19655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5619'. [ 375.604146][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 375.604164][ T29] audit: type=1326 audit(1759029382.433:28120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19656 comm="syz.0.5620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 375.637274][ T29] audit: type=1326 audit(1759029382.443:28122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19656 comm="syz.0.5620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 375.661104][ T29] audit: type=1326 audit(1759029382.433:28121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.6.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433c39eec9 code=0x7ffc0000 [ 375.684830][ T29] audit: type=1326 audit(1759029382.473:28123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.6.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f433c39eec9 code=0x7ffc0000 [ 375.708468][ T29] audit: type=1326 audit(1759029382.473:28124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.6.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433c39eec9 code=0x7ffc0000 [ 375.732240][ T29] audit: type=1326 audit(1759029382.473:28125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.6.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f433c39eec9 code=0x7ffc0000 [ 375.756142][ T29] audit: type=1326 audit(1759029382.473:28126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.6.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433c39eec9 code=0x7ffc0000 [ 375.779784][ T29] audit: type=1326 audit(1759029382.473:28127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.6.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f433c39eec9 code=0x7ffc0000 [ 375.803363][ T29] audit: type=1326 audit(1759029382.473:28128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.6.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433c39eec9 code=0x7ffc0000 [ 375.827158][ T29] audit: type=1326 audit(1759029382.473:28129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.6.5619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433c39eec9 code=0x7ffc0000 [ 376.099781][T19675] loop0: detected capacity change from 0 to 256 [ 376.301477][T19689] loop0: detected capacity change from 0 to 8192 [ 376.344523][T19689] loop0: p1[EZD] p2 p4 [ 376.348853][T19689] loop0: p1 start 150996992 is beyond EOD, truncated [ 376.356057][T19689] loop0: p4 size 281856 extends beyond EOD, truncated [ 376.398781][T19652] delete_channel: no stack [ 376.664125][ T36] tipc: Node number set to 2805845018 [ 376.749296][T19671] delete_channel: no stack [ 377.129835][T19711] loop6: detected capacity change from 0 to 256 [ 377.152636][T19713] loop0: detected capacity change from 0 to 512 [ 377.160572][T19713] EXT4-fs: Ignoring removed mblk_io_submit option [ 377.168680][T19713] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 377.183983][T19718] loop4: detected capacity change from 0 to 512 [ 377.193032][T19713] EXT4-fs (loop0): 1 truncate cleaned up [ 377.192971][T19718] EXT4-fs: Ignoring removed mblk_io_submit option [ 377.194158][T19718] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 377.219378][T19718] EXT4-fs (loop4): 1 truncate cleaned up [ 377.376498][T19728] loop6: detected capacity change from 0 to 512 [ 377.383171][T19728] EXT4-fs: Ignoring removed mblk_io_submit option [ 377.417275][T19728] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 377.459437][T19728] EXT4-fs (loop6): 1 truncate cleaned up [ 378.306094][T19735] loop4: detected capacity change from 0 to 8192 [ 378.316191][T19739] __nla_validate_parse: 3 callbacks suppressed [ 378.316211][T19739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5652'. [ 378.334339][T19739] tipc: Enabling of bearer rejected, already enabled [ 378.360083][T19735] loop4: p1[EZD] p2 p4 [ 378.364392][T19735] loop4: p1 start 150996992 is beyond EOD, truncated [ 378.374676][T19735] loop4: p4 size 281856 extends beyond EOD, truncated [ 378.376009][T19747] loop6: detected capacity change from 0 to 512 [ 378.389423][T19747] EXT4-fs: Ignoring removed mblk_io_submit option [ 378.396393][T19747] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 378.407478][T19747] EXT4-fs (loop6): 1 truncate cleaned up [ 378.441268][T19750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5657'. [ 378.598242][T19756] bond1: entered promiscuous mode [ 378.603452][T19756] bond1: entered allmulticast mode [ 378.609114][T19756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.621716][T19756] bond1 (unregistering): Released all slaves [ 378.648493][ T3406] Process accounting resumed [ 378.798102][T19768] loop5: detected capacity change from 0 to 1024 [ 378.805454][T19768] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 378.877355][T19773] loop5: detected capacity change from 0 to 256 [ 378.940583][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5668'. [ 379.017129][T19779] loop3: detected capacity change from 0 to 1024 [ 379.095215][T19779] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 379.124952][T19792] netlink: 'syz.4.5672': attribute type 10 has an invalid length. [ 379.137661][T19792] loop4: detected capacity change from 0 to 512 [ 379.239522][T19797] loop3: detected capacity change from 0 to 1024 [ 379.247385][T11694] EXT4-fs unmount: 27 callbacks suppressed [ 379.247398][T11694] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.276187][T19797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.355164][T19812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5684'. [ 379.364280][T19812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5684'. [ 379.439228][T19807] loop5: detected capacity change from 0 to 512 [ 379.457053][T19807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.467877][T19825] loop6: detected capacity change from 0 to 1024 [ 379.469760][T19807] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.487747][T19825] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 379.548271][T15161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.550837][T19828] loop6: detected capacity change from 0 to 512 [ 379.564028][T19828] EXT4-fs: Ignoring removed mblk_io_submit option [ 379.570801][T19828] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 379.592531][T19828] EXT4-fs (loop6): 1 truncate cleaned up [ 379.599279][T19828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.673940][T19840] netlink: 'syz.5.5689': attribute type 10 has an invalid length. [ 379.685350][T19840] loop5: detected capacity change from 0 to 512 [ 379.788021][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5695'. [ 379.797052][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5695'. [ 379.922336][T19854] loop5: detected capacity change from 0 to 1024 [ 379.931756][T19854] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 379.979614][T19857] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5700'. [ 379.993516][T19857] tipc: Enabling of bearer rejected, already enabled [ 380.054651][T19861] loop5: detected capacity change from 0 to 164 [ 380.087452][T12482] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.106436][T19798] delete_channel: no stack [ 380.133442][T19866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5704'. [ 380.148820][T19866] tipc: Enabling of bearer rejected, already enabled [ 380.184569][T19869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5706'. [ 380.221967][T19870] netlink: 'syz.5.5705': attribute type 10 has an invalid length. [ 380.222957][T19869] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.246486][T19867] loop5: detected capacity change from 0 to 512 [ 380.285941][T19869] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.376016][T19869] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.420294][T11694] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.436162][T19869] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.490923][T19879] loop5: detected capacity change from 0 to 1024 [ 380.499167][T19879] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 380.562203][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.577796][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.592529][T19885] tipc: Enabling of bearer rejected, already enabled [ 380.602156][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.610791][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.647094][T19889] loop3: detected capacity change from 0 to 1024 [ 380.664197][T19883] lo speed is unknown, defaulting to 1000 [ 380.665703][T19891] loop0: detected capacity change from 0 to 164 [ 380.684608][ T29] kauditd_printk_skb: 938 callbacks suppressed [ 380.684628][ T29] audit: type=1326 audit(1759029387.523:29068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.5.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 380.721417][ T29] audit: type=1326 audit(1759029387.553:29069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.5.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 380.745210][ T29] audit: type=1326 audit(1759029387.553:29070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.5.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 380.769083][ T29] audit: type=1326 audit(1759029387.553:29071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.5.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 380.792918][ T29] audit: type=1326 audit(1759029387.553:29072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.5.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 380.794220][T19889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.816757][ T29] audit: type=1326 audit(1759029387.553:29073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.5.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 380.877974][T19899] netlink: 'syz.5.5717': attribute type 10 has an invalid length. [ 380.881159][T19901] loop0: detected capacity change from 0 to 512 [ 380.892694][T19901] EXT4-fs: Ignoring removed mblk_io_submit option [ 380.902884][T19901] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 380.914689][T19901] EXT4-fs (loop0): 1 truncate cleaned up [ 380.920771][T19901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.319078][T19911] loop5: detected capacity change from 0 to 1024 [ 381.327630][T19911] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 381.329731][ T29] audit: type=1326 audit(1759029388.143:29074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 381.359558][ T29] audit: type=1326 audit(1759029388.143:29075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 381.383405][ T29] audit: type=1326 audit(1759029388.143:29076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 381.407174][ T29] audit: type=1326 audit(1759029388.143:29077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 381.478008][T12482] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.521848][T19923] tipc: Enabling of bearer rejected, already enabled [ 381.564396][T19927] bond5: entered promiscuous mode [ 381.569640][T19927] bond5: entered allmulticast mode [ 381.575516][T19927] 8021q: adding VLAN 0 to HW filter on device bond5 [ 381.597542][T19927] bond5 (unregistering): Released all slaves [ 381.615718][ T3364] Process accounting resumed [ 381.725430][T12036] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.775433][T19936] netlink: 'syz.3.5729': attribute type 10 has an invalid length. [ 381.898114][T19945] loop3: detected capacity change from 0 to 512 [ 381.905992][T19945] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.912857][T19945] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 381.924208][T19945] EXT4-fs (loop3): 1 truncate cleaned up [ 381.931327][T19945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.961948][T19948] loop0: detected capacity change from 0 to 1024 [ 381.969217][T19948] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 382.020503][T19952] loop0: detected capacity change from 0 to 1024 [ 382.037836][T19952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.319524][T19963] tipc: Enabling of bearer rejected, already enabled [ 382.352462][T19967] loop6: detected capacity change from 0 to 512 [ 382.359863][T19967] EXT4-fs: Ignoring removed mblk_io_submit option [ 382.367103][T19967] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 382.381130][T19967] EXT4-fs (loop6): 1 truncate cleaned up [ 382.388837][T19967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.415762][T19969] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.455970][T19969] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.510889][T19969] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.565717][T19969] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.633451][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.660793][ T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.670163][ T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.685971][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.767791][T12482] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.803027][T19979] loop3: detected capacity change from 0 to 1024 [ 382.810340][T19979] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 382.867322][T12036] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.958480][T19995] tipc: Enabling of bearer rejected, already enabled [ 383.037670][T20002] loop4: detected capacity change from 0 to 512 [ 383.056844][T20002] EXT4-fs: Ignoring removed mblk_io_submit option [ 383.066138][T20002] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 383.079718][T20002] EXT4-fs (loop4): 1 truncate cleaned up [ 383.089427][T20002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.101003][T20006] loop0: detected capacity change from 0 to 1024 [ 383.110554][T20006] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 383.195870][T20010] loop0: detected capacity change from 0 to 1024 [ 383.207402][T20010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.239561][T11694] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.243553][T19971] delete_channel: no stack [ 383.482060][T20017] lo speed is unknown, defaulting to 1000 [ 383.492569][ T12] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.539888][ T12] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.593083][ T12] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.608260][T20017] chnl_net:caif_netlink_parms(): no params data found [ 383.644266][ T12] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.668043][T20017] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.675262][T20017] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.682544][T20017] bridge_slave_0: entered allmulticast mode [ 383.689308][T20017] bridge_slave_0: entered promiscuous mode [ 383.696211][T20017] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.703378][T20017] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.710649][T20017] bridge_slave_1: entered allmulticast mode [ 383.717934][T20017] bridge_slave_1: entered promiscuous mode [ 383.801529][T20034] __nla_validate_parse: 5 callbacks suppressed [ 383.801549][T20034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5761'. [ 383.900290][T12191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.940245][T20041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5763'. [ 383.949940][T20038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5761'. [ 384.017456][ T12] bond0 (unregistering): Released all slaves [ 384.024508][T12036] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.027466][ T12] bond1 (unregistering): Released all slaves [ 384.042921][ T12] bond2 (unregistering): Released all slaves [ 384.052312][ T12] bond3 (unregistering): Released all slaves [ 384.053278][T20045] loop0: detected capacity change from 0 to 512 [ 384.066695][T20045] EXT4-fs: Ignoring removed mblk_io_submit option [ 384.073414][T20045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 384.085020][T20017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.091620][T20045] EXT4-fs (loop0): 1 truncate cleaned up [ 384.098671][T20017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.111624][T20045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.123815][ T12] tipc: Disabling bearer [ 384.128896][ T12] tipc: Left network mode [ 384.162141][T20017] team0: Port device team_slave_0 added [ 384.172486][T20017] team0: Port device team_slave_1 added [ 384.203866][T20017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.210948][T20017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.237039][T20017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.249088][T20017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.256156][T20017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.282410][T20017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.300527][ T12] hsr_slave_0: left promiscuous mode [ 384.308356][ T12] veth1_macvtap: left promiscuous mode [ 384.313862][ T12] veth0_macvtap: left promiscuous mode [ 384.319452][ T12] veth1_vlan: left promiscuous mode [ 384.324784][ T12] veth0_vlan: left promiscuous mode [ 384.437446][T20054] loop4: detected capacity change from 0 to 1024 [ 384.444436][T20054] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 384.475522][T20017] hsr_slave_0: entered promiscuous mode [ 384.482050][T20017] hsr_slave_1: entered promiscuous mode [ 384.507944][T20017] debugfs: 'hsr0' already exists in 'hsr' [ 384.513738][T20017] Cannot create hsr debugfs directory [ 384.514032][T20057] loop4: detected capacity change from 0 to 512 [ 384.526881][T20057] EXT4-fs: Ignoring removed mblk_io_submit option [ 384.535044][T20057] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 384.558043][T20057] EXT4-fs (loop4): 1 truncate cleaned up [ 384.564219][T20057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.883976][T20017] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 384.896851][T20017] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 384.908682][T20017] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 384.918317][T20017] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 384.979525][T20017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.014237][T20017] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.029579][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.036727][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.048360][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.055479][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.072697][T20017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.083152][T20017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.111872][T12036] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.200462][T20017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.247587][T20081] loop0: detected capacity change from 0 to 512 [ 385.254435][T20081] EXT4-fs: Ignoring removed mblk_io_submit option [ 385.264143][T20081] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 385.279241][T20081] EXT4-fs (loop0): 1 truncate cleaned up [ 385.285412][T20081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.382996][T12191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.437696][T20094] loop5: detected capacity change from 0 to 1024 [ 385.533172][T20094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.542815][T20017] veth0_vlan: entered promiscuous mode [ 385.719518][T20103] lo speed is unknown, defaulting to 1000 [ 385.855563][T20017] veth1_vlan: entered promiscuous mode [ 385.872925][T20017] veth0_macvtap: entered promiscuous mode [ 385.917950][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 385.917968][ T29] audit: type=1326 audit(1759029392.753:29479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.3.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 385.976735][T20017] veth1_macvtap: entered promiscuous mode [ 385.982454][ T29] audit: type=1326 audit(1759029392.783:29480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.3.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 386.006159][ T29] audit: type=1326 audit(1759029392.783:29481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.3.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 386.028479][T20017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.029935][ T29] audit: type=1326 audit(1759029392.783:29482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.3.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 386.041624][T20017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.060679][ T29] audit: type=1326 audit(1759029392.783:29483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.3.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 386.060720][ T29] audit: type=1326 audit(1759029392.783:29484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.3.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 386.076337][ T3431] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.091628][ T29] audit: type=1326 audit(1759029392.793:29485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.3.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 386.147507][ T29] audit: type=1326 audit(1759029392.793:29486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.3.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 386.171151][ T29] audit: type=1326 audit(1759029392.793:29487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.3.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 386.195036][ T29] audit: type=1326 audit(1759029392.793:29488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20101 comm="syz.3.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 386.222054][T12036] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.226229][ T3431] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.269033][ T3431] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.299687][ T3431] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.302383][T20110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5776'. [ 386.324795][T15161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.350791][T20110] tipc: Enabling of bearer rejected, already enabled [ 386.411725][T20116] loop5: detected capacity change from 0 to 1024 [ 386.419571][T20116] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 386.606281][T20139] loop3: detected capacity change from 0 to 1024 [ 386.761225][T20143] lo speed is unknown, defaulting to 1000 [ 386.916787][T20139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.066614][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5788'. [ 387.107039][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5788'. [ 387.303546][T20125] delete_channel: no stack [ 387.441282][T12482] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.475189][T20161] loop4: detected capacity change from 0 to 512 [ 387.496026][T20163] loop3: detected capacity change from 0 to 1024 [ 387.503441][T20163] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 387.622098][T20165] lo speed is unknown, defaulting to 1000 [ 387.774735][T20161] EXT4-fs: Ignoring removed mblk_io_submit option [ 387.790328][T20161] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 387.832223][T20161] EXT4-fs (loop4): 1 truncate cleaned up [ 387.839766][T20161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.915814][T20172] bond1: entered promiscuous mode [ 387.920903][T20172] bond1: entered allmulticast mode [ 387.927249][T20172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.938235][T20172] bond1 (unregistering): Released all slaves [ 387.969117][ T3364] Process accounting resumed [ 388.003936][T20179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5798'. [ 388.038149][T20179] tipc: Enabling of bearer rejected, already enabled [ 388.271611][T20194] loop0: detected capacity change from 0 to 1024 [ 388.287820][T20194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.434029][T12191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.501321][T20210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5806'. [ 388.528570][T20210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5806'. [ 388.955008][T20219] loop3: detected capacity change from 0 to 256 [ 388.967582][T20220] bond1: entered promiscuous mode [ 388.972703][T20220] bond1: entered allmulticast mode [ 388.978259][T20220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.988047][T20220] bond1 (unregistering): Released all slaves [ 389.010674][ T3395] Process accounting resumed [ 389.080041][T20229] tipc: Enabling of bearer rejected, already enabled [ 389.107885][T12036] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.137847][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5816'. [ 389.146845][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5816'. [ 389.210411][T20247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5821'. [ 389.227804][T20249] bond1: entered promiscuous mode [ 389.233072][T20249] bond1: entered allmulticast mode [ 389.238583][T20249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.249351][T20249] bond1 (unregistering): Released all slaves [ 389.277234][T20247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5821'. [ 389.288089][ T3388] Process accounting resumed [ 389.319539][T20259] loop5: detected capacity change from 0 to 1024 [ 389.345921][T20259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.419576][T20261] batadv_slave_0: entered promiscuous mode [ 389.513878][T20269] loop6: detected capacity change from 0 to 1024 [ 389.521035][T20269] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 389.579219][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5830'. [ 389.588255][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5830'. [ 389.737798][T20283] loop6: detected capacity change from 0 to 8192 [ 389.900007][T20285] lo speed is unknown, defaulting to 1000 [ 390.089953][T20283] loop6: p1[EZD] p2 p4 [ 390.127205][T20283] loop6: p1 start 150996992 is beyond EOD, truncated [ 390.297157][T20283] loop6: p4 size 281856 extends beyond EOD, truncated [ 390.312389][T15161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.340745][T20292] loop4: detected capacity change from 0 to 512 [ 390.357462][T20292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.370127][T20292] ext4 filesystem being mounted at /568/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 390.549666][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5844'. [ 390.558628][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5844'. [ 390.612771][T20320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5847'. [ 390.629770][T20320] xt_time: unknown flags 0xf4 [ 390.680110][T20322] loop6: detected capacity change from 0 to 8192 [ 390.745454][T20322] loop6: p1 p2 < > p3 p4 < p5 > [ 390.750473][T20322] loop6: partition table partially beyond EOD, truncated [ 390.757783][T20322] loop6: p1 size 100663296 extends beyond EOD, truncated [ 390.814821][T20322] loop6: p2 start 591104 is beyond EOD, truncated [ 390.821328][T20322] loop6: p3 start 33572980 is beyond EOD, truncated [ 390.831257][T20322] loop6: p5 size 100663296 extends beyond EOD, truncated [ 391.039819][T20339] lo speed is unknown, defaulting to 1000 [ 391.152259][T12191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.226846][T20299] delete_channel: no stack [ 391.689428][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 391.689444][ T29] audit: type=1326 audit(1759029398.523:30007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.0.