last executing test programs: 1m11.314332164s ago: executing program 4 (id=19): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1700000000000000001c639a915fa9e94fa600000057c52a1274b4a5b91b150080f055f7bca87f", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capget(&(0x7f0000000280)={0x20080522}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r1, @ANYRESOCT=r2], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ustat(0x2, &(0x7f0000000000)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000080008000"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001280)={r4, &(0x7f0000001200), &(0x7f0000001240)=""/23}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r9) 1m11.085634369s ago: executing program 4 (id=24): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2060, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 1m11.021674239s ago: executing program 4 (id=26): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m11.02091331s ago: executing program 4 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) getresgid(&(0x7f0000005d00), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f000001fa80), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1094a}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0xe4ff, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {0x0, 0x3}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xb}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb8}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe, 0x0, 0x80000}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0xc36}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}, {}, {}, {0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xa827, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) 1m10.860000343s ago: executing program 4 (id=29): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000380)={&(0x7f0000000080), 0x10, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000d8b000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x10, r2, 0x959e0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m9.351297992s ago: executing program 4 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m9.351132462s ago: executing program 32 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 2.639906509s ago: executing program 0 (id=1525): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x40}, 0x100222, 0x0, 0xfffffffb}, 0x0, 0x4, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x8a, &(0x7f0000000740)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x7c, 0x66, 0x0, 0x2, 0x1, 0x0, @private=0xa010102, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x16, 0x4, 0x0, 0x17, 0x3b, 0x65, 0x7b98, 0x40, 0x2f, 0x4, @multicast1, @loopback, {[@timestamp={0x44, 0x10, 0xca, 0x0, 0xf, [0x800088be, 0x401, 0x101]}, @rr={0x7, 0x13, 0x85, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @loopback]}, @rr={0x7, 0xb, 0x9f, [@rand_addr=0x64010100, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x48, 0x0, 0x8, [0x0, 0x338c, 0x1]}]}}, "981ba6c8721eae88"}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r5, 0x1}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, 0x0, &(0x7f00000001c0)=r7}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chmod(&(0x7f0000000340)='./file1\x00', 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r12, {0x19f}}, './file0\x00'}) 2.509814052s ago: executing program 0 (id=1527): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 2.193216227s ago: executing program 1 (id=1534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600b0}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 2.103205849s ago: executing program 2 (id=1535): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.847377585s ago: executing program 0 (id=1537): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x2, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0x1, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0xffe0, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x20000000) r6 = getpid() r7 = syz_open_procfs(r6, &(0x7f0000000140)='net/tcp6\x00') preadv(r7, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4088, 0xff8}], 0x4, 0x4, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x6, &(0x7f00000000c0)=""/6, 0x41000, 0x1e, '\x00', r4, 0x25, r7, 0x8, &(0x7f0000000140)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x10, 0x100005, 0xffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x40, 0xd, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f00000002c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000300)=0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) sendmsg$nl_xfrm(r10, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 1.56713893s ago: executing program 1 (id=1539): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x609e495c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000380)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000290000003e000000d26b12cc", 0x34) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000480)={0x0, 0xaee5, 0x800, 0x2, 0x1f6}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r6, 0x47f6, 0xffffffff, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r11, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, '\\', 0x3a, '', 0x3a, './file0'}, 0x28) r12 = open$dir(&(0x7f0000000200)='./file0\x00', 0x804000, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac1414aa000000000000000000000000fc01000000000000000000000000000000000000000000000000008001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000c0008"], 0xd8}}, 0x8814) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r12, 0x0) 1.56695006s ago: executing program 5 (id=1540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) 1.55386051s ago: executing program 5 (id=1541): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000dc0)={'tunl0\x00', &(0x7f0000000d00)={'erspan0\x00', 0x0, 0x80, 0x1, 0x1, 0x0, {{0x1a, 0x4, 0x0, 0x3f, 0x68, 0x65, 0x0, 0x80, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@noop, @end, @rr={0x7, 0xb, 0x64, [@local, @multicast2]}, @cipso={0x86, 0x2c, 0x2, [{0x1, 0x4, "59ab"}, {0x7, 0x10, "7ef510f8da43897708236c2b0e74"}, {0x5, 0x4, "6412"}, {0x5, 0xe, "f39f588d0848e51ec1f89b5a"}]}, @ssrr={0x89, 0x1b, 0x13, [@multicast2, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e80)={0x1, 0x58, &(0x7f0000000e00)={0x0, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000001040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r5, @ANYBLOB="00022dbd7000fddbdf25020000004400018014000200626f6e645f736c6176655f30000000000800030000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007663616e3000000000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300010000005000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000300010000000800030000000000080003000000000008000100", @ANYRES8=r2, @ANYBLOB="08000300010000001400020064756d6d7930000000000000000000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000002c0001c008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRESOCT=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYBLOB, @ANYBLOB="0800030002000000"], 0x110}, 0x1, 0x0, 0x0, 0x41}, 0x41) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x7800, 0x7, 0x8000, 0x1, {{0x13, 0x4, 0x1, 0x9, 0x4c, 0x64, 0x0, 0x80, 0x4, 0x0, @empty, @loopback, {[@ssrr={0x89, 0x13, 0xa, [@dev={0xac, 0x14, 0x14, 0x27}, @private=0xa010100, @rand_addr=0x64010100, @loopback]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0xe, [0x8, 0x101, 0x10000, 0x8]}, @rr={0x7, 0xb, 0xc9, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0xb, 0x200000, 0x65, @local, @private0, 0x1, 0x80, 0x4, 0x1f}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r9, r11, 0x25, 0x4}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000440)={@remote, @loopback}, &(0x7f0000000480)=0xc) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 1.52791623s ago: executing program 2 (id=1542): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (fail_nth: 9) 1.500267411s ago: executing program 0 (id=1543): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x44) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) set_robust_list(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x300) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"94e9aa2e2d4bfdbb784e474a691b5107", 0x0, 0x0, {0x3, 0x800}, {0x4, 0x1}, 0x5, [0x0, 0xfffffffffffffffc, 0x4, 0x9, 0x0, 0x400000000000200, 0x6, 0x5, 0x6, 0x800, 0x8e, 0xfff, 0x0, 0x6995, 0xe2, 0x4]}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) (fail_nth: 6) 1.387904933s ago: executing program 2 (id=1545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r11}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r12, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) 1.328242254s ago: executing program 0 (id=1546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x28e, 0x7ff, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @local}}}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4048850) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005234538ba55"], 0xfe33) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) execveat(r2, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000540)={[&(0x7f0000000500)='erspan0\x00']}, &(0x7f0000000600)={[&(0x7f0000000580)='O\x00', &(0x7f00000005c0)='veth1_vlan\x00']}, 0x1100) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40d10401}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40080) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20004000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000cc0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000001600)=ANY=[@ANYBLOB="74040000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fcdbdf256600000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x474}, 0x1, 0x0, 0x0, 0x20000807}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfd, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0x2, 0xa}}}, 0x24}}, 0x800) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r4, 0x2, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000040) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) 1.189635297s ago: executing program 5 (id=1548): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) (fail_nth: 2) 895.810463ms ago: executing program 5 (id=1550): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, r6) dup(0xffffffffffffffff) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0x3000426) open(0x0, 0x14507e, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r8, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0xfffffffc, 0x2, 0x1, 0x200de}, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000003000/0x3000)=nil) brk(0x400000ffc000) 895.207322ms ago: executing program 1 (id=1552): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0xb800f, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYBLOB="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"]) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 862.797623ms ago: executing program 5 (id=1553): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 862.566843ms ago: executing program 1 (id=1554): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 861.541564ms ago: executing program 2 (id=1555): r0 = io_uring_setup(0xe0d, &(0x7f0000000080)={0x0, 0x2c50, 0x80, 0x3, 0x180}) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18, 0x0, r0}, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000040)={0x80000037db, 0x538d28a0, 0x0, 0x0, 0x0, 0x1000000081, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) 745.616856ms ago: executing program 0 (id=1556): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000400000004000000"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000400000004000000"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x4}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom$unix(r6, &(0x7f0000000140)=""/129, 0x81, 0x0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) (async) recvfrom$unix(r6, &(0x7f0000000140)=""/129, 0x81, 0x0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) timer_settime(r8, 0x1, &(0x7f0000000040), 0x0) fspick(0xffffffffffffffff, 0x0, 0xa517acb343d698b2) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r7, 0x4, r1}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r7, 0x4, r1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r11}, 0x18) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r12, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r12, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r9, 0x8008330e, &(0x7f0000000100)) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r9, 0x8008330e, &(0x7f0000000100)) 673.417117ms ago: executing program 1 (id=1557): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 395.221353ms ago: executing program 3 (id=1562): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403a, 0x81, 0x800, 0x6, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 394.973712ms ago: executing program 2 (id=1563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x400}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 337.260833ms ago: executing program 3 (id=1564): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000dc0)={'tunl0\x00', &(0x7f0000000d00)={'erspan0\x00', 0x0, 0x80, 0x1, 0x1, 0x0, {{0x1a, 0x4, 0x0, 0x3f, 0x68, 0x65, 0x0, 0x80, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@noop, @end, @rr={0x7, 0xb, 0x64, [@local, @multicast2]}, @cipso={0x86, 0x2c, 0x2, [{0x1, 0x4, "59ab"}, {0x7, 0x10, "7ef510f8da43897708236c2b0e74"}, {0x5, 0x4, "6412"}, {0x5, 0xe, "f39f588d0848e51ec1f89b5a"}]}, @ssrr={0x89, 0x1b, 0x13, [@multicast2, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e80)={0x1, 0x58, &(0x7f0000000e00)={0x0, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000001040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r5, @ANYBLOB="00022dbd7000fddbdf25020000004400018014000200626f6e645f736c6176655f30000000000800030000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007663616e3000000000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300010000005000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000300010000000800030000000000080003000000000008000100", @ANYRES8=r2, @ANYBLOB="08000300010000001400020064756d6d7930000000000000000000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000002c0001c008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRESOCT=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYBLOB, @ANYBLOB="0800030002000000"], 0x110}, 0x1, 0x0, 0x0, 0x41}, 0x41) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x7800, 0x7, 0x8000, 0x1, {{0x13, 0x4, 0x1, 0x9, 0x4c, 0x64, 0x0, 0x80, 0x4, 0x0, @empty, @loopback, {[@ssrr={0x89, 0x13, 0xa, [@dev={0xac, 0x14, 0x14, 0x27}, @private=0xa010100, @rand_addr=0x64010100, @loopback]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0xe, [0x8, 0x101, 0x10000, 0x8]}, @rr={0x7, 0xb, 0xc9, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0xb, 0x200000, 0x65, @local, @private0, 0x1, 0x80, 0x4, 0x1f}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r9, r11, 0x25, 0x4}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000440)={@remote, @loopback}, &(0x7f0000000480)=0xc) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 336.785913ms ago: executing program 5 (id=1565): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000006400000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r2) r3 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) lseek(r3, 0xffffffffffffff1f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x1c}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x3, 0x0, 0x2004) socket$packet(0x11, 0x3, 0x300) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) recvmmsg(r6, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x10122, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000801) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008084) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x133102, 0x83) pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 319.030684ms ago: executing program 2 (id=1566): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x101000, &(0x7f0000000b00)=ANY=[@ANYBLOB="6573c844a1f762ba03c0a4c22fb2b26c95cdd5f4e50eed784cee2103ed153c60ad3a8ac7a2457d49ec2626ccb928a94cec81b0700664204d6ec0b8cb598b40141e4c457a8981ef59376d3922aa3aec2f86dd9097eaf491e9819ff1714ca5f22765646d1ae3a4480765153fba3e219549cf8902db00f0bc51a04c0a8b5db8ca98fd0883410b818e421d67e5e685f797c45deda2b61815b0c68aeb3fbe4360b2eed17053e1243ee4f848196c9fb6acc99dbe59765baff348e2e06f3db2e5b3f83f28efbf6eca49a703cc61e15f42c00192197a0a039d8d4e4924b149ef01f66dd7d8b3335e484bbd231b6b56515e7d6cd6152d0cb57fed", @ANYRES64=r2, @ANYRES8=r0], 0x3, 0x21f, &(0x7f0000000700)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000200)={0x1}) r4 = io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffd, 0x145, 0x0, r2}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) migrate_pages(0x0, 0xfc, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000800000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000005000000952f74f45952edd917c69b6be4ff346e5596ca6466040eacc10429c98887"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x25, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x12, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706ffa1b2c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006f51d97fa2335048144f73b7745cb571df4289b6cf9b1847eb09d27e929016e645241fc4aafa88d2ced63bf8db647e12f81dd10", @ANYRES16, @ANYRESHEX=r4, @ANYRESHEX=r1], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000aac01364f8169b6eb900030601040000800000000000070000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000000)=0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r3, @ANYRES16=r8, @ANYRES64], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f0000000cc0)={[{@orlov}, {@usrjquota}], [{@obj_role={'obj_role', 0x3d, 'kfree\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_gt}, {@euid_lt}, {@appraise_type}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) 255.941715ms ago: executing program 3 (id=1567): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 164.210227ms ago: executing program 3 (id=1568): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x1e2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x2, 0x8, 0xd0ed, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x4}, 0x50) 108.178108ms ago: executing program 1 (id=1569): r0 = socket(0x11, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000014c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x127a, &(0x7f0000003700)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00f46491e25ee81e7cf1fd32fbd5c026b56ce10000000072eae6af8a8f16c00b41c4d35a03f28c2c8e64bce9eb8e1cf0abc75e811130df44704dcee9c0cade4fe8048b48f9b87b86a03df27bb903468563b447590633f35836de225ac6c06c53538a43a7656d9016e9e3c1455c2a414732cf1477667ebe3fec485f75f3ed41dcde98721df997cc6c68d3b662bcecd86df5dff4eb49beee509fe2730a25de", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d3000000000000014001680100001800c000900ff07000000080000"], 0x48}, 0x1, 0x0, 0x0, 0x48051}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0) r5 = openat(r4, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x8, 0x311a3bf4, 0x101, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000000c0)={r6, 0x6}, 0x8) 48.099789ms ago: executing program 3 (id=1570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r2, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=1571): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e23, 0x5, @mcast2, 0xfea}}}, 0x90) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffc}]}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) listen(r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r7, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x55}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1ec}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1e}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x10) kernel console output (not intermixed with test programs): ermissive=1 [ 77.401886][ T6287] FAULT_INJECTION: forcing a failure. [ 77.401886][ T6287] name failslab, interval 1, probability 0, space 0, times 0 [ 77.414621][ T6287] CPU: 0 UID: 0 PID: 6287 Comm: syz.5.932 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.414652][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.414668][ T6287] Call Trace: [ 77.414676][ T6287] [ 77.414686][ T6287] __dump_stack+0x1d/0x30 [ 77.414707][ T6287] dump_stack_lvl+0xe8/0x140 [ 77.414725][ T6287] dump_stack+0x15/0x1b [ 77.414740][ T6287] should_fail_ex+0x265/0x280 [ 77.414788][ T6287] ? nft_last_init+0x5a/0x180 [ 77.414818][ T6287] should_failslab+0x8c/0xb0 [ 77.414863][ T6287] __kmalloc_cache_noprof+0x4c/0x320 [ 77.414903][ T6287] nft_last_init+0x5a/0x180 [ 77.414935][ T6287] nft_set_elem_expr_alloc+0x110/0x330 [ 77.414983][ T6287] nft_set_expr_alloc+0x35e/0x440 [ 77.415106][ T6287] nf_tables_newset+0x128d/0x14e0 [ 77.415149][ T6287] nfnetlink_rcv+0xb96/0x1690 [ 77.415227][ T6287] netlink_unicast+0x5bd/0x690 [ 77.415300][ T6287] netlink_sendmsg+0x58b/0x6b0 [ 77.415330][ T6287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.415401][ T6287] __sock_sendmsg+0x145/0x180 [ 77.415435][ T6287] ____sys_sendmsg+0x31e/0x4e0 [ 77.415469][ T6287] ___sys_sendmsg+0x17b/0x1d0 [ 77.415515][ T6287] __x64_sys_sendmsg+0xd4/0x160 [ 77.415617][ T6287] x64_sys_call+0x191e/0x2ff0 [ 77.415637][ T6287] do_syscall_64+0xd2/0x200 [ 77.415666][ T6287] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.415690][ T6287] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.415725][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.415752][ T6287] RIP: 0033:0x7fc9e58aeec9 [ 77.415777][ T6287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.415849][ T6287] RSP: 002b:00007fc9e4317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.415873][ T6287] RAX: ffffffffffffffda RBX: 00007fc9e5b05fa0 RCX: 00007fc9e58aeec9 [ 77.415889][ T6287] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000006 [ 77.415905][ T6287] RBP: 00007fc9e4317090 R08: 0000000000000000 R09: 0000000000000000 [ 77.415938][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.415953][ T6287] R13: 00007fc9e5b06038 R14: 00007fc9e5b05fa0 R15: 00007ffc7658c968 [ 77.415975][ T6287] [ 77.705516][ T3678] hid-generic 0000:0000:0000.0021: hidraw0: HID v8.00 Device [syz0] on syz0 [ 77.744566][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 77.765932][ T6299] team9: entered promiscuous mode [ 77.771150][ T6299] team9: entered allmulticast mode [ 77.778207][ T6297] fido_id[6297]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 77.815256][ T29] audit: type=1326 audit(154.369:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.5.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e58aeec9 code=0x7ffc0000 [ 77.855039][ T29] audit: type=1326 audit(154.369:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.5.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9e58aeec9 code=0x7ffc0000 [ 77.877725][ T29] audit: type=1326 audit(154.399:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.5.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e58aeec9 code=0x7ffc0000 [ 77.900354][ T29] audit: type=1326 audit(154.399:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.5.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc9e58ad97f code=0x7ffc0000 [ 77.922927][ T29] audit: type=1326 audit(154.399:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.5.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e58aeec9 code=0x7ffc0000 [ 77.945590][ T29] audit: type=1326 audit(154.399:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.5.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc9e58aeec9 code=0x7ffc0000 [ 77.968230][ T29] audit: type=1326 audit(154.399:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.5.