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 391.725687][ T29] audit: type=1326 audit(1759029398.553:30008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.0.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 391.749427][ T29] audit: type=1326 audit(1759029398.553:30009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.0.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 391.773051][ T29] audit: type=1326 audit(1759029398.553:30010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.0.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 391.796698][ T29] audit: type=1326 audit(1759029398.553:30011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.0.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 391.820443][ T29] audit: type=1326 audit(1759029398.553:30012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.0.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 391.844155][ T29] audit: type=1326 audit(1759029398.553:30013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.0.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 391.867857][ T29] audit: type=1326 audit(1759029398.553:30014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.0.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 391.891451][ T29] audit: type=1326 audit(1759029398.553:30015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.0.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 391.915277][ T29] audit: type=1326 audit(1759029398.553:30016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.0.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 391.949935][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5859'. [ 392.042139][T20358] bond2: entered promiscuous mode [ 392.047345][T20358] bond2: entered allmulticast mode [ 392.067455][T20358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.085831][T20358] bond2 (unregistering): Released all slaves [ 392.217980][T20367] netlink: 'syz.4.5864': attribute type 10 has an invalid length. [ 392.229176][T20367] loop4: detected capacity change from 0 to 512 [ 392.252812][T20370] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.308377][T20370] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.391990][T20384] loop4: detected capacity change from 0 to 1024 [ 392.399147][T20384] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 392.411405][T20370] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.459754][T20370] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.524025][T20291] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.532569][T20291] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.533237][T20395] loop4: detected capacity change from 0 to 512 [ 392.547983][T20395] EXT4-fs: Ignoring removed mblk_io_submit option [ 392.555463][T20395] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 392.555531][T20291] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.573919][T20291] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.583363][T20395] EXT4-fs (loop4): 1 truncate cleaned up [ 392.589783][T20395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.625263][T20401] bond1: entered promiscuous mode [ 392.630358][T20401] bond1: entered allmulticast mode [ 392.638705][T20401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.651114][T20401] bond1 (unregistering): Released all slaves [ 393.136496][T20416] loop6: detected capacity change from 0 to 512 [ 393.147446][T20416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.160209][T20416] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 393.315549][T20425] netlink: 'syz.3.5881': attribute type 10 has an invalid length. [ 393.328361][T20425] loop3: detected capacity change from 0 to 512 [ 393.390511][T12191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.479843][T20437] bond5: entered promiscuous mode [ 393.485244][T20437] bond5: entered allmulticast mode [ 393.490646][T20437] 8021q: adding VLAN 0 to HW filter on device bond5 [ 393.507795][T20437] bond5 (unregistering): Released all slaves [ 393.525000][ T3409] Process accounting resumed [ 393.788410][T20457] netlink: 'syz.5.5893': attribute type 10 has an invalid length. [ 393.799024][T20457] loop5: detected capacity change from 0 to 512 [ 393.853944][T20017] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.980719][T20479] loop0: detected capacity change from 0 to 764 [ 393.987500][T20479] iso9660: Unknown parameter '' [ 394.043589][T20479] tipc: Enabled bearer , priority 0 [ 394.057918][T20478] tipc: Resetting bearer [ 394.085052][T20478] tipc: Disabling bearer [ 394.125425][T20486] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.276065][T20486] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.329142][T20491] loop0: detected capacity change from 0 to 512 [ 394.337556][T20486] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.358349][T20491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.384400][T20491] ext4 filesystem being mounted at /584/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.415885][T20486] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.431472][T20494] bridge1: entered promiscuous mode [ 394.452688][ T4085] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.464300][T20291] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.498619][T20291] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.514079][T20291] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.605801][T20458] delete_channel: no stack [ 394.659607][T20500] loop3: detected capacity change from 0 to 8192 [ 394.683578][T20499] loop5: detected capacity change from 0 to 8192 [ 394.704489][T20500] loop3: p1[EZD] p2 p4 [ 394.708728][T20500] loop3: p1 start 150996992 is beyond EOD, truncated [ 394.724276][T20499] loop5: p1[EZD] p2 p4 [ 394.728609][T20499] loop5: p1 start 150996992 is beyond EOD, truncated [ 394.735716][T20500] loop3: p4 size 281856 extends beyond EOD, truncated [ 394.736116][T20499] loop5: p4 size 281856 extends beyond EOD, truncated [ 394.989029][T20505] __nla_validate_parse: 20 callbacks suppressed [ 394.989047][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5909'. [ 395.004321][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5909'. [ 395.045493][T20507] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5910'. [ 395.063543][T12036] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.130230][T20518] FAULT_INJECTION: forcing a failure. [ 395.130230][T20518] name failslab, interval 1, probability 0, space 0, times 0 [ 395.142953][T20518] CPU: 0 UID: 0 PID: 20518 Comm: syz.6.5915 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 395.142989][T20518] Tainted: [W]=WARN [ 395.142996][T20518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.143010][T20518] Call Trace: [ 395.143037][T20518] [ 395.143047][T20518] __dump_stack+0x1d/0x30 [ 395.143147][T20518] dump_stack_lvl+0xe8/0x140 [ 395.143172][T20518] dump_stack+0x15/0x1b [ 395.143195][T20518] should_fail_ex+0x265/0x280 [ 395.143223][T20518] should_failslab+0x8c/0xb0 [ 395.143280][T20518] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 395.143315][T20518] ? kvasprintf_const+0xb3/0x130 [ 395.143344][T20518] kvasprintf+0x8a/0x110 [ 395.143366][T20518] kvasprintf_const+0xb3/0x130 [ 395.143392][T20518] kobject_set_name_vargs+0x44/0xe0 [ 395.143413][T20518] dev_set_name+0x83/0xb0 [ 395.143432][T20518] ? nfc_allocate_device+0x11c/0x2e0 [ 395.143557][T20518] ? __pfx_nci_transceive+0x10/0x10 [ 395.143584][T20518] nfc_allocate_device+0x13b/0x2e0 [ 395.143624][T20518] nci_allocate_device+0x13b/0x200 [ 395.143665][T20518] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 395.143706][T20518] virtual_ncidev_open+0x55/0x140 [ 395.143746][T20518] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 395.143801][T20518] misc_open+0x1d3/0x200 [ 395.143832][T20518] chrdev_open+0x2e8/0x3a0 [ 395.143863][T20518] do_dentry_open+0x649/0xa20 [ 395.143911][T20518] ? __pfx_chrdev_open+0x10/0x10 [ 395.144016][T20518] vfs_open+0x37/0x1e0 [ 395.144053][T20518] path_openat+0x1c5e/0x2170 [ 395.144084][T20518] do_filp_open+0x109/0x230 [ 395.144149][T20518] do_sys_openat2+0xa6/0x110 [ 395.144237][T20518] __x64_sys_openat+0xf2/0x120 [ 395.144274][T20518] x64_sys_call+0x2e9c/0x2ff0 [ 395.144301][T20518] do_syscall_64+0xd2/0x200 [ 395.144386][T20518] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 395.144419][T20518] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 395.144448][T20518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.144497][T20518] RIP: 0033:0x7fbd9f3ceec9 [ 395.144518][T20518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.144543][T20518] RSP: 002b:00007fbd9de37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 395.144568][T20518] RAX: ffffffffffffffda RBX: 00007fbd9f625fa0 RCX: 00007fbd9f3ceec9 [ 395.144584][T20518] RDX: 0000000000005400 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 395.144628][T20518] RBP: 00007fbd9de37090 R08: 0000000000000000 R09: 0000000000000000 [ 395.144641][T20518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.144653][T20518] R13: 00007fbd9f626038 R14: 00007fbd9f625fa0 R15: 00007ffe2e2e1838 [ 395.144673][T20518] [ 395.602369][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5920'. [ 395.611437][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5920'. [ 395.653099][T20539] loop3: detected capacity change from 0 to 512 [ 395.728149][T20548] loop6: detected capacity change from 0 to 1024 [ 395.739859][T20548] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 395.763654][T20539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.776474][T20539] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.848759][T20551] loop0: detected capacity change from 0 to 512 [ 395.866869][T20551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.879792][T20551] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.978565][T20566] loop6: detected capacity change from 0 to 8192 [ 396.024314][T20566] loop6: p1[EZD] p2 p4 [ 396.028624][T20566] loop6: p1 start 150996992 is beyond EOD, truncated [ 396.035994][T20566] loop6: p4 size 281856 extends beyond EOD, truncated [ 396.336222][T12482] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.406847][T20571] loop5: detected capacity change from 0 to 8192 [ 396.454727][T20571] loop5: p1[EZD] p2 p4 [ 396.459109][T20571] loop5: p1 start 150996992 is beyond EOD, truncated [ 396.470387][T20571] loop5: p4 size 281856 extends beyond EOD, truncated [ 396.527417][T12036] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.536949][T20581] loop3: detected capacity change from 0 to 1024 [ 396.543959][T20581] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 396.594913][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5937'. [ 396.610092][T20590] serio: Serial port ptm0 [ 396.623834][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5937'. [ 396.713989][ T29] kauditd_printk_skb: 696 callbacks suppressed [ 396.714009][ T29] audit: type=1326 audit(1759029403.543:30713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.0.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 396.756156][ T29] audit: type=1326 audit(1759029403.543:30714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.0.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 396.779935][ T29] audit: type=1326 audit(1759029403.553:30715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.0.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 396.803447][ T29] audit: type=1326 audit(1759029403.583:30716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.0.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 396.810502][T20596] loop6: detected capacity change from 0 to 512 [ 396.827151][ T29] audit: type=1326 audit(1759029403.583:30717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.0.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 396.827392][ T29] audit: type=1326 audit(1759029403.593:30718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.0.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc3a7ca1785 code=0x7ffc0000 [ 396.880704][ T29] audit: type=1326 audit(1759029403.663:30719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.0.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 396.905064][T20596] EXT4-fs: Ignoring removed mblk_io_submit option [ 396.911968][T20596] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 396.921515][ T29] audit: type=1326 audit(1759029403.743:30720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.0.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 396.924374][T20596] EXT4-fs (loop6): 1 truncate cleaned up [ 396.951811][T20596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.961760][ T29] audit: type=1326 audit(1759029403.753:30721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.0.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc3a7c0af79 code=0x7ffc0000 [ 396.987408][ T29] audit: type=1326 audit(1759029403.753:30722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.0.5938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a7c6eec9 code=0x7ffc0000 [ 397.013681][T20017] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.050625][T20610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5944'. [ 397.131626][T20617] loop6: detected capacity change from 0 to 1024 [ 397.139763][T20617] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 397.229171][T20627] loop3: detected capacity change from 0 to 512 [ 397.232853][T20619] loop4: detected capacity change from 0 to 512 [ 397.235898][T20627] EXT4-fs: Ignoring removed mblk_io_submit option [ 397.248771][T20627] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 397.256817][T20619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.271457][T20619] ext4 filesystem being mounted at /584/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 397.286691][T20627] EXT4-fs (loop3): 1 truncate cleaned up [ 397.292852][T20627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.305905][T20631] loop5: detected capacity change from 0 to 8192 [ 397.323011][T12482] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.354697][T20631] loop5: p1[EZD] p2 p4 [ 397.358919][T20631] loop5: p1 start 150996992 is beyond EOD, truncated [ 397.366307][T20631] loop5: p4 size 281856 extends beyond EOD, truncated [ 397.442673][T20648] tipc: Enabling of bearer rejected, already enabled [ 397.467064][T20650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5957'. [ 397.511105][T20656] loop0: detected capacity change from 0 to 1024 [ 397.518232][T20656] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 397.586534][T20658] loop3: detected capacity change from 0 to 8192 [ 397.609553][T20662] loop0: detected capacity change from 0 to 512 [ 397.616222][T20658] loop3: p1[EZD] p2 p4 [ 397.616436][T20662] EXT4-fs: Ignoring removed mblk_io_submit option [ 397.620608][T20658] loop3: p1 start 150996992 is beyond EOD, truncated [ 397.634492][T20658] loop3: p4 size 281856 extends beyond EOD, truncated [ 397.635226][T20662] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 397.652811][T20662] EXT4-fs (loop0): 1 truncate cleaned up [ 397.659134][T20662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.948254][T12191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.037745][T20623] delete_channel: no stack [ 398.087690][T20677] tipc: Enabling of bearer rejected, already enabled [ 398.113986][T20679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5969'. [ 398.125216][T20679] tipc: Enabling of bearer rejected, already enabled [ 398.261746][T20684] loop5: detected capacity change from 0 to 256 [ 398.296943][T20686] loop5: detected capacity change from 0 to 1024 [ 398.303871][T20686] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 398.450261][T20687] lo speed is unknown, defaulting to 1000 [ 398.763028][T12036] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.933563][T20703] loop5: detected capacity change from 0 to 512 [ 398.948486][T20703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.961193][T20703] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 399.035575][T20705] SELinux: failed to load policy [ 399.092284][T20718] tipc: Enabling of bearer rejected, already enabled [ 399.130041][T20723] loop4: detected capacity change from 0 to 256 [ 399.157748][T20726] SELinux: Context system_u:object_r:policy_src_t:s0 is not valid (left unmapped). [ 399.176913][T20728] loop4: detected capacity change from 0 to 1024 [ 399.184524][T20728] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 399.238078][T20708] lo speed is unknown, defaulting to 1000 [ 399.246415][ T51] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.362468][ T51] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.365991][T20736] loop4: detected capacity change from 0 to 512 [ 399.379292][T20736] EXT4-fs: Ignoring removed mblk_io_submit option [ 399.395699][T20736] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 399.418583][T20708] chnl_net:caif_netlink_parms(): no params data found [ 399.428309][T20736] EXT4-fs (loop4): 1 truncate cleaned up [ 399.451490][T20736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.653566][T15161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.185948][ T51] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.274861][T20708] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.282011][T20708] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.291847][T20708] bridge_slave_0: entered allmulticast mode [ 400.299472][T20708] bridge_slave_0: entered promiscuous mode [ 400.315956][ T51] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.333595][T12191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.354495][T20708] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.361699][T20708] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.442395][T20708] bridge_slave_1: entered allmulticast mode [ 400.449198][T20708] bridge_slave_1: entered promiscuous mode [ 400.493093][T20708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.505190][T20754] __nla_validate_parse: 4 callbacks suppressed [ 400.505209][T20754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5991'. [ 400.507811][T20708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.545128][T20754] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5991'. [ 400.623914][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5991'. [ 401.006321][ T51] bond0 (unregistering): Released all slaves [ 401.016901][ T51] bond1 (unregistering): Released all slaves [ 401.026354][T20764] loop4: detected capacity change from 0 to 256 [ 401.037555][T20764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5992'. [ 401.066292][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5993'. [ 401.067836][T20757] lo speed is unknown, defaulting to 1000 [ 401.102567][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5993'. [ 401.141416][ T51] tipc: Disabling bearer [ 401.146480][ T51] tipc: Left network mode [ 401.154954][T20708] team0: Port device team_slave_0 added [ 401.164349][T20708] team0: Port device team_slave_1 added [ 401.192736][T20773] loop5: detected capacity change from 0 to 512 [ 401.199930][T20773] EXT4-fs: Ignoring removed mblk_io_submit option [ 401.208172][T20773] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 401.229120][T20773] EXT4-fs (loop5): 1 truncate cleaned up [ 401.229411][T20708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.235551][T20773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.241868][T20708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.279978][T20708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.291591][T20708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.298718][T20708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.324784][T20708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.380313][ T51] hsr_slave_0: left promiscuous mode [ 401.401149][ T51] veth1_macvtap: left promiscuous mode [ 401.406841][ T51] veth0_macvtap: left promiscuous mode [ 401.423162][ T51] veth1_vlan: left promiscuous mode [ 401.429800][ T51] veth0_vlan: left promiscuous mode [ 401.504275][ T3431] smc: removing ib device syz! [ 401.532069][ T152] smc: removing ib device syz2 [ 401.541546][ T3364] lo speed is unknown, defaulting to 1000 [ 401.547408][ T3364] syz2: Port: 1 Link DOWN [ 401.598588][T20708] hsr_slave_0: entered promiscuous mode [ 401.625682][T20708] hsr_slave_1: entered promiscuous mode [ 401.631746][T20708] debugfs: 'hsr0' already exists in 'hsr' [ 401.637691][T20708] Cannot create hsr debugfs directory [ 402.033851][T20798] loop6: detected capacity change from 0 to 1024 [ 402.222257][T20798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.342841][T15161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.531681][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 402.531699][ T29] audit: type=1326 audit(1759029409.363:31023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.5.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 402.564895][ T29] audit: type=1326 audit(1759029409.403:31024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.5.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 402.597534][ T29] audit: type=1326 audit(1759029409.403:31025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.5.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 402.621351][ T29] audit: type=1326 audit(1759029409.403:31026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.5.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 402.645131][ T29] audit: type=1326 audit(1759029409.403:31027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.5.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 402.669057][ T29] audit: type=1326 audit(1759029409.403:31028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.5.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 402.692669][ T29] audit: type=1326 audit(1759029409.403:31029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.5.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 402.716718][ T29] audit: type=1326 audit(1759029409.423:31030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.5.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 402.740343][ T29] audit: type=1326 audit(1759029409.423:31031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.5.