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e58aeec9 code=0x7ffc0000 [ 77.993815][ T6310] loop0: detected capacity change from 0 to 128 [ 78.001940][ T6310] EXT4-fs: Ignoring removed nobh option [ 78.021685][ T6304] SELinux: failed to load policy [ 78.049279][ T6310] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.060129][ T6316] 9pnet_fd: Insufficient options for proto=fd [ 78.069366][ T6316] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 78.106434][ T6323] loop2: detected capacity change from 0 to 1024 [ 78.108643][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.127253][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'. [ 78.136177][ T6320] netlink: 'syz.1.945': attribute type 18 has an invalid length. [ 78.179670][ T6323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.192245][ T6328] macvtap0: refused to change device tx_queue_len [ 78.212317][ T6323] netlink: 'syz.2.946': attribute type 2 has an invalid length. [ 78.220678][ T6323] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.946'. [ 78.231886][ T10] hid-generic 0000:0000:0000.0022: hidraw0: HID v8.00 Device [syz0] on syz0 [ 78.266036][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 78.279618][ T6323] siw: device registration error -23 [ 78.310163][ T6338] netlink: 7 bytes leftover after parsing attributes in process `syz.1.951'. [ 78.329850][ T6337] team10: entered promiscuous mode [ 78.335037][ T6337] team10: entered allmulticast mode [ 78.351776][ T6336] fido_id[6336]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.371770][ T6338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.951'. [ 78.376440][ T6340] Process accounting resumed [ 78.380746][ T6338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.951'. [ 78.458308][ T6358] loop5: detected capacity change from 0 to 128 [ 78.468279][ T6338] netlink: 7 bytes leftover after parsing attributes in process `syz.1.951'. [ 78.471718][ T6358] EXT4-fs: Ignoring removed nobh option [ 78.501880][ T6338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.951'. [ 78.549516][ T6358] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.549666][ T6344] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.946: Allocating blocks 449-513 which overlap fs metadata [ 78.659433][ T6376] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 78.670247][ T3658] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.721205][ T10] hid-generic 0000:0000:0000.0023: hidraw0: HID v8.00 Device [syz0] on syz0 [ 78.736454][ T6376] loop3: detected capacity change from 0 to 1764 [ 78.847682][ T6388] netlink: 'syz.3.966': attribute type 2 has an invalid length. [ 78.897007][ T6391] team7: entered promiscuous mode [ 78.902177][ T6391] team7: entered allmulticast mode [ 78.929478][ T6396] loop0: detected capacity change from 0 to 128 [ 78.956021][ T6319] EXT4-fs (loop2): pa ffff888106dd6380: logic 48, phys. 177, len 21 [ 78.964344][ T6319] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 78.983625][ T6396] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.033215][ T6396] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 79.048453][ T6411] loop3: detected capacity change from 0 to 128 [ 79.061016][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.077935][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.099975][ T6411] EXT4-fs: Ignoring removed nobh option [ 79.140972][ T6411] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.257774][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.269895][ T6431] loop2: detected capacity change from 0 to 1024 [ 79.278801][ T6431] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.289792][ T6431] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.306869][ T6431] JBD2: no valid journal superblock found [ 79.312774][ T6431] EXT4-fs (loop2): Could not load journal inode [ 79.324318][ T6431] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 79.342053][ T6433] team11: entered promiscuous mode [ 79.347382][ T6433] team11: entered allmulticast mode [ 79.363129][ T6422] loop5: detected capacity change from 0 to 32768 [ 79.425233][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.434783][ T6422] loop5: p1 p2 p3 < p5 p6 > [ 79.441081][ T6422] loop5: p1 size 242222080 extends beyond EOD, truncated [ 79.448849][ T6442] loop2: detected capacity change from 0 to 1024 [ 79.456334][ T6444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.463824][ T6422] loop5: p2 start 4294967295 is beyond EOD, truncated [ 79.475535][ T6439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=6439 comm=syz.3.987 [ 79.491009][ T6442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.522998][ T6442] netlink: 'syz.2.988': attribute type 2 has an invalid length. [ 79.580212][ T6457] loop0: detected capacity change from 0 to 512 [ 79.592068][ T6457] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.605638][ T3676] udevd[3676]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 79.616801][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 79.617647][ T3675] udevd[3675]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 79.632908][ T6457] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.637910][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 79.650929][ T6462] siw: device registration error -23 [ 79.668231][ T6457] EXT4-fs (loop0): 1 truncate cleaned up [ 79.674443][ T6457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.724035][ T6468] loop5: detected capacity change from 0 to 128 [ 79.848165][ T6468] EXT4-fs: Ignoring removed nobh option [ 79.869737][ T6468] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.876764][ T6474] team8: entered promiscuous mode [ 79.886852][ T6474] team8: entered allmulticast mode [ 79.921005][ T10] hid_parser_main: 164 callbacks suppressed [ 79.921060][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 79.934464][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 79.941936][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 79.949483][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 79.956895][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 79.964406][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 79.971854][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 79.979279][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 79.986752][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 79.994205][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 80.017058][ T10] hid-generic 0000:0000:0000.0024: hidraw0: HID v80008.00 Device [syz0] on syz0 [ 80.027652][ T3658] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.054546][ T6462] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.988: Allocating blocks 449-513 which overlap fs metadata [ 80.091698][ T6470] loop3: detected capacity change from 0 to 512 [ 80.255040][ T6441] EXT4-fs (loop2): pa ffff888106dd62a0: logic 48, phys. 177, len 21 [ 80.263167][ T6441] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 80.285587][ T6496] loop3: detected capacity change from 0 to 128 [ 80.343948][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.418304][ T3382] hid-generic 0000:0000:0000.0025: hidraw0: HID v8.00 Device [syz0] on syz0 [ 80.442464][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.490515][ T6505] fido_id[6505]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 80.506896][ T6510] loop3: detected capacity change from 0 to 128 [ 80.524939][ T6510] EXT4-fs: Ignoring removed nobh option [ 80.544568][ T6510] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.618146][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.643173][ T6515] team12: entered promiscuous mode [ 80.648406][ T6515] team12: entered allmulticast mode [ 80.680144][ T6517] lo speed is unknown, defaulting to 1000 [ 80.730990][ T6517] lo speed is unknown, defaulting to 1000 [ 80.909763][ T6530] loop0: detected capacity change from 0 to 1024 [ 80.924205][ T6532] loop3: detected capacity change from 0 to 512 [ 80.948794][ T6530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.989365][ T6530] netlink: 'syz.0.1016': attribute type 2 has an invalid length. [ 80.999474][ T6532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.028322][ T6530] siw: device registration error -23 [ 81.133657][ T6547] loop5: detected capacity change from 0 to 512 [ 81.172634][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.188663][ T6547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.223126][ T3678] hid-generic 0000:0000:0000.0026: hidraw0: HID v8.00 Device [syz0] on syz0 [ 81.245831][ T6541] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1016: Allocating blocks 449-513 which overlap fs metadata [ 81.283303][ T6547] netlink: '+}[@': attribute type 10 has an invalid length. [ 81.299128][ T6547] team0: Port device dummy0 added [ 81.348263][ T6555] loop2: detected capacity change from 0 to 128 [ 81.362668][ T6555] EXT4-fs: Ignoring removed nobh option [ 81.390621][ T6555] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.459197][ T3658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.493698][ T3678] hid-generic 0000:0000:0000.0027: hidraw0: HID v8.00 Device [syz0] on syz0 [ 81.512990][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.544694][ T6560] fido_id[6560]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.560050][ T3678] hid-generic 0000:0000:0000.0028: hidraw0: HID v8.00 Device [syz0] on syz0 [ 81.625537][ T6563] team7: entered promiscuous mode [ 81.630662][ T6563] team7: entered allmulticast mode [ 81.644055][ T6565] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.729291][ T6572] netlink: 'syz.2.1027': attribute type 4 has an invalid length. [ 81.729307][ T6568] fido_id[6568]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.766286][ T6529] EXT4-fs (loop0): pa ffff888106dd63f0: logic 48, phys. 177, len 21 [ 81.774353][ T6529] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 81.816296][ T6579] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 81.958454][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.081127][ T6587] loop0: detected capacity change from 0 to 8192 [ 82.337596][ T3382] hid-generic 0000:0000:0000.0029: hidraw0: HID v8.00 Device [syz0] on syz0 [ 82.386685][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 82.386702][ T29] audit: type=1400 audit(158.939:1272): avc: denied { create } for pid=6586 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.487927][ T29] audit: type=1400 audit(158.989:1273): avc: denied { setopt } for pid=6586 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.510582][ T6595] fido_id[6595]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.527400][ T6598] __nla_validate_parse: 17 callbacks suppressed [ 82.527443][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1038'. [ 82.562007][ T6598] team9: entered promiscuous mode [ 82.567199][ T6598] team9: entered allmulticast mode [ 82.618153][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1041'. [ 82.646843][ T6609] loop0: detected capacity change from 0 to 1024 [ 82.686112][ T6609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.712406][ T6609] netlink: 'syz.0.1043': attribute type 2 has an invalid length. [ 82.720344][ T6609] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1043'. [ 82.732931][ T6609] siw: device registration error -23 [ 82.800006][ T29] audit: type=1400 audit(159.339:1274): avc: denied { read } for pid=6614 comm="syz.1.1044" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.822300][ T29] audit: type=1400 audit(159.339:1275): avc: denied { open } for pid=6614 comm="syz.1.1044" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.845038][ T29] audit: type=1400 audit(159.339:1276): avc: denied { create } for pid=6614 comm="syz.1.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.864354][ T29] audit: type=1400 audit(159.339:1277): avc: denied { connect } for pid=6614 comm="syz.1.