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 402.763982][ T29] audit: type=1326 audit(1759029409.423:31032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.5.6007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 402.783387][T20816] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6010'. [ 403.000815][T20830] netlink: 'syz.5.6016': attribute type 10 has an invalid length. [ 403.018089][T20828] loop5: detected capacity change from 0 to 512 [ 403.036329][T20833] loop4: detected capacity change from 0 to 1024 [ 403.113051][T20708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 403.123689][T20708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 403.133178][T20708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 403.140133][T20846] loop3: detected capacity change from 0 to 1024 [ 403.151435][T20708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.196210][T20708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.209676][T20708] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.221356][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.228543][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.251979][T20708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 403.262465][T20708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.277637][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.284875][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.345157][T20708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.813521][T20708] veth0_vlan: entered promiscuous mode [ 403.863837][T20708] veth1_vlan: entered promiscuous mode [ 403.918575][T20708] veth0_macvtap: entered promiscuous mode [ 403.927945][T20708] veth1_macvtap: entered promiscuous mode [ 403.939919][T20708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.953952][T20708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.975698][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.001417][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.051750][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.067381][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.102178][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 404.116014][T20891] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6033'. [ 404.155166][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 404.162980][T20886] netlink: 'syz.4.6031': attribute type 10 has an invalid length. [ 404.176615][T20886] loop4: detected capacity change from 0 to 512 [ 404.205905][T20902] loop0: detected capacity change from 0 to 8192 [ 404.234395][T20902] loop0: p1[EZD] p2 p4 [ 404.238764][T20902] loop0: p1 start 150996992 is beyond EOD, truncated [ 404.246450][T20902] loop0: p4 size 281856 extends beyond EOD, truncated [ 404.383046][T20923] FAULT_INJECTION: forcing a failure. [ 404.383046][T20923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.396623][T20923] CPU: 1 UID: 0 PID: 20923 Comm: syz.5.6041 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 404.396659][T20923] Tainted: [W]=WARN [ 404.396668][T20923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.396684][T20923] Call Trace: [ 404.396692][T20923] [ 404.396728][T20923] __dump_stack+0x1d/0x30 [ 404.396749][T20923] dump_stack_lvl+0xe8/0x140 [ 404.396793][T20923] dump_stack+0x15/0x1b [ 404.396813][T20923] should_fail_ex+0x265/0x280 [ 404.396845][T20923] should_fail+0xb/0x20 [ 404.396873][T20923] should_fail_usercopy+0x1a/0x20 [ 404.396933][T20923] _copy_from_iter+0xd2/0xe80 [ 404.396968][T20923] ? should_fail_ex+0xdb/0x280 [ 404.397050][T20923] ? should_failslab+0x8c/0xb0 [ 404.397075][T20923] ? __kmalloc_noprof+0x1dd/0x3e0 [ 404.397105][T20923] ? kernfs_fop_write_iter+0xe2/0x300 [ 404.397150][T20923] kernfs_fop_write_iter+0x125/0x300 [ 404.397210][T20923] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 404.397356][T20923] vfs_write+0x527/0x960 [ 404.397391][T20923] ksys_write+0xda/0x1a0 [ 404.397420][T20923] __x64_sys_write+0x40/0x50 [ 404.397451][T20923] x64_sys_call+0x27fe/0x2ff0 [ 404.397521][T20923] do_syscall_64+0xd2/0x200 [ 404.397630][T20923] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 404.397658][T20923] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 404.397711][T20923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.397741][T20923] RIP: 0033:0x7fb7906ceec9 [ 404.397760][T20923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.397854][T20923] RSP: 002b:00007fb78f137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 404.397879][T20923] RAX: ffffffffffffffda RBX: 00007fb790925fa0 RCX: 00007fb7906ceec9 [ 404.397895][T20923] RDX: 0000000000000012 RSI: 00002000000002c0 RDI: 0000000000000005 [ 404.397974][T20923] RBP: 00007fb78f137090 R08: 0000000000000000 R09: 0000000000000000 [ 404.397990][T20923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.398034][T20923] R13: 00007fb790926038 R14: 00007fb790925fa0 R15: 00007ffc61e87858 [ 404.398055][T20923] [ 404.472170][T20910] chnl_net:caif_netlink_parms(): no params data found [ 404.681919][T20910] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.689413][T20910] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.698738][T20910] bridge_slave_0: entered allmulticast mode [ 404.705458][T20910] bridge_slave_0: entered promiscuous mode [ 404.713322][T20910] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.720860][T20910] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.738670][T20910] bridge_slave_1: entered allmulticast mode [ 404.747243][T20910] bridge_slave_1: entered promiscuous mode [ 404.768165][T20910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.779047][T20910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.580615][ T152] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.759189][T20945] loop5: detected capacity change from 0 to 1024 [ 405.783827][T20945] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 405.798665][T20910] team0: Port device team_slave_0 added [ 405.810650][ T152] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.860073][T20910] team0: Port device team_slave_1 added [ 405.901925][T20910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.909022][T20910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.934983][T20910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.954901][T20910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.961925][T20910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.987906][T20910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.991646][T20960] loop0: detected capacity change from 0 to 256 [ 406.006094][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6051'. [ 406.015032][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6051'. [ 406.020258][T20960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6052'. [ 406.048044][ T152] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.082449][T20963] netlink: 'syz.6.6048': attribute type 10 has an invalid length. [ 406.095582][T20963] team0 (unregistering): Port device team_slave_0 removed [ 406.104903][T20963] team0 (unregistering): Port device team_slave_1 removed [ 406.123422][T20967] loop3: detected capacity change from 0 to 256 [ 406.151086][T20956] loop6: detected capacity change from 0 to 512 [ 406.183116][ T152] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.220912][T20910] hsr_slave_0: entered promiscuous mode [ 406.227545][T20910] hsr_slave_1: entered promiscuous mode [ 406.234131][T20910] debugfs: 'hsr0' already exists in 'hsr' [ 406.239908][T20910] Cannot create hsr debugfs directory [ 406.246953][T20974] loop0: detected capacity change from 0 to 8192 [ 406.272436][T20976] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6057'. [ 406.296406][T20974] loop0: p1[EZD] p2 p4 [ 406.300862][T20974] loop0: p1 start 150996992 is beyond EOD, truncated [ 406.319981][T20974] loop0: p4 size 281856 extends beyond EOD, truncated [ 406.567521][T20984] loop6: detected capacity change from 0 to 512 [ 406.596398][T20984] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.696536][ T152] bond0 (unregistering): Released all slaves [ 406.705745][ T152] bond1 (unregistering): Released all slaves [ 406.738938][ T152] tipc: Disabling bearer [ 406.743995][ T152] tipc: Left network mode [ 406.752729][ T152] hsr_slave_0: left promiscuous mode [ 406.760443][ T152] veth1_macvtap: left promiscuous mode [ 406.766097][ T152] veth0_macvtap: left promiscuous mode [ 406.771834][ T152] veth1_vlan: left promiscuous mode [ 406.777922][ T152] veth0_vlan: left promiscuous mode [ 406.879670][T20991] tipc: Enabling of bearer rejected, already enabled [ 406.926079][T20999] loop5: detected capacity change from 0 to 256 [ 406.938000][T20999] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6065'. [ 407.022101][T21011] loop0: detected capacity change from 0 to 256 [ 407.049175][T21011] bridge_slave_0: left allmulticast mode [ 407.055061][T21011] bridge_slave_0: left promiscuous mode [ 407.060903][T21011] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.070179][T21011] bridge_slave_1: left allmulticast mode [ 407.076138][T21011] bridge_slave_1: left promiscuous mode [ 407.081860][T21011] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.091337][T21011] bond0: (slave bond_slave_0): Releasing backup interface [ 407.101216][T21011] bond0: (slave bond_slave_1): Releasing backup interface [ 407.115601][T21011] team0: Port device team_slave_0 removed [ 407.124706][T21011] team0: Port device team_slave_1 removed [ 407.131551][T21011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.139084][T21011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.148150][T21011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.155695][T21011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.177181][T21017] netlink: 'syz.5.6069': attribute type 10 has an invalid length. [ 407.187135][T21013] team0: Mode changed to "loadbalance" [ 407.205227][T21012] loop5: detected capacity change from 0 to 512 [ 407.220415][T20910] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 407.246209][T20910] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 407.257319][T20910] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 407.266714][T20910] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 407.279586][ T152] IPVS: stop unused estimator thread 0... [ 407.320521][T20910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.345398][T20910] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.354377][T21030] tipc: Enabling of bearer rejected, already enabled [ 407.364898][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.372137][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.401308][T21034] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6074'. [ 407.413523][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.420778][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.439757][T21034] tipc: Started in network mode [ 407.444810][T21034] tipc: Node identity ac14140f, cluster identity 4711 [ 407.453396][T21034] tipc: New replicast peer: 255.255.255.255 [ 407.459611][T21034] tipc: Enabled bearer , priority 10 [ 407.499798][T21043] loop6: detected capacity change from 0 to 256 [ 407.534771][T20910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.689073][T20910] veth0_vlan: entered promiscuous mode [ 407.697424][T20910] veth1_vlan: entered promiscuous mode [ 407.715474][T21059] loop5: detected capacity change from 0 to 8192 [ 407.721046][T20910] veth0_macvtap: entered promiscuous mode [ 407.730542][T20910] veth1_macvtap: entered promiscuous mode [ 407.747500][T20910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.758285][T20910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.886736][ T144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.947302][ T144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.970872][T21070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6081'. [ 408.009086][ T144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.070875][T21070] tipc: Started in network mode [ 408.075869][T21070] tipc: Node identity ac14140f, cluster identity 4711 [ 408.118188][T21070] tipc: New replicast peer: 255.255.255.255 [ 408.124376][T21070] tipc: Enabled bearer , priority 10 [ 408.132368][ T3431] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.141198][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 408.141227][ T29] audit: type=1326 audit(1759029414.923:31212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.3.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 408.171181][ T29] audit: type=1326 audit(1759029414.923:31213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.3.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 408.194879][ T29] audit: type=1326 audit(1759029414.923:31214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.3.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 408.194967][T21076] loop4: detected capacity change from 0 to 1024 [ 408.219007][ T29] audit: type=1326 audit(1759029414.923:31215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.3.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 408.249147][ T29] audit: type=1326 audit(1759029414.923:31216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.3.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 408.273062][ T29] audit: type=1326 audit(1759029414.923:31217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.3.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 408.302809][ T29] audit: type=1326 audit(1759029415.063:31218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.3.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 408.327005][ T29] audit: type=1326 audit(1759029415.063:31219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21072 comm="syz.3.