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.883614][ T29] audit: type=1400 audit(159.339:1278): avc: denied { write } for pid=6614 comm="syz.1.1044" path="socket:[13899]" dev="sockfs" ino=13899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.907658][ T6617] loop2: detected capacity change from 0 to 128 [ 82.927338][ T6617] EXT4-fs: Ignoring removed nobh option [ 82.944433][ T29] audit: type=1400 audit(159.469:1279): avc: denied { create } for pid=6605 comm="syz.5.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.978059][ T6617] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.010596][ T29] audit: type=1400 audit(159.559:1280): avc: denied { mount } for pid=6626 comm="syz.1.1047" name="/" dev="ramfs" ino=14773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 83.110958][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.139491][ T29] audit: type=1326 audit(159.599:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6622 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b4f1eec9 code=0x7ffc0000 [ 83.140544][ T10] hid-generic 0000:0000:0000.002A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 83.252700][ T6634] fido_id[6634]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.284480][ T6637] netlink: 'syz.2.1048': attribute type 13 has an invalid length. [ 83.292425][ T6637] netlink: 'syz.2.1048': attribute type 27 has an invalid length. [ 83.323774][ T6620] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1043: Allocating blocks 449-513 which overlap fs metadata [ 83.497142][ T6620] EXT4-fs (loop0): pa ffff888106dd6380: logic 48, phys. 177, len 21 [ 83.505277][ T6620] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 83.541765][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 83.555854][ T6642] team8: entered promiscuous mode [ 83.560989][ T6642] team8: entered allmulticast mode [ 83.573732][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.617353][ T6646] loop5: detected capacity change from 0 to 128 [ 83.633196][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'. [ 83.649456][ T3678] hid-generic 0000:0000:0000.002B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 83.687510][ T6648] team9: entered promiscuous mode [ 83.692757][ T6648] team9: entered allmulticast mode [ 83.699475][ T6651] fido_id[6651]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.779915][ T6658] loop5: detected capacity change from 0 to 128 [ 83.814146][ T6656] loop3: detected capacity change from 0 to 8192 [ 83.835335][ T6658] EXT4-fs: Ignoring removed nobh option [ 83.854754][ T6658] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.877756][ T6656] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.912976][ T3678] hid-generic 0000:0000:0000.002C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 83.926094][ T3658] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.949264][ T6667] fido_id[6667]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.004517][ T6669] loop5: detected capacity change from 0 to 1024 [ 84.069697][ T6669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.084614][ T3678] hid-generic 0000:0000:0000.002D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 84.137003][ T6682] fido_id[6682]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.157297][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 84.176382][ T6669] netlink: 'syz.5.1061': attribute type 2 has an invalid length. [ 84.184216][ T6669] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.1061'. [ 84.202995][ T6691] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 84.211714][ T6669] siw: device registration error -23 [ 84.214969][ T6691] bond0: (slave lo): Error: Device can not be enslaved while up [ 84.237321][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 84.247217][ T6693] loop2: detected capacity change from 0 to 128 [ 84.265398][ T6687] team10: entered promiscuous mode [ 84.270593][ T6687] team10: entered allmulticast mode [ 84.302770][ T6689] team9: entered promiscuous mode [ 84.307859][ T6689] team9: entered allmulticast mode [ 84.329910][ T6700] loop0: detected capacity change from 0 to 128 [ 84.336604][ T6700] EXT4-fs: Ignoring removed nobh option [ 84.393522][ T6694] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1061: Allocating blocks 449-513 which overlap fs metadata [ 84.414111][ T6703] loop0: detected capacity change from 0 to 512 [ 84.421166][ T6703] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.436198][ T3389] hid-generic 0000:0000:0000.002E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 84.481047][ T6703] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.514526][ T6706] fido_id[6706]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.537862][ T6703] EXT4-fs (loop0): 1 truncate cleaned up [ 84.782891][ T6668] EXT4-fs (loop5): pa ffff888100616af0: logic 48, phys. 177, len 21 [ 84.791022][ T6668] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 84.801062][ T3389] hid-generic 0000:0000:0000.002F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 84.828087][ T6724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.839317][ T6724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.045333][ T6729] fido_id[6729]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.373194][ T6735] loop0: detected capacity change from 0 to 128 [ 85.388917][ T6735] EXT4-fs: Ignoring removed nobh option [ 85.483959][ T6741] loop3: detected capacity change from 0 to 512 [ 85.525273][ T3389] hid_parser_main: 338 callbacks suppressed [ 85.525308][ T3389] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 85.538757][ T3389] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 85.545189][ T6741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.546188][ T3389] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 85.563987][ T3389] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 85.571482][ T3389] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 85.579008][ T3389] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 85.586571][ T3389] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 85.594006][ T3389] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 85.601429][ T3389] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 85.608973][ T3389] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 85.625002][ T3389] hid-generic 0000:0000:0000.0030: hidraw0: HID v8.00 Device [syz0] on syz0 [ 85.638894][ T6741] EXT4-fs (loop3): 1 truncate cleaned up [ 85.664049][ T6741] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.686565][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 85.702534][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1084'. [ 85.724074][ T6749] fido_id[6749]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.749688][ T6755] team8: entered promiscuous mode [ 85.754811][ T6755] team8: entered allmulticast mode [ 85.778523][ T6753] team10: entered promiscuous mode [ 85.783791][ T6753] team10: entered allmulticast mode [ 85.793214][ T6741] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.830476][ T6762] loop0: detected capacity change from 0 to 128 [ 85.848821][ T6741] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.897719][ T10] hid-generic 0000:0000:0000.0031: hidraw0: HID v8.00 Device [syz0] on syz0 [ 85.910065][ T6741] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.943556][ T6767] fido_id[6767]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.969628][ T6766] netlink: 'syz.1.1092': attribute type 2 has an invalid length. [ 86.001438][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.042872][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.067643][ T6771] loop0: detected capacity change from 0 to 164 [ 86.074184][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.084283][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.114793][ T6779] loop3: detected capacity change from 0 to 128 [ 86.121706][ T6779] EXT4-fs: Ignoring removed nobh option [ 86.164548][ T6783] rock: directory entry would overflow storage [ 86.170788][ T6783] rock: sig=0x4f50, size=4, remaining=3 [ 86.176386][ T6783] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 86.351779][ T3382] hid-generic 0000:0000:0000.0032: hidraw0: HID v8.00 Device [syz0] on syz0 [ 86.671809][ T6814] team13: entered promiscuous mode [ 86.677107][ T6814] team13: entered allmulticast mode [ 86.689993][ T6813] team11: entered promiscuous mode [ 86.695257][ T6813] team11: entered allmulticast mode [ 86.870293][ T3678] hid-generic 0000:0000:0000.0033: hidraw0: HID v8.00 Device [syz0] on syz0 [ 86.926399][ T6899] loop3: detected capacity change from 0 to 128 [ 86.945311][ T6891] fido_id[6891]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.010558][ T6899] EXT4-fs: Ignoring removed nobh option [ 87.156376][ T6916] loop2: detected capacity change from 0 to 1024 [ 87.169037][ T6917] FAULT_INJECTION: forcing a failure. [ 87.169037][ T6917] name failslab, interval 1, probability 0, space 0, times 0 [ 87.181778][ T6917] CPU: 0 UID: 0 PID: 6917 Comm: syz.0.1105 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.181811][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.181825][ T6917] Call Trace: [ 87.181831][ T6917] [ 87.181919][ T6917] __dump_stack+0x1d/0x30 [ 87.181943][ T6917] dump_stack_lvl+0xe8/0x140 [ 87.181964][ T6917] dump_stack+0x15/0x1b [ 87.182029][ T6917] should_fail_ex+0x265/0x280 [ 87.182056][ T6917] should_failslab+0x8c/0xb0 [ 87.182097][ T6917] kmem_cache_alloc_node_noprof+0x57/0x320 [ 87.182203][ T6917] ? __alloc_skb+0x101/0x320 [ 87.182227][ T6917] __alloc_skb+0x101/0x320 [ 87.182301][ T6917] ? audit_log_start+0x365/0x6c0 [ 87.182343][ T6917] audit_log_start+0x380/0x6c0 [ 87.182376][ T6917] audit_seccomp+0x48/0x100 [ 87.182403][ T6917] ? __seccomp_filter+0x68c/0x10d0 [ 87.182427][ T6917] __seccomp_filter+0x69d/0x10d0 [ 87.182452][ T6917] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 87.182484][ T6917] ? vfs_write+0x7e8/0x960 [ 87.182512][ T6917] __secure_computing+0x82/0x150 [ 87.182646][ T6917] syscall_trace_enter+0xcf/0x1e0 [ 87.182729][ T6917] do_syscall_64+0xac/0x200 [ 87.182755][ T6917] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.182783][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.182873][ T6917] RIP: 0033:0x7f6baa09eec9 [ 87.182960][ T6917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.182981][ T6917] RSP: 002b:00007f6ba8ac4f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 87.183002][ T6917] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6baa09eec9 [ 87.183015][ T6917] RDX: 00007f6ba8ac4f20 RSI: 0000000000000058 RDI: 00007f6ba8ac4f20 [ 87.183030][ T6917] RBP: 00007f6ba8ac5090 R08: 0000000000000000 R09: 0000000000000058 [ 87.183041][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.183052][ T6917] R13: 00007f6baa2f6218 R14: 00007f6baa2f6180 R15: 00007ffd96d57338 [ 87.183069][ T6917] [ 87.409524][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 87.409542][ T29] audit: type=1326 audit(164.053:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb9a03ddb2a code=0x7ffc0000 [ 87.438417][ T29] audit: type=1326 audit(164.053:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb9a03ddb2a code=0x7ffc0000 [ 87.461080][ T29] audit: type=1326 audit(164.053:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb9a03dd617 code=0x7ffc0000 [ 87.484029][ T29] audit: type=1326 audit(164.053:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb9a03e066a code=0x7ffc0000 [ 87.693697][ T6916] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.1111: missing EA_INODE flag [ 87.717247][ T6916] EXT4-fs (loop2): Remounting filesystem read-only [ 87.746790][ T29] audit: type=1326 audit(164.248:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.0.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6baa09d8dc code=0x7ffc0000 [ 87.769536][ T29] audit: type=1326 audit(164.248:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.0.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6baa09d97f code=0x7ffc0000 [ 87.792280][ T29] audit: type=1326 audit(164.248:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.0.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6baa09db2a code=0x7ffc0000 [ 87.815122][ T29] audit: type=1326 audit(164.248:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.0.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6baa0d1785 code=0x7ffc0000 [ 87.838083][ T29] audit: type=1326 audit(164.248:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.0.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6baa09eec9 code=0x7ffc0000 [ 87.861033][ T29] audit: type=1326 audit(164.248:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.0.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6baa09eec9 code=0x7ffc0000 [ 87.982711][ T6945] netlink: 'syz.1.1115': attribute type 2 has an invalid length. [ 87.990662][ T6945] __nla_validate_parse: 4 callbacks suppressed [ 87.990681][ T6945] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1115'. [ 88.034933][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1117'. [ 88.056122][ T6947] team12: entered promiscuous mode [ 88.061357][ T6947] team12: entered allmulticast mode [ 88.098975][ T6986] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1118'. [ 88.126535][ T6991] FAULT_INJECTION: forcing a failure. [ 88.126535][ T6991] name failslab, interval 1, probability 0, space 0, times 0 [ 88.139302][ T6991] CPU: 1 UID: 0 PID: 6991 Comm: syz.2.1119 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.139329][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 88.139341][ T6991] Call Trace: [ 88.139348][ T6991] [ 88.139355][ T6991] __dump_stack+0x1d/0x30 [ 88.139410][ T6991] dump_stack_lvl+0xe8/0x140 [ 88.139434][ T6991] dump_stack+0x15/0x1b [ 88.139455][ T6991] should_fail_ex+0x265/0x280 [ 88.139484][ T6991] should_failslab+0x8c/0xb0 [ 88.139508][ T6991] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 88.139545][ T6991] ? cond_bools_copy+0x30/0x80 [ 88.139583][ T6991] ? __pfx_cond_bools_destroy+0x10/0x10 [ 88.139616][ T6991] kmemdup_noprof+0x2b/0x70 [ 88.139684][ T6991] ? __pfx_cond_bools_destroy+0x10/0x10 [ 88.139777][ T6991] cond_bools_copy+0x30/0x80 [ 88.139801][ T6991] ? __pfx_cond_bools_destroy+0x10/0x10 [ 88.139830][ T6991] hashtab_duplicate+0x11b/0x360 [ 88.139855][ T6991] ? __pfx_cond_bools_copy+0x10/0x10 [ 88.139894][ T6991] cond_policydb_dup+0xd2/0x4e0 [ 88.139929][ T6991] security_set_bools+0xa0/0x340 [ 88.140035][ T6991] sel_commit_bools_write+0x1ea/0x270 [ 88.140104][ T6991] vfs_writev+0x403/0x8b0 [ 88.140213][ T6991] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 88.140333][ T6991] ? mutex_lock+0xd/0x30 [ 88.140361][ T6991] do_writev+0xe7/0x210 [ 88.140417][ T6991] __x64_sys_writev+0x45/0x50 [ 88.140508][ T6991] x64_sys_call+0x1e9a/0x2ff0 [ 88.140530][ T6991] do_syscall_64+0xd2/0x200 [ 88.140567][ T6991] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.140631][ T6991] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.140666][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.140687][ T6991] RIP: 0033:0x7fb9a03deec9 [ 88.140700][ T6991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.140759][ T6991] RSP: 002b:00007fb99ee3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 88.140777][ T6991] RAX: ffffffffffffffda RBX: 00007fb9a0635fa0 RCX: 00007fb9a03deec9 [ 88.140858][ T6991] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 88.140873][ T6991] RBP: 00007fb99ee3f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.140888][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.140910][ T6991] R13: 00007fb9a0636038 R14: 00007fb9a0635fa0 R15: 00007ffc4cc918b8 [ 88.140933][ T6991] [ 88.578271][ T7001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1120'. [ 88.664292][ T7004] loop3: detected capacity change from 0 to 128 [ 88.671064][ T7004] EXT4-fs: Ignoring removed nobh option [ 88.747175][ T3382] hid-generic 0000:0000:0000.0034: hidraw0: HID v8.00 Device [syz0] on syz0 [ 88.805750][ T3678] hid-generic 0000:0000:0000.0035: hidraw0: HID v8.00 Device [syz0] on syz0 [ 88.815186][ T7020] fido_id[7020]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.858222][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 88.867178][ T7036] netlink: 'syz.2.1128': attribute type 30 has an invalid length. [ 88.880421][ T7026] loop3: detected capacity change from 0 to 256 [ 88.885332][ T37] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.887242][ T7026] vfat: Unknown parameter '0x0000000000000003' [ 88.897045][ T37] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.918446][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 88.956557][ T37] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.965739][ T37] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.997529][ T7048] fido_id[7048]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.057219][ T7060] loop5: detected capacity change from 0 to 128 [ 89.064147][ T7060] EXT4-fs: Ignoring removed nobh option [ 89.126278][ T7065] loop2: detected capacity change from 0 to 512 [ 89.140572][ T7045] team11: entered promiscuous mode [ 89.145900][ T7045] team11: entered allmulticast mode [ 89.154708][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'. [ 89.185094][ T7112] tipc: Started in network mode [ 89.190098][ T7112] tipc: Node identity ac14140f, cluster identity 4711 [ 89.197180][ T7112] tipc: New replicast peer: 255.255.255.83 [ 89.203184][ T7112] tipc: Enabled bearer , priority 10 [ 89.229489][ T7113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1133'. [ 89.278322][ T36] hid-generic 0000:0000:0000.0036: hidraw0: HID v8.00 Device [syz0] on syz0 [ 89.291668][ T7065] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 89.311853][ T7117] loop0: detected capacity change from 0 to 1024 [ 89.361207][ T7065] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 89.361268][ T7065] EXT4-fs: failed to create workqueue [ 89.376216][ T7065] EXT4-fs (loop2): mount failed [ 89.404970][ T7117] netlink: 'syz.0.1138': attribute type 2 has an invalid length. [ 89.412921][ T7117] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1138'. [ 89.481638][ T36] hid-generic 0000:0000:0000.0037: hidraw0: HID v8.00 Device [syz0] on syz0 [ 89.502245][ T7135] FAULT_INJECTION: forcing a failure. [ 89.502245][ T7135] name failslab, interval 1, probability 0, space 0, times 0 [ 89.515057][ T7135] CPU: 1 UID: 0 PID: 7135 Comm: syz.1.1140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.515091][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.515113][ T7135] Call Trace: [ 89.515121][ T7135] [ 89.515129][ T7135] __dump_stack+0x1d/0x30 [ 89.515149][ T7135] dump_stack_lvl+0xe8/0x140 [ 89.515169][ T7135] dump_stack+0x15/0x1b [ 89.515226][ T7135] should_fail_ex+0x265/0x280 [ 89.515256][ T7135] ? __pfx_cond_bools_destroy+0x10/0x10 [ 89.515367][ T7135] should_failslab+0x8c/0xb0 [ 89.515399][ T7135] kmem_cache_alloc_noprof+0x50/0x310 [ 89.515429][ T7135] ? hashtab_duplicate+0xfe/0x360 [ 89.515485][ T7135] ? __pfx_cond_bools_destroy+0x10/0x10 [ 89.515520][ T7135] hashtab_duplicate+0xfe/0x360 [ 89.515595][ T7135] ? __pfx_cond_bools_copy+0x10/0x10 [ 89.515627][ T7135] cond_policydb_dup+0xd2/0x4e0 [ 89.515664][ T7135] security_set_bools+0xa0/0x340 [ 89.515690][ T7135] sel_commit_bools_write+0x1ea/0x270 [ 89.515797][ T7135] vfs_writev+0x403/0x8b0 [ 89.515829][ T7135] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 89.515872][ T7135] ? mutex_lock+0xd/0x30 [ 89.515896][ T7135] do_writev+0xe7/0x210 [ 89.515982][ T7135] __x64_sys_writev+0x45/0x50 [ 89.516014][ T7135] x64_sys_call+0x1e9a/0x2ff0 [ 89.516047][ T7135] do_syscall_64+0xd2/0x200 [ 89.516090][ T7135] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.516125][ T7135] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.516225][ T7135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.516246][ T7135] RIP: 0033:0x7f296f24eec9 [ 89.516264][ T7135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.516343][ T7135] RSP: 002b:00007f296dcaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 89.516414][ T7135] RAX: ffffffffffffffda RBX: 00007f296f4a5fa0 RCX: 00007f296f24eec9 [ 89.516479][ T7135] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000006 [ 89.516491][ T7135] RBP: 00007f296dcaf090 R08: 0000000000000000 R09: 0000000000000000 [ 89.516502][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.516514][ T7135] R13: 00007f296f4a6038 R14: 00007f296f4a5fa0 R15: 00007ffcb72126e8 [ 89.516537][ T7135] [ 89.752019][ T7117] siw: device registration error -23 [ 89.777876][ T7139] fido_id[7139]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.837594][ T7145] fido_id[7145]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.913064][ T7153] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1143'. [ 89.944184][ T7153] random: crng reseeded on system resumption [ 90.003288][ T7169] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 90.059892][ T10] hid-generic 0000:0000:0000.0038: hidraw0: HID v8.00 Device [syz0] on syz0 [ 90.087452][ T7176] team12: entered promiscuous mode [ 90.092627][ T7176] team12: entered allmulticast mode [ 90.109981][ T7203] fido_id[7203]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.191285][ C1] hrtimer: interrupt took 38910 ns [ 90.277434][ T7252] loop3: detected capacity change from 0 to 128 [ 90.296485][ T36] tipc: Node number set to 2886997007 [ 90.360497][ T7252] netlink: 'syz.3.1160': attribute type 1 has an invalid length. [ 90.386092][ T7253] infiniband syz!: set active [ 90.390980][ T7253] infiniband syz!: added team_slave_0 [ 90.434588][ T7253] RDS/IB: syz!: added [ 90.438784][ T7253] smc: adding ib device syz! with port count 1 [ 90.447617][ T7253] smc: ib device syz! port 1 has pnetid [ 90.447938][ T7252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.513507][ T7303] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 90.523551][ T7303] bond0: (slave batadv1): making interface the new active one [ 90.534630][ T7303] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 90.560880][ T3678] hid_parser_main: 251 callbacks suppressed [ 90.560903][ T3678] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 90.574400][ T3678] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 90.581813][ T3678] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 90.591499][ T3678] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 90.598964][ T3678] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 90.606465][ T3678] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 90.612492][ T7317] team10: entered promiscuous mode [ 90.614089][ T3678] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 90.619144][ T7317] team10: entered allmulticast mode [ 90.631890][ T3678] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 90.639331][ T3678] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 90.646808][ T3678] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 90.659302][ T3678] hid-generic 0000:0000:0000.0039: hidraw0: HID v8.00 Device [syz0] on syz0 [ 90.757991][ T7363] loop3: detected capacity change from 0 to 1024 [ 90.803006][ T7363] netlink: 'syz.3.1168': attribute type 2 has an invalid length. [ 90.842637][ T7375] loop5: detected capacity change from 0 to 256 [ 90.850372][ T7363] siw: device registration error -23 [ 90.993844][ T7387] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1168: Allocating blocks 449-513 which overlap fs metadata [ 91.181932][ T7413] loop2: detected capacity change from 0 to 128 [ 91.265245][ T7417] lo speed is unknown, defaulting to 1000 [ 91.332688][ T7417] lo speed is unknown, defaulting to 1000 [ 91.571016][ T7413] netlink: 'syz.2.1178': attribute type 1 has an invalid length. [ 91.597886][ T7353] EXT4-fs (loop3): pa ffff888106dd6460: logic 48, phys. 177, len 21 [ 91.606061][ T7353] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 91.638082][ T7413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.654691][ T7480] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 91.667780][ T7480] bond1: (slave batadv1): making interface the new active one [ 91.718172][ T7480] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 91.754691][ T7484] team13: entered promiscuous mode [ 91.759898][ T7484] team13: entered allmulticast mode [ 91.846968][ T3678] hid-generic 0000:0000:0000.003A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 91.886405][ T3382] hid-generic 0000:0000:0000.003B: hidraw1: HID v8.00 Device [syz0] on syz0 [ 91.894670][ T7522] fido_id[7522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.972534][ T7531] fido_id[7531]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.040342][ T7558] syzkaller0: entered promiscuous mode [ 92.045914][ T7558] syzkaller0: entered allmulticast mode [ 92.082355][ T7555] loop5: detected capacity change from 0 to 1024 [ 92.137671][ T7555] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 92.170547][ T7572] usb usb8: usbfs: process 7572 (syz.2.1191) did not claim interface 0 before use [ 92.242811][ T7581] loop3: detected capacity change from 0 to 1024 [ 92.289780][ T1035] hid-generic 0000:0000:0000.003C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 92.313831][ T7591] team11: entered promiscuous mode [ 92.318996][ T7591] team11: entered allmulticast mode [ 92.332764][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 92.332789][ T29] audit: type=1400 audit(169.108:1690): avc: denied { mount } for pid=7580 comm="syz.3.1192" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 92.336492][ T7581] netlink: 'syz.3.1192': attribute type 2 has an invalid length. [ 92.339247][ T29] audit: type=1400 audit(169.108:1691): avc: denied { add_name } for pid=7580 comm="syz.3.1192" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.388162][ T29] audit: type=1400 audit(169.108:1692): avc: denied { create } for pid=7580 comm="syz.3.1192" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.407932][ T29] audit: type=1400 audit(169.108:1693): avc: denied { read write } for pid=7580 comm="syz.3.1192" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.429988][ T29] audit: type=1400 audit(169.108:1694): avc: denied { open } for pid=7580 comm="syz.3.1192" path="/249/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.452554][ T29] audit: type=1400 audit(169.108:1695): avc: denied { ioctl } for pid=7580 comm="syz.3.1192" path="/249/file1/file1" dev="loop3" ino=15 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.479040][ T29] audit: type=1400 audit(169.261:1696): avc: denied { create } for pid=7580 comm="syz.3.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.500718][ T7581] siw: device registration error -23 [ 92.506165][ T29] audit: type=1400 audit(169.281:1697): avc: denied { write } for pid=7580 comm="syz.3.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.510460][ T7630] fido_id[7630]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.526153][ T29] audit: type=1400 audit(169.281:1698): avc: denied { read } for pid=7580 comm="syz.3.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.574948][ T7636] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 92.612120][ T7636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.645413][ T7676] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 92.676988][ T7676] bond1: (slave batadv1): making interface the new active one [ 92.696629][ T7641] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1192: Allocating blocks 449-513 which overlap fs metadata [ 92.713715][ T29] audit: type=1400 audit(169.362:1699): avc: denied { create } for pid=7637 comm="syz.5.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.751937][ T7676] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 92.810889][ T1035] hid-generic 0000:0000:0000.003D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 92.844806][ T7689] fido_id[7689]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.915920][ T7702] loop5: detected capacity change from 0 to 764 [ 92.943228][ T7702] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 92.955298][ T7702] Symlink component flag not implemented [ 92.968581][ T7704] loop0: detected capacity change from 0 to 256 [ 93.008423][ T7702] FAULT_INJECTION: forcing a failure. [ 93.008423][ T7702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 93.022145][ T7702] CPU: 1 UID: 0 PID: 7702 Comm: syz.5.1203 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.022240][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.022253][ T7702] Call Trace: [ 93.022261][ T7702] [ 93.022269][ T7702] __dump_stack+0x1d/0x30 [ 93.022292][ T7702] dump_stack_lvl+0xe8/0x140 [ 93.022312][ T7702] dump_stack+0x15/0x1b [ 93.022328][ T7702] should_fail_ex+0x265/0x280 [ 93.022369][ T7702] should_fail_alloc_page+0xf2/0x100 [ 93.022476][ T7702] __alloc_frozen_pages_noprof+0xff/0x360 [ 93.022638][ T7702] alloc_pages_mpol+0xb3/0x250 [ 93.022685][ T7702] folio_alloc_noprof+0x97/0x150 [ 93.022722][ T7702] filemap_alloc_folio_noprof+0x66/0x210 [ 93.022822][ T7702] do_read_cache_folio+0xb7/0x5b0 [ 93.022845][ T7702] ? __pfx_rock_ridge_symlink_read_folio+0x10/0x10 [ 93.022871][ T7702] ? __pfx_page_get_link+0x10/0x10 [ 93.022950][ T7702] read_cache_folio+0x3c/0x50 [ 93.022972][ T7702] __page_get_link+0x36/0x170 [ 93.023065][ T7702] page_get_link+0x25/0x80 [ 93.023091][ T7702] pick_link+0x41a/0x830 [ 93.023120][ T7702] step_into+0x7b6/0x820 [ 93.023215][ T7702] path_openat+0x13e8/0x2170 [ 93.023294][ T7702] do_filp_open+0x109/0x230 [ 93.023322][ T7702] do_sys_openat2+0xa6/0x110 [ 93.023355][ T7702] __x64_sys_openat+0xf2/0x120 [ 93.023470][ T7702] x64_sys_call+0x2e9c/0x2ff0 [ 93.023591][ T7702] do_syscall_64+0xd2/0x200 [ 93.023623][ T7702] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.023648][ T7702] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.023676][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.023724][ T7702] RIP: 0033:0x7fc9e58aeec9 [ 93.023748][ T7702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.023784][ T7702] RSP: 002b:00007fc9e4317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.023805][ T7702] RAX: ffffffffffffffda RBX: 00007fc9e5b05fa0 RCX: 00007fc9e58aeec9 [ 93.023817][ T7702] RDX: 0000000000000042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 93.023973][ T7702] RBP: 00007fc9e4317090 R08: 0000000000000000 R09: 0000000000000000 [ 93.023987][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.023998][ T7702] R13: 00007fc9e5b06038 R14: 00007fc9e5b05fa0 R15: 00007ffc7658c968 [ 93.024029][ T7702] [ 93.083901][ T7580] EXT4-fs (loop3): pa ffff8881006168c0: logic 48, phys. 177, len 21 [ 93.240441][ T7704] FAT-fs (loop0): Directory bread(block 64) failed [ 93.247796][ T7580] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 93.289922][ T7704] FAT-fs (loop0): Directory bread(block 65) failed [ 93.338854][ T7719] 8021q: VLANs not supported on ip6gre0 [ 93.343786][ T1035] hid-generic 0000:0000:0000.003E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 93.344585][ T7704] FAT-fs (loop0): Directory bread(block 66) failed [ 93.366957][ T7704] FAT-fs (loop0): Directory bread(block 67) failed [ 93.391390][ T7733] fido_id[7733]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.393361][ T7704] FAT-fs (loop0): Directory bread(block 68) failed [ 93.414898][ T7740] loop2: detected capacity change from 0 to 256 [ 93.426590][ T7704] FAT-fs (loop0): Directory bread(block 69) failed [ 93.472719][ T7704] FAT-fs (loop0): Directory bread(block 70) failed [ 93.479420][ T7704] FAT-fs (loop0): Directory bread(block 71) failed [ 93.494352][ T7748] __nla_validate_parse: 8 callbacks suppressed [ 93.494367][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1209'. [ 93.502099][ T7704] FAT-fs (loop0): Directory bread(block 72) failed [ 93.517955][ T7704] FAT-fs (loop0): Directory bread(block 73) failed [ 93.537638][ T7748] team12: entered promiscuous mode [ 93.543045][ T7748] team12: entered allmulticast mode [ 93.613636][ T7788] FAULT_INJECTION: forcing a failure. [ 93.613636][ T7788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.626969][ T7788] CPU: 1 UID: 0 PID: 7788 Comm: syz.5.1211 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.627003][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.627016][ T7788] Call Trace: [ 93.627022][ T7788] [ 93.627029][ T7788] __dump_stack+0x1d/0x30 [ 93.627081][ T7788] dump_stack_lvl+0xe8/0x140 [ 93.627105][ T7788] dump_stack+0x15/0x1b [ 93.627125][ T7788] should_fail_ex+0x265/0x280 [ 93.627196][ T7788] should_fail+0xb/0x20 [ 93.627290][ T7788] should_fail_usercopy+0x1a/0x20 [ 93.627314][ T7788] copy_folio_from_iter_atomic+0x278/0x11b0 [ 93.627380][ T7788] ? shmem_write_begin+0xa8/0x190 [ 93.627404][ T7788] ? shmem_write_begin+0xe1/0x190 [ 93.627438][ T7788] generic_perform_write+0x2c2/0x490 [ 93.627472][ T7788] shmem_file_write_iter+0xc5/0xf0 [ 93.627503][ T7788] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 93.627534][ T7788] vfs_write+0x52a/0x960 [ 93.627563][ T7788] ksys_write+0xda/0x1a0 [ 93.627591][ T7788] __x64_sys_write+0x40/0x50 [ 93.627687][ T7788] x64_sys_call+0x27fe/0x2ff0 [ 93.627776][ T7788] do_syscall_64+0xd2/0x200 [ 93.627815][ T7788] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.627839][ T7788] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.627866][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.627891][ T7788] RIP: 0033:0x7fc9e58ad97f [ 93.627959][ T7788] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 93.628021][ T7788] RSP: 002b:00007fc9e4316df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 93.628042][ T7788] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fc9e58ad97f [ 93.628058][ T7788] RDX: 0000000000080000 RSI: 00007fc9dbef7000 RDI: 0000000000000008 [ 93.628073][ T7788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000564 [ 93.628086][ T7788] R10: 00002000000015c2 R11: 0000000000000293 R12: 0000000000000008 [ 93.628097][ T7788] R13: 00007fc9e4316ef0 R14: 00007fc9e4316eb0 R15: 00007fc9dbef7000 [ 93.628144][ T7788] [ 93.842273][ T7782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1210'. [ 93.853584][ T7782] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 93.885021][ T7792] loop3: detected capacity change from 0 to 512 [ 93.891558][ T7788] loop5: detected capacity change from 0 to 1024 [ 93.894067][ T7788] EXT4-fs: Ignoring removed orlov option [ 93.903846][ T7788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.922367][ T7789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1202'. [ 93.936893][ T7792] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.955780][ T7792] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 93.988822][ T7792] EXT4-fs (loop3): 1 truncate cleaned up [ 94.081312][ T7811] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1216'. [ 94.155145][ T7828] loop3: detected capacity change from 0 to 512 [ 94.170593][ T7834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.184244][ T10] hid-generic 0000:0000:0000.003F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 94.199997][ T7834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.253972][ T7850] loop5: detected capacity change from 0 to 256 [ 94.264404][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 94.328756][ T7848] fido_id[7848]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.357492][ T7852] loop2: detected capacity change from 0 to 1024 [ 94.368623][ T7695] syz.1.1200 (7695) used greatest stack depth: 6392 bytes left [ 94.389017][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 94.409390][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 94.425870][ T7870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1223'. [ 94.437056][ T7852] netlink: 'syz.2.1221': attribute type 2 has an invalid length. [ 94.444805][ T7852] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1221'. [ 94.480097][ T7865] team13: entered promiscuous mode [ 94.485546][ T7865] team13: entered allmulticast