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 408.351803][T21059] loop5: p1[EZD] p2 p4 [ 408.357071][T21059] loop5: p1 start 150996992 is beyond EOD, truncated [ 408.364891][T21059] loop5: p4 size 281856 extends beyond EOD, truncated [ 408.385948][ T29] audit: type=1326 audit(1759029415.213:31220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21077 comm="syz.3.6083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 408.409791][ T29] audit: type=1326 audit(1759029415.213:31221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21077 comm="syz.3.6083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3e46eec9 code=0x7ffc0000 [ 408.443291][T21082] tipc: Enabling of bearer rejected, already enabled [ 408.530910][T21092] loop0: detected capacity change from 0 to 256 [ 408.572113][T21096] loop3: detected capacity change from 0 to 1024 [ 408.584236][ T36] tipc: Node number set to 2886997007 [ 408.584877][T21096] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 408.618132][T21095] SELinux: failed to load policy [ 408.623472][T21099] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 408.635289][T21099] SELinux: failed to load policy [ 408.850783][T21112] loop5: detected capacity change from 0 to 512 [ 408.866335][T21112] ext4 filesystem being mounted at /440/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 408.885882][T21114] loop3: detected capacity change from 0 to 8192 [ 408.934538][T21114] loop3: p1[EZD] p2 p4 [ 408.938915][T21114] loop3: p1 start 150996992 is beyond EOD, truncated [ 408.948077][T21114] loop3: p4 size 281856 extends beyond EOD, truncated [ 408.973183][T21118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6097'. [ 408.984524][T21118] tipc: Started in network mode [ 408.989527][T21118] tipc: Node identity ac14140f, cluster identity 4711 [ 408.996591][T21118] tipc: New replicast peer: 255.255.255.255 [ 409.002705][T21118] tipc: Enabled bearer , priority 10 [ 409.019899][T21120] loop6: detected capacity change from 0 to 512 [ 409.026996][T21120] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.033788][T21120] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 409.045651][T21122] tipc: Enabling of bearer rejected, already enabled [ 409.046664][T21120] EXT4-fs (loop6): 1 truncate cleaned up [ 409.078849][T21125] loop4: detected capacity change from 0 to 512 [ 409.085845][T21125] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.092565][T21125] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 409.104384][T21125] EXT4-fs (loop4): 1 truncate cleaned up [ 409.244117][ T36] tipc: Node number set to 2886997007 [ 409.513356][T21130] loop0: detected capacity change from 0 to 256 [ 409.568810][T15161] EXT4-fs unmount: 12 callbacks suppressed [ 409.568826][T15161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.871252][T21134] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 409.892518][T21134] SELinux: failed to load policy [ 409.932183][T20017] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.960722][T21143] loop5: detected capacity change from 0 to 8192 [ 409.982563][T20910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.995018][T17718] tipc: Node number set to 2886997007 [ 410.022346][T21149] loop4: detected capacity change from 0 to 1024 [ 410.031163][T21143] loop5: p1[EZD] p2 p4 [ 410.037542][T21143] loop5: p1 start 150996992 is beyond EOD, truncated [ 410.045023][T21143] loop5: p4 size 281856 extends beyond EOD, truncated [ 410.048469][T21149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.097952][T21155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6109'. [ 410.106946][T21155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6109'. [ 410.342209][T21159] tipc: Enabling of bearer rejected, already enabled [ 410.562892][T21166] loop3: detected capacity change from 0 to 256 [ 410.707898][T21173] loop5: detected capacity change from 0 to 8192 [ 410.722604][T21174] loop3: detected capacity change from 0 to 8192 [ 410.754498][T21173] loop5: p1[EZD] p2 p4 [ 410.758918][T21173] loop5: p1 start 150996992 is beyond EOD, truncated [ 410.766738][T21173] loop5: p4 size 281856 extends beyond EOD, truncated [ 410.774928][T21174] loop3: p1[EZD] p2 p4 [ 410.779583][T21174] loop3: p1 start 150996992 is beyond EOD, truncated [ 410.786860][T21174] loop3: p4 size 281856 extends beyond EOD, truncated [ 410.866966][T20910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.877641][T21176] loop6: detected capacity change from 0 to 512 [ 410.882194][T21178] loop0: detected capacity change from 0 to 512 [ 410.884806][T21176] EXT4-fs: Ignoring removed mblk_io_submit option [ 410.897552][T21178] EXT4-fs: Ignoring removed mblk_io_submit option [ 410.898561][T21176] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 410.904757][T21178] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 410.915854][T21176] EXT4-fs (loop6): 1 truncate cleaned up [ 410.930364][T21176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.947329][T21178] EXT4-fs (loop0): 1 truncate cleaned up [ 410.955427][T21178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.679228][T21194] loop4: detected capacity change from 0 to 256 [ 411.768418][T21189] netlink: 'syz.3.6122': attribute type 10 has an invalid length. [ 411.782448][T20708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.793207][T20017] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.812073][T21189] loop3: detected capacity change from 0 to 512 [ 411.875763][T21203] loop6: detected capacity change from 0 to 512 [ 411.882608][T21203] EXT4-fs: Ignoring removed mblk_io_submit option [ 411.891989][T21203] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 411.912593][T21203] EXT4-fs (loop6): 1 truncate cleaned up [ 411.918873][T21203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.932683][T21208] loop5: detected capacity change from 0 to 1024 [ 411.957047][T21209] loop0: detected capacity change from 0 to 8192 [ 411.975336][T21207] bridge0: entered allmulticast mode [ 411.984134][T21208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.994955][T21209] loop0: p1[EZD] p2 p4 [ 412.000637][T21209] loop0: p1 start 150996992 is beyond EOD, truncated [ 412.008266][T21209] loop0: p4 size 281856 extends beyond EOD, truncated [ 412.126723][T21218] loop3: detected capacity change from 0 to 8192 [ 412.164521][T21218] loop3: p1[EZD] p2 p4 [ 412.168926][T21218] loop3: p1 start 150996992 is beyond EOD, truncated [ 412.176522][T21218] loop3: p4 size 281856 extends beyond EOD, truncated [ 412.667073][T21220] tipc: Enabling of bearer rejected, already enabled [ 412.752941][T15161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.776183][T21224] __nla_validate_parse: 1 callbacks suppressed [ 412.776204][T21224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6133'. [ 412.843517][T21224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6133'. [ 412.865164][T20017] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.882108][T21224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6133'. [ 412.910717][T21224] hsr_slave_1 (unregistering): left promiscuous mode [ 413.091637][T21227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6135'. [ 413.100652][T21227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6135'. [ 413.140000][T21233] loop3: detected capacity change from 0 to 512 [ 413.200317][T21233] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.240139][T21233] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 413.277090][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 413.277109][ T29] audit: type=1326 audit(1759029420.113:31351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21226 comm="syz.5.6135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 413.315681][T21233] EXT4-fs (loop3): 1 truncate cleaned up [ 413.328473][T21233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.330020][T21239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6139'. [ 413.341143][ T29] audit: type=1326 audit(1759029420.143:31352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21226 comm="syz.5.6135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 413.379995][T21239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6139'. [ 413.479124][T21239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6139'. [ 413.589534][T21245] loop0: detected capacity change from 0 to 512 [ 413.604663][T21245] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.619667][T21245] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 413.765972][T21245] EXT4-fs (loop0): 1 truncate cleaned up [ 413.772394][T21245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.785748][T21235] bridge2: entered promiscuous mode [ 414.393816][T12482] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.099957][T20708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.118337][T21270] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 415.121183][ T29] audit: type=1326 audit(1759029421.953:31353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21267 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d162eec9 code=0x7ffc0000 [ 415.152946][T21270] SELinux: failed to load policy [ 415.163396][T21266] loop3: detected capacity change from 0 to 1024 [ 415.202324][ T29] audit: type=1326 audit(1759029421.983:31354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21267 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc9d162eec9 code=0x7ffc0000 [ 415.226075][ T29] audit: type=1326 audit(1759029421.983:31355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21267 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d162eec9 code=0x7ffc0000 [ 415.249720][ T29] audit: type=1326 audit(1759029421.983:31356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21267 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d162eec9 code=0x7ffc0000 [ 415.335400][T21266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.351777][T21272] netlink: 'syz.0.6149': attribute type 10 has an invalid length. [ 415.438320][T21276] loop0: detected capacity change from 0 to 512 [ 415.457156][T21282] loop4: detected capacity change from 0 to 512 [ 415.488973][T21282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.503101][T21282] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 415.536300][ T29] audit: type=1326 audit(1759029422.373:31357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21289 comm="syz.6.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f3ceec9 code=0x7ffc0000 [ 415.571198][ T29] audit: type=1326 audit(1759029422.383:31358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21289 comm="syz.6.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f3ceec9 code=0x7ffc0000 [ 415.595042][ T29] audit: type=1326 audit(1759029422.383:31359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21289 comm="syz.6.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd9f3ceec9 code=0x7ffc0000 [ 415.618637][ T29] audit: type=1326 audit(1759029422.383:31360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21289 comm="syz.6.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f3ceec9 code=0x7ffc0000 [ 415.737217][T21308] tipc: Enabling of bearer rejected, already enabled [ 415.750726][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6162'. [ 415.759700][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6162'. [ 415.800022][T21306] netlink: 'syz.5.6160': attribute type 10 has an invalid length. [ 415.811917][T21306] loop5: detected capacity change from 0 to 512 [ 415.880937][T21317] serio: Serial port ptm0 [ 415.917810][T12482] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.058869][T21337] loop3: detected capacity change from 0 to 1024 [ 416.066661][T21337] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 416.080607][T20910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.159191][T21350] loop6: detected capacity change from 0 to 256 [ 416.193978][T21353] loop3: detected capacity change from 0 to 1024 [ 416.195520][T21351] netlink: 'syz.5.6176': attribute type 10 has an invalid length. [ 416.212133][T21351] loop5: detected capacity change from 0 to 512 [ 416.223108][T21353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.567591][T21369] loop5: detected capacity change from 0 to 512 [ 416.588409][T21369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.601813][T21369] ext4 filesystem being mounted at /459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 416.817928][T21387] loop4: detected capacity change from 0 to 8192 [ 416.874280][T21387] loop4: p1[EZD] p2 p4 [ 416.878632][T21387] loop4: p1 start 150996992 is beyond EOD, truncated [ 416.885994][T21387] loop4: p4 size 281856 extends beyond EOD, truncated [ 417.031700][T12482] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.185755][T21392] loop6: detected capacity change from 0 to 256 [ 417.292051][T15161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.616705][T21413] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.668465][T21413] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.688701][T21411] loop6: detected capacity change from 0 to 512 [ 417.706468][T21411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.719253][T21411] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.721511][T21413] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.766496][T21413] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.821977][ T152] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.835561][ T152] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.855454][ T152] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.868871][ T152] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.033805][T21425] loop5: detected capacity change from 0 to 256 [ 418.040869][T21393] delete_channel: no stack [ 418.048164][T21425] __nla_validate_parse: 9 callbacks suppressed [ 418.048182][T21425] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6207'. [ 418.103470][T21432] bridge0: entered allmulticast mode [ 418.126715][T21435] tipc: Enabling of bearer rejected, already enabled [ 418.129553][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6213'. [ 418.147759][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6213'. [ 418.158458][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6213'. [ 418.176379][T21437] hsr_slave_1 (unregistering): left promiscuous mode [ 418.233971][T21440] loop5: detected capacity change from 0 to 8192 [ 418.284547][T21440] loop5: p1[EZD] p2 p4 [ 418.288825][T21440] loop5: p1 start 150996992 is beyond EOD, truncated [ 418.296633][T21440] loop5: p4 size 281856 extends beyond EOD, truncated [ 418.381239][T20017] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.450407][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 418.450430][ T29] audit: type=1326 audit(1759029425.283:31562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21445 comm="syz.6.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f3ceec9 code=0x7ffc0000 [ 418.481785][ T29] audit: type=1326 audit(1759029425.283:31563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21445 comm="syz.6.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f3ceec9 code=0x7ffc0000 [ 418.507828][ T29] audit: type=1326 audit(1759029425.283:31564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21445 comm="syz.6.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbd9f3ceec9 code=0x7ffc0000 [ 418.531638][ T29] audit: type=1326 audit(1759029425.283:31565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21445 comm="syz.6.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f3ceec9 code=0x7ffc0000 [ 418.555655][ T29] audit: type=1326 audit(1759029425.283:31566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21445 comm="syz.6.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f3ceec9 code=0x7ffc0000 [ 419.011525][T21454] loop0: detected capacity change from 0 to 256 [ 419.021955][ T29] audit: type=1326 audit(1759029425.853:31567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21455 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 419.047424][T21454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6221'. [ 419.054283][ T29] audit: type=1326 audit(1759029425.853:31568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21455 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 419.080318][ T29] audit: type=1326 audit(1759029425.853:31569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21455 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 419.104180][ T29] audit: type=1326 audit(1759029425.853:31570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21455 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 419.127827][ T29] audit: type=1326 audit(1759029425.853:31571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21455 comm="syz.5.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb7906ceec9 code=0x7ffc0000 [ 419.283524][T21470] loop0: detected capacity change from 0 to 8192 [ 419.309952][T21447] delete_channel: no stack [ 419.344709][T21470] loop0: p1[EZD] p2 p4 [ 419.349036][T21470] loop0: p1 start 150996992 is beyond EOD, truncated [ 419.356328][T21470] loop0: p4 size 281856 extends beyond EOD, truncated [ 420.024802][T21465] delete_channel: no stack [ 420.607488][T21479] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 420.645684][T21479] SELinux: failed to load policy [ 420.750403][T21481] loop3: detected capacity change from 0 to 512 [ 420.757171][T21481] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.764973][T21481] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 420.777291][T21481] EXT4-fs (loop3): 1 truncate cleaned up [ 420.783579][T21481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.319852][T21489] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 421.330195][T21489] SELinux: failed to load policy [ 421.361583][T21491] loop0: detected capacity change from 0 to 256 [ 421.376421][T21491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6233'. [ 421.663753][T21503] loop0: detected capacity change from 0 to 8192 [ 421.714525][T21503] loop0: p1[EZD] p2 p4 [ 421.718833][T21503] loop0: p1 start 150996992 is beyond EOD, truncated [ 421.726107][T21503] loop0: p4 size 281856 extends beyond EOD, truncated [ 421.761019][T12482] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.794857][T21508] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6240'. [ 421.837996][T21509] netlink: 'syz.3.6239': attribute type 10 has an invalid length. [ 421.849005][T21509] loop3: detected capacity change from 0 to 512 [ 422.055539][T21516] loop6: detected capacity change from 0 to 8192 [ 422.094810][T21516] loop6: p1[EZD] p2 p4 [ 422.099068][T21516] loop6: p1 start 150996992 is beyond EOD, truncated [ 422.106322][T21516] loop6: p4 size 281856 extends beyond EOD, truncated [ 422.486978][T21547] netlink: 'syz.5.6254': attribute type 10 has an invalid length. [ 422.499207][T21547] loop5: detected capacity change from 0 to 512 [ 422.561437][T21553] netlink: 'syz.4.6255': attribute type 10 has an invalid length. [ 422.575763][T21553] team0 (unregistering): Port device team_slave_0 removed [ 422.586760][T21553] team0 (unregistering): Port device team_slave_1 removed [ 422.619659][T21549] loop4: detected capacity change from 0 to 512 [ 422.700405][T21561] tipc: Enabling of bearer rejected, already enabled [ 422.770261][T21563] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 422.783387][T21563] SELinux: failed to load policy [ 422.910876][T21578] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6267'. [ 423.040747][T21588] tipc: Enabling of bearer rejected, already enabled [ 423.104782][T21594] loop6: detected capacity change from 0 to 1024 [ 423.112366][T21594] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 423.126852][T21572] loop4: detected capacity change from 0 to 512 [ 423.162850][T21572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.191929][T21572] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 423.243469][ T51] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.291073][T21603] loop5: detected capacity change from 0 to 512 [ 423.307600][T21603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.320339][T21603] ext4 filesystem being mounted at /487/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 423.333731][ T51] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.350500][T21585] chnl_net:caif_netlink_parms(): no params data found [ 423.371339][T21611] bridge0: entered allmulticast mode [ 423.386382][ T51] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.415648][T21585] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.422883][T21585] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.430189][T21585] bridge_slave_0: entered allmulticast mode [ 423.437003][T21585] bridge_slave_0: entered promiscuous mode [ 423.443243][T21620] loop0: detected capacity change from 0 to 8192 [ 423.444206][T21585] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.456850][T21585] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.464287][T21585] bridge_slave_1: entered allmulticast mode [ 423.470945][T21585] bridge_slave_1: entered promiscuous mode [ 423.484501][T21620] loop0: p1[EZD] p2 p4 [ 423.488898][T21620] loop0: p1 start 150996992 is beyond EOD, truncated [ 423.498095][T21620] loop0: p4 size 281856 extends beyond EOD, truncated [ 423.506235][ T51] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.518708][T21585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.531806][T21585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.559320][T21585] team0: Port device team_slave_0 added [ 423.566370][T21585] team0: Port device team_slave_1 added [ 423.570210][T21626] loop6: detected capacity change from 0 to 512 [ 423.580666][T21626] EXT4-fs: Ignoring removed mblk_io_submit option [ 423.587708][T21626] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 423.591998][T21585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.600287][T21626] EXT4-fs (loop6): 1 truncate cleaned up [ 423.604582][T21585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.610805][T21626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.636248][T21585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.652920][T21585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.666253][T21585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.692247][T21585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.706050][T20017] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.755664][T20910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.819186][ T51] bridge0 (unregistering): left allmulticast mode [ 423.842148][T15161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.871487][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6283'. [ 423.905861][T21629] SELinux: failed to load policy [ 423.937379][T21640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6283'. [ 424.057618][T21645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6283'. [ 424.246024][ T51] bond0 (unregistering): Released all slaves [ 424.255443][ T51] bond1 (unregistering): Released all slaves [ 424.264482][ T51] bond2 (unregistering): Released all slaves [ 424.273313][ T51] bond3 (unregistering): Released all slaves [ 424.282986][ T51] bond4 (unregistering): Released all slaves [ 424.333228][ T51] tipc: Disabling bearer [ 424.338342][ T51] tipc: Left network mode [ 424.342170][T21585] hsr_slave_0: entered promiscuous mode [ 424.348543][T21656] loop0: detected capacity change from 0 to 8192 [ 424.355085][T21585] hsr_slave_1: entered promiscuous mode [ 424.355453][T21585] debugfs: 'hsr0' already exists in 'hsr' [ 424.366652][T21585] Cannot create hsr debugfs directory [ 424.380331][ T51] hsr_slave_0: left promiscuous mode [ 424.388132][ T51] veth1_vlan: left promiscuous mode [ 424.394638][T21656] loop0: p1[EZD] p2 p4 [ 424.395341][ T51] veth0_vlan: left promiscuous mode [ 424.404292][T21656] loop0: p1 start 150996992 is beyond EOD, truncated [ 424.412229][T21656] loop0: p4 size 281856 extends beyond EOD, truncated [ 425.046169][T21666] loop5: detected capacity change from 0 to 256 [ 425.056691][T21585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 425.067992][T21585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 425.069070][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6290'. [ 425.086371][T21585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 425.127767][T21585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 425.207839][T21585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.298740][T21585] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.334857][T21585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.345335][T21585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.426168][T20941] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.433297][T20941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.443997][T20941] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.451239][T20941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.474252][T21681] loop4: detected capacity change from 0 to 512 [ 425.512162][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 425.512182][ T29] audit: type=1326 audit(1759029432.343:31721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21690 comm="syz.6.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f3ceec9 code=0x7ffc0000 [ 425.545244][T21681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.557889][T21681] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.580553][T21585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.674222][ T29] audit: type=1326 audit(1759029432.353:31722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21690 comm="syz.6.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbd9f3ceec9 code=0x7ffc0000 [ 425.697964][ T29] audit: type=1326 audit(1759029432.353:31723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21690 comm="syz.6.