mode [ 94.509770][ T7852] siw: device registration error -23 [ 94.628960][ T3382] hid-generic 0000:0000:0000.0040: hidraw0: HID v8.00 Device [syz0] on syz0 [ 94.673622][ T7919] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1221: Allocating blocks 449-513 which overlap fs metadata [ 94.694159][ T7935] fido_id[7935]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.735007][ T7941] loop3: detected capacity change from 0 to 512 [ 94.746635][ T7941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.756065][ T7943] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 94.805859][ T7941] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 94.813888][ T7941] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 94.843310][ T7941] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 94.853000][ T7941] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 94.867500][ T7940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.916771][ T7940] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 95.065967][ T7968] loop0: detected capacity change from 0 to 1024 [ 95.073513][ T7968] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 95.141318][ T7851] EXT4-fs (loop2): pa ffff888100616c40: logic 48, phys. 177, len 21 [ 95.149429][ T7851] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 95.169453][ T7969] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.243601][ T7993] 9pnet_fd: Insufficient options for proto=fd [ 95.299697][ T8009] netlink: 'syz.0.1248': attribute type 10 has an invalid length. [ 95.307675][ T8009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1248'. [ 95.349325][ T8018] loop2: detected capacity change from 0 to 128 [ 95.356365][ T8018] EXT4-fs: Ignoring removed nobh option [ 95.392458][ T8027] loop0: detected capacity change from 0 to 128 [ 95.399095][ T8027] EXT4-fs: Ignoring removed nobh option [ 95.445709][ T8037] team13: entered promiscuous mode [ 95.450966][ T8037] team13: entered allmulticast mode [ 95.485754][ T3382] hid_parser_main: 222 callbacks suppressed [ 95.485776][ T3382] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 95.499298][ T3382] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 95.506719][ T3382] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 95.515551][ T3382] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 95.517555][ T8073] loop0: detected capacity change from 0 to 1024 [ 95.523066][ T3382] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 95.523090][ T3382] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 95.523111][ T3382] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 95.551743][ T3382] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 95.559250][ T3382] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 95.566683][ T3382] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 95.581354][ T8073] netlink: 'syz.0.1257': attribute type 2 has an invalid length. [ 95.586959][ T3382] hid-generic 0000:0000:0000.0041: hidraw0: HID v8.00 Device [syz0] on syz0 [ 95.601152][ T8073] siw: device registration error -23 [ 95.643148][ T8093] fido_id[8093]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.688186][ T8100] loop2: detected capacity change from 0 to 512 [ 95.715406][ T8100] EXT4-fs error (device loop2): ext4_init_orphan_info:585: comm syz.2.1262: inode #0: comm syz.2.1262: iget: illegal inode # [ 95.743706][ T8101] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1257: Allocating blocks 449-513 which overlap fs metadata [ 95.759717][ T8100] EXT4-fs (loop2): get orphan inode failed [ 95.765787][ T8100] EXT4-fs (loop2): mount failed [ 95.930961][ T8115] loop2: detected capacity change from 0 to 512 [ 95.945928][ T8115] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1264: casefold flag without casefold feature [ 95.974090][ T8115] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1264: couldn't read orphan inode 15 (err -117) [ 96.200387][ T8143] team14: entered promiscuous mode [ 96.205638][ T8143] team14: entered allmulticast mode [ 96.267792][ T10] hid-generic 0000:0000:0000.0042: hidraw0: HID v8.00 Device [syz0] on syz0 [ 96.300067][ T8072] EXT4-fs (loop0): pa ffff888100616bd0: logic 48, phys. 177, len 21 [ 96.308302][ T8072] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 96.316165][ T8184] fido_id[8184]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.577419][ T8225] team15: entered promiscuous mode [ 96.582722][ T8225] team15: entered allmulticast mode [ 96.619646][ T3382] hid-generic 0000:0000:0000.0043: hidraw0: HID v8.00 Device [syz0] on syz0 [ 96.659732][ T8403] fido_id[8403]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.720764][ T8478] loop0: detected capacity change from 0 to 1024 [ 96.820904][ T8496] team9: entered promiscuous mode [ 96.825982][ T8496] team9: entered allmulticast mode [ 96.832450][ T8478] netlink: 'syz.0.1287': attribute type 2 has an invalid length. [ 96.858032][ T8478] siw: device registration error -23 [ 96.905305][ T8549] team10: entered promiscuous mode [ 96.910615][ T8549] team10: entered allmulticast mode [ 96.913574][ T8586] 9pnet_fd: Insufficient options for proto=fd [ 96.971511][ T8595] loop5: detected capacity change from 0 to 128 [ 96.989549][ T8545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.999965][ T8545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.008430][ T8595] EXT4-fs: Ignoring removed nobh option [ 97.066467][ T8587] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1287: Allocating blocks 449-513 which overlap fs metadata [ 97.115970][ T8545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.126685][ T8545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.171850][ T8618] FAULT_INJECTION: forcing a failure. [ 97.171850][ T8618] name failslab, interval 1, probability 0, space 0, times 0 [ 97.184582][ T8618] CPU: 1 UID: 0 PID: 8618 Comm: syz.3.1302 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.184612][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 97.184626][ T8618] Call Trace: [ 97.184632][ T8618] [ 97.184703][ T8618] __dump_stack+0x1d/0x30 [ 97.184725][ T8618] dump_stack_lvl+0xe8/0x140 [ 97.184748][ T8618] dump_stack+0x15/0x1b [ 97.184769][ T8618] should_fail_ex+0x265/0x280 [ 97.184826][ T8618] ? sctp_add_bind_addr+0x71/0x1e0 [ 97.184933][ T8618] should_failslab+0x8c/0xb0 [ 97.184964][ T8618] __kmalloc_cache_noprof+0x4c/0x320 [ 97.185070][ T8618] sctp_add_bind_addr+0x71/0x1e0 [ 97.185097][ T8618] sctp_copy_local_addr_list+0x199/0x220 [ 97.185152][ T8618] sctp_copy_one_addr+0x7f/0x280 [ 97.185243][ T8618] sctp_bind_addr_copy+0x79/0x290 [ 97.185271][ T8618] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 97.185295][ T8618] sctp_connect_new_asoc+0x1c3/0x3a0 [ 97.185316][ T8618] sctp_sendmsg+0xf10/0x18d0 [ 97.185416][ T8618] ? __pfx_sctp_sendmsg+0x10/0x10 [ 97.185472][ T8618] inet_sendmsg+0xc2/0xd0 [ 97.185505][ T8618] __sock_sendmsg+0x102/0x180 [ 97.185545][ T8618] ____sys_sendmsg+0x31e/0x4e0 [ 97.185623][ T8618] ___sys_sendmsg+0x17b/0x1d0 [ 97.185663][ T8618] __x64_sys_sendmsg+0xd4/0x160 [ 97.185758][ T8618] x64_sys_call+0x191e/0x2ff0 [ 97.185778][ T8618] do_syscall_64+0xd2/0x200 [ 97.185809][ T8618] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 97.185846][ T8618] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 97.185874][ T8618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.185902][ T8618] RIP: 0033:0x7f58b4f1eec9 [ 97.185921][ T8618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.185987][ T8618] RSP: 002b:00007f58b397f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.186010][ T8618] RAX: ffffffffffffffda RBX: 00007f58b5175fa0 RCX: 00007f58b4f1eec9 [ 97.186021][ T8618] RDX: 0000000020000000 RSI: 0000200000001640 RDI: 0000000000000006 [ 97.186075][ T8618] RBP: 00007f58b397f090 R08: 0000000000000000 R09: 0000000000000000 [ 97.186091][ T8618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.186107][ T8618] R13: 00007f58b5176038 R14: 00007f58b5175fa0 R15: 00007ffd0039c398 [ 97.186170][ T8618] [ 97.437643][ T8545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.448063][ T8545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.483994][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 97.484010][ T29] audit: type=1400 audit(174.336:1955): avc: denied { read } for pid=8632 comm="syz.3.1304" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.516754][ T8545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.519674][ T8477] EXT4-fs (loop0): pa ffff888106dd64d0: logic 48, phys. 177, len 21 [ 97.527209][ T8545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.535100][ T8477] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 97.545549][ T29] audit: type=1400 audit(174.336:1956): avc: denied { open } for pid=8632 comm="syz.3.1304" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.578765][ T29] audit: type=1400 audit(174.336:1957): avc: denied { ioctl } for pid=8632 comm="syz.3.1304" path="/dev/usbmon8" dev="devtmpfs" ino=166 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.603514][ T29] audit: type=1400 audit(174.336:1958): avc: denied { read } for pid=8632 comm="syz.3.1304" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.647917][ T29] audit: type=1400 audit(174.438:1959): avc: denied { create } for pid=8632 comm="syz.3.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.666979][ T29] audit: type=1400 audit(174.438:1960): avc: denied { setopt } for pid=8632 comm="syz.3.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.685920][ T29] audit: type=1400 audit(174.438:1961): avc: denied { ioctl } for pid=8632 comm="syz.3.1304" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.733787][ T29] audit: type=1400 audit(174.590:1962): avc: denied { mount } for pid=8641 comm="syz.3.1307" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 97.780578][ T272] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.788916][ T272] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.809155][ T8649] team14: entered promiscuous mode [ 97.814329][ T8649] team14: entered allmulticast mode [ 97.821105][ T272] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.829446][ T272] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.842222][ T1035] hid-generic 0000:0000:0000.0044: hidraw0: HID v8.00 Device [syz0] on syz0 [ 97.846685][ T8689] team16: entered promiscuous mode [ 97.857167][ T8689] team16: entered allmulticast mode [ 97.878089][ T272] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.886451][ T272] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.934187][ T8726] fido_id[8726]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.948203][ T272] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.956688][ T272] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.992343][ T8737] loop2: detected capacity change from 0 to 1024 [ 98.053167][ T8759] loop0: detected capacity change from 0 to 1024 [ 98.139264][ T8773] team11: entered promiscuous mode [ 98.144589][ T8773] team11: entered allmulticast mode [ 98.150134][ T8759] netlink: 'syz.0.1317': attribute type 2 has an invalid length. [ 98.162741][ T8800] netlink: 'syz.5.1322': attribute type 10 has an invalid length. [ 98.167442][ T8759] siw: device registration error -23 [ 98.217635][ T8817] loop2: detected capacity change from 0 to 128 [ 98.239823][ T8820] team14: entered promiscuous mode [ 98.245107][ T8820] team14: entered allmulticast mode [ 98.280431][ T8817] EXT4-fs: Ignoring removed nobh option [ 98.300863][ T1035] hid-generic 0000:0000:0000.0045: hidraw0: HID v8.00 Device [syz0] on syz0 [ 98.358295][ T8869] fido_id[8869]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.377285][ T29] audit: type=1326 audit(175.217:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8878 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e58aeec9 code=0x7ffc0000 [ 98.400522][ T29] audit: type=1326 audit(175.217:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8878 