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f3ceec9 code=0x7ffc0000 [ 425.721604][ T29] audit: type=1326 audit(1759029432.353:31724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21690 comm="syz.6.6294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f3ceec9 code=0x7ffc0000 [ 425.912449][T21585] veth0_vlan: entered promiscuous mode [ 425.921675][T21585] veth1_vlan: entered promiscuous mode [ 425.938352][T21585] veth0_macvtap: entered promiscuous mode [ 425.947764][T21585] veth1_macvtap: entered promiscuous mode [ 425.960075][T21585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.976161][T21585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.984384][T21707] tipc: Enabling of bearer rejected, already enabled [ 426.010898][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.035488][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.055533][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.077321][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.093993][T21708] loop0: detected capacity change from 0 to 8192 [ 426.111810][ T29] audit: type=1326 audit(1759029432.943:31725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 426.135717][ T29] audit: type=1326 audit(1759029432.943:31726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 426.205667][ T29] audit: type=1326 audit(1759029432.973:31727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 426.206103][T21708] loop0: p1[EZD] p2 p4 [ 426.229380][ T29] audit: type=1326 audit(1759029432.973:31728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 426.229423][ T29] audit: type=1326 audit(1759029432.973:31729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 426.258976][T20910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.281379][ T29] audit: type=1326 audit(1759029432.973:31730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 426.302637][T21717] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 426.317639][T21708] loop0: p1 start 150996992 is beyond EOD, truncated [ 426.331679][T21708] loop0: p4 size 281856 extends beyond EOD, truncated [ 426.336739][T21713] netlink: 'syz.5.6299': attribute type 10 has an invalid length. [ 426.340231][T21717] SELinux: failed to load policy [ 426.359460][T21713] loop5: detected capacity change from 0 to 512 [ 426.441299][T21729] loop4: detected capacity change from 0 to 8192 [ 426.484375][T21729] loop4: p1[EZD] p2 p4 [ 426.488751][T21729] loop4: p1 start 150996992 is beyond EOD, truncated [ 426.496771][T21729] loop4: p4 size 281856 extends beyond EOD, truncated [ 426.537190][T21731] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 426.547286][T21731] SELinux: failed to load policy [ 426.591639][T21737] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6307'. [ 426.787776][T21748] tipc: Enabling of bearer rejected, already enabled [ 427.443210][T21769] SELinux: failed to load policy [ 427.470530][T21771] loop3: detected capacity change from 0 to 256 [ 427.556858][T21771] bridge_slave_0: left allmulticast mode [ 427.562645][T21771] bridge_slave_0: left promiscuous mode [ 427.568359][T21771] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.601247][T21771] bridge_slave_1: left allmulticast mode [ 427.607120][T21771] bridge_slave_1: left promiscuous mode [ 427.612837][T21771] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.634994][T21771] bond0: (slave bond_slave_0): Releasing backup interface [ 427.663646][T21771] bond0: (slave bond_slave_1): Releasing backup interface [ 427.677880][T21771] team0: Port device team_slave_0 removed [ 427.691633][T21776] loop0: detected capacity change from 0 to 8192 [ 427.700189][T21771] team0: Port device team_slave_1 removed [ 427.707884][T21771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.715683][T21771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.733549][T21771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.741156][T21771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.744373][T21776] loop0: p1[EZD] p2 p4 [ 427.762784][T21776] loop0: p1 start 150996992 is beyond EOD, truncated [ 427.772928][T21776] loop0: p4 size 281856 extends beyond EOD, truncated [ 427.824310][T21777] team0: Mode changed to "loadbalance" [ 427.863711][T21765] bridge3: entered promiscuous mode [ 427.981016][T21794] loop5: detected capacity change from 0 to 1024 [ 427.991206][T21794] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 428.143774][T21798] loop4: detected capacity change from 0 to 8192 [ 428.157703][T21802] tipc: Enabling of bearer rejected, already enabled [ 428.204371][T21798] loop4: p1[EZD] p2 p4 [ 428.208663][T21798] loop4: p1 start 150996992 is beyond EOD, truncated [ 428.217481][T21798] loop4: p4 size 281856 extends beyond EOD, truncated [ 428.329926][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6333'. [ 428.409546][T21815] loop5: detected capacity change from 0 to 256 [ 428.477442][T21813] bridge0: entered allmulticast mode [ 429.124111][T21833] tipc: Enabling of bearer rejected, already enabled [ 429.246528][T21838] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 429.456069][T21838] SELinux: failed to load policy [ 429.481831][T21847] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 429.513046][T21847] SELinux: failed to load policy [ 429.720220][T21863] netlink: 'syz.3.6351': attribute type 10 has an invalid length. [ 430.027558][T21857] loop3: detected capacity change from 0 to 512 [ 430.439523][T21877] loop0: detected capacity change from 0 to 256 [ 430.512699][T21881] loop4: detected capacity change from 0 to 1024 [ 430.540707][T21881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.556140][T21884] tipc: Enabling of bearer rejected, already enabled [ 430.564095][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 430.564173][ T29] audit: type=1326 audit(1759029437.393:31867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 430.609344][ T29] audit: type=1326 audit(1759029437.433:31868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 430.633273][ T29] audit: type=1326 audit(1759029437.433:31869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 430.657236][ T29] audit: type=1326 audit(1759029437.433:31870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 430.680978][ T29] audit: type=1326 audit(1759029437.433:31871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 430.704919][ T29] audit: type=1326 audit(1759029437.433:31872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 430.728646][ T29] audit: type=1326 audit(1759029437.433:31873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 430.752572][ T29] audit: type=1326 audit(1759029437.433:31874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 430.776294][ T29] audit: type=1326 audit(1759029437.433:31875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 430.800015][ T29] audit: type=1326 audit(1759029437.433:31876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.3.6360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fb88472eec9 code=0x7ffc0000 [ 430.814123][T21898] SELinux: failed to load policy [ 430.926762][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6368'. [ 430.935886][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6368'. [ 431.078055][T21919] netlink: 'syz.5.6370': attribute type 10 has an invalid length. [ 431.095060][T21915] loop5: detected capacity change from 0 to 512 [ 431.438919][T20910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.475974][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6372'. [ 431.565757][T21930] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6374'. [ 431.585803][T21928] tipc: Enabling of bearer rejected, already enabled [ 431.832217][T21937] serio: Serial port ptm0 [ 432.028111][T21952] bridge0: entered allmulticast mode [ 432.102852][T21963] loop4: detected capacity change from 0 to 512 [ 432.221710][T21963] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.230648][T21963] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 432.267243][T21963] EXT4-fs (loop4): 1 truncate cleaned up [ 432.274224][T21963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.317467][T21962] SELinux: failed to load policy [ 432.616635][T21970] tipc: Enabling of bearer rejected, already enabled [ 432.941232][T21972] netlink: 'syz.5.6386': attribute type 10 has an invalid length. [ 432.987351][T21972] loop5: detected capacity change from 0 to 512 [ 432.996225][T20910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.036628][T21985] loop3: detected capacity change from 0 to 512 [ 433.043323][T21985] EXT4-fs: Ignoring removed mblk_io_submit option [ 433.050192][T21985] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 433.062529][T21985] EXT4-fs (loop3): 1 truncate cleaned up [ 433.069732][T21985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.259819][T22001] loop5: detected capacity change from 0 to 8192 [ 433.288235][T22005] loop6: detected capacity change from 0 to 512 [ 433.295503][T22005] EXT4-fs: Ignoring removed mblk_io_submit option [ 433.305307][T22001] loop5: p1[EZD] p2 p4 [ 433.488236][T22005] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 433.498767][T22001] loop5: p1 start 150996992 is beyond EOD, truncated [ 433.546054][T22001] loop5: p4 size 281856 extends beyond EOD, truncated [ 433.627211][T22005] EXT4-fs (loop6): 1 truncate cleaned up [ 433.688509][T22005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.045575][T22014] loop4: detected capacity change from 0 to 512 [ 434.052340][T22014] EXT4-fs: Ignoring removed mblk_io_submit option [ 434.071287][T22014] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 434.103223][T22014] EXT4-fs (loop4): 1 truncate cleaned up [ 434.121205][T22014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.210718][T21585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.222113][T20017] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.242993][T22021] SELinux: failed to load policy [ 434.285668][T22028] loop3: detected capacity change from 0 to 256 [ 434.368390][T22031] loop5: detected capacity change from 0 to 1024 [ 434.377976][T22031] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 434.449213][T22032] netlink: 'syz.6.6408': attribute type 10 has an invalid length. [ 434.467365][T22032] loop6: detected capacity change from 0 to 512 [ 434.530653][T22043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6412'. [ 434.542493][T22043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6412'. [ 434.566955][T22043] hsr_slave_1 (unregistering): left promiscuous mode [ 434.587009][T22044] loop5: detected capacity change from 0 to 8192 [ 434.605454][T22044] loop5: p1[EZD] p2 p4 [ 434.609699][T22044] loop5: p1 start 150996992 is beyond EOD, truncated [ 434.617883][T22044] loop5: p4 size 281856 extends beyond EOD, truncated [ 434.655246][T22014] ================================================================== [ 434.663407][T22014] BUG: KCSAN: data-race in touch_atime / touch_atime [ 434.670132][T22014] [ 434.672476][T22014] write to 0xffff88811a448e88 of 4 bytes by task 22022 on cpu 1: [ 434.680221][T22014] touch_atime+0x1e8/0x340 [ 434.684681][T22014] filemap_splice_read+0x6ba/0x740 [ 434.689867][T22014] ext4_file_splice_read+0x8f/0xb0 [ 434.695038][T22014] splice_direct_to_actor+0x26c/0x680 [ 434.700449][T22014] do_splice_direct+0xda/0x150 [ 434.705253][T22014] do_sendfile+0x380/0x650 [ 434.709722][T22014] __x64_sys_sendfile64+0x105/0x150 [ 434.715058][T22014] x64_sys_call+0x2bb0/0x2ff0 [ 434.719822][T22014] do_syscall_64+0xd2/0x200 [ 434.724375][T22014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.730316][T22014] [ 434.732661][T22014] read to 0xffff88811a448e88 of 4 bytes by task 22014 on cpu 0: [ 434.740322][T22014] touch_atime+0x194/0x340 [ 434.744783][T22014] filemap_splice_read+0x6ba/0x740 [ 434.749918][T22014] ext4_file_splice_read+0x8f/0xb0 [ 434.755073][T22014] splice_direct_to_actor+0x26c/0x680 [ 434.760470][T22014] do_splice_direct+0xda/0x150 [ 434.765267][T22014] do_sendfile+0x380/0x650 [ 434.769716][T22014] __x64_sys_sendfile64+0x105/0x150 [ 434.774961][T22014] x64_sys_call+0x2bb0/0x2ff0 [ 434.779751][T22014] do_syscall_64+0xd2/0x200 [ 434.784298][T22014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.790220][T22014] [ 434.792564][T22014] value changed: 0x1ccaf757 -> 0x1d638dd8 [ 434.798309][T22014] [ 434.800651][T22014] Reported by Kernel Concurrency Sanitizer on: [ 434.806818][T22014] CPU: 0 UID: 0 PID: 22014 Comm: syz.4.6401 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 434.818224][T22014] Tainted: [W]=WARN [ 434.822049][T22014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.832119][T22014] ================================================================== [ 434.896925][T20910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.