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e58aeec9 code=0x7ffc0000 [ 98.462497][ T8855] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1317: Allocating blocks 449-513 which overlap fs metadata [ 98.552597][ T8879] loop5: detected capacity change from 0 to 512 [ 98.559198][ T3678] hid-generic 0000:0000:0000.0046: hidraw0: HID v8.00 Device [syz0] on syz0 [ 98.663617][ T8888] fido_id[8888]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.681255][ T8879] EXT4-fs (loop5): too many log groups per flexible block group [ 98.689166][ T8879] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 98.698418][ T8879] EXT4-fs (loop5): mount failed [ 98.704753][ T8898] __nla_validate_parse: 17 callbacks suppressed [ 98.704772][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 98.738890][ T8898] team12: entered promiscuous mode [ 98.744108][ T8898] team12: entered allmulticast mode [ 98.868387][ T8757] EXT4-fs (loop0): pa ffff888100616c40: logic 48, phys. 177, len 21 [ 98.876476][ T8757] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 98.986148][ T8951] loop0: detected capacity change from 0 to 1024 [ 99.068559][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1337'. [ 99.089754][ T8959] team15: entered promiscuous mode [ 99.094939][ T8959] team15: entered allmulticast mode [ 99.104699][ T8965] loop2: detected capacity change from 0 to 512 [ 99.114368][ T8951] netlink: 'syz.0.1345': attribute type 2 has an invalid length. [ 99.122182][ T8951] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1345'. [ 99.153178][ T9004] siw: device registration error -23 [ 99.159863][ T8965] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1338: bad orphan inode 11862016 [ 99.203552][ T1035] hid-generic 0000:0000:0000.0047: hidraw0: HID v8.00 Device [syz0] on syz0 [ 99.250027][ T9019] rdma_rxe: rxe_newlink: failed to add lo [ 99.259366][ T9013] fido_id[9013]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.314709][ T9025] loop3: detected capacity change from 0 to 1024 [ 99.330976][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1344'. [ 99.347016][ T9029] team16: entered promiscuous mode [ 99.352289][ T9029] team16: entered allmulticast mode [ 99.422967][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 99.446860][ T9004] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1345: Allocating blocks 449-513 which overlap fs metadata [ 99.494591][ T9025] team17: entered promiscuous mode [ 99.499793][ T9025] team17: entered allmulticast mode [ 99.515746][ T1035] hid-generic 0000:0000:0000.0048: hidraw0: HID v8.00 Device [syz0] on syz0 [ 99.560689][ T1035] hid-generic 0000:0000:0000.0049: hidraw0: HID v8.00 Device [syz0] on syz0 [ 99.575243][ T9113] fido_id[9113]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.580856][ T2953] hid-generic 0000:0000:0000.004A: hidraw1: HID v8.00 Device [syz0] on syz0 [ 99.664826][ T3303] EXT4-fs unmount: 65 callbacks suppressed [ 99.664845][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.682148][ T9139] fido_id[9139]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.738429][ T9137] fido_id[9137]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.752158][ T3382] hid-generic 0000:0000:0000.004B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 99.782523][ T9160] loop5: detected capacity change from 0 to 512 [ 99.801068][ T8947] EXT4-fs (loop0): pa ffff888106dd63f0: logic 48, phys. 177, len 21 [ 99.802466][ T9162] fido_id[9162]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.809248][ T8947] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 99.851059][ T9171] loop3: detected capacity change from 0 to 1024 [ 99.879874][ T9160] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1354: casefold flag without casefold feature [ 99.905941][ T9171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.930586][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.948226][ T9160] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1354: couldn't read orphan inode 15 (err -117) [ 99.964810][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'. [ 99.975919][ T9160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.030226][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.058854][ T9190] loop2: detected capacity change from 0 to 1024 [ 100.077760][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 100.096279][ T9195] team18: entered promiscuous mode [ 100.101672][ T9195] team18: entered allmulticast mode [ 100.116802][ T9190] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 100.127821][ T9190] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 100.161785][ T9190] JBD2: no valid journal superblock found [ 100.167627][ T9190] EXT4-fs (loop2): Could not load journal inode [ 100.184164][ T9234] loop0: detected capacity change from 0 to 512 [ 100.192395][ T3382] hid-generic 0000:0000:0000.004C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 100.226267][ T9239] fido_id[9239]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.256175][ T9190] lo speed is unknown, defaulting to 1000 [ 100.267409][ T9234] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1360: bad orphan inode 11862016 [ 100.300799][ T9] hid-generic 0000:0000:0000.004D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 100.319076][ T9234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 100.345295][ T9259] fido_id[9259]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.393545][ T9190] lo speed is unknown, defaulting to 1000 [ 100.504958][ T9272] rdma_rxe: rxe_newlink: failed to add lo [ 100.525897][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.560773][ T3658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.624105][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.638924][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.646875][ T9315] loop0: detected capacity change from 0 to 128 [ 100.654347][ T9307] loop5: detected capacity change from 0 to 1024 [ 100.670784][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1375'. [ 100.675687][ T9315] EXT4-fs: Ignoring removed nobh option [ 100.738418][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 100.766660][ T9307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 100.794677][ T9315] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.807624][ T9332] loop2: detected capacity change from 0 to 2048 [ 100.815001][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1364'. [ 100.852336][ T9307] team17: entered promiscuous mode [ 100.854212][ T9332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.857678][ T9307] team17: entered allmulticast mode [ 100.879230][ T9332] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.1368: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 100.900049][ T9332] EXT4-fs (loop2): Remounting filesystem read-only [ 100.907198][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.936984][ T9379] loop0: detected capacity change from 0 to 1024 [ 100.948000][ T3658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.960221][ T9379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.987756][ T9379] netlink: 'syz.0.1369': attribute type 2 has an invalid length. [ 100.999913][ T9379] siw: device registration error -23 [ 101.007914][ T9393] team18: entered promiscuous mode [ 101.013238][ T9393] team18: entered allmulticast mode [ 101.041635][ T1035] hid_parser_main: 367 callbacks suppressed [ 101.041651][ T1035] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 101.055009][ T1035] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 101.062470][ T1035] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 101.070281][ T1035] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 101.072879][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.077770][ T1035] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 101.094208][ T1035] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 101.101853][ T1035] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 101.109313][ T1035] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 101.116832][ T1035] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 101.124314][ T1035] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 101.133329][ T1035] hid-generic 0000:0000:0000.004E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 101.206009][ T9451] loop2: detected capacity change from 0 to 512 [ 101.214325][ T9438] fido_id[9438]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.240311][ T9451] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1376: casefold flag without casefold feature [ 101.262824][ T9431] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1369: Allocating blocks 449-513 which overlap fs metadata [ 101.282127][ T9451] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1376: couldn't read orphan inode 15 (err -117) [ 101.317669][ T9451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.355519][ T9471] loop3: detected capacity change from 0 to 128 [ 101.362233][ T9471] EXT4-fs: Ignoring removed nobh option [ 101.380461][ T9471] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.438253][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.660829][ T9493] team15: entered promiscuous mode [ 101.666253][ T9493] team15: entered allmulticast mode [ 101.791619][ T9378] EXT4-fs (loop0): pa ffff888106dd6540: logic 48, phys. 177, len 21 [ 101.799774][ T9378] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 101.826807][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.850598][ T3375] hid-generic 0000:0000:0000.004F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 101.918060][ T9553] raw_sendmsg: syz.2.1390 forgot to set AF_INET. Fix it! [ 101.930695][ T9541] fido_id[9541]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.935624][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.959566][ T9556] loop3: detected capacity change from 0 to 128 [ 101.974758][ T9556] EXT4-fs: Ignoring removed nobh option [ 101.990702][ T9556] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.050345][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.135980][ T9581] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 102.144855][ T9581] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 102.186033][ T9588] team13: entered promiscuous mode [ 102.191325][ T9588] team13: entered allmulticast mode [ 102.196857][ T9583] lo speed is unknown, defaulting to 1000 [ 102.259641][ T10] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.306673][ T9638] netlink: 'syz.1.1402': attribute type 2 has an invalid length. [ 102.318215][ T9641] loop5: detected capacity change from 0 to 2048 [ 102.394546][ T9641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 102.426153][ T9583] lo speed is unknown, defaulting to 1000 [ 102.551296][ T9641] FAULT_INJECTION: forcing a failure. [ 102.551296][ T9641] name failslab, interval 1, probability 0, space 0, times 0 [ 102.564028][ T9641] CPU: 0 UID: 0 PID: 9641 Comm: syz.5.1403 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.564059][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.564075][ T9641] Call Trace: [ 102.564082][ T9641] [ 102.564091][ T9641] __dump_stack+0x1d/0x30 [ 102.564114][ T9641] dump_stack_lvl+0xe8/0x140 [ 102.564205][ T9641] dump_stack+0x15/0x1b [ 102.564226][ T9641] should_fail_ex+0x265/0x280 [ 102.564318][ T9641] should_failslab+0x8c/0xb0 [ 102.564350][ T9641] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 102.564404][ T9641] ? ext4_alloc_inode+0x38/0x310 [ 102.564431][ T9641] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 102.564480][ T9641] ext4_alloc_inode+0x38/0x310 [ 102.564583][ T9641] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 102.564618][ T9641] alloc_inode+0x3d/0x170 [ 102.564647][ T9641] iget_locked+0xf4/0x5c0 [ 102.564684][ T9641] __ext4_iget+0x152/0x2240 [ 102.564732][ T9641] ext4_lookup+0x161/0x390 [ 102.564873][ T9641] __lookup_slow+0x190/0x250 [ 102.564936][ T9641] lookup_slow+0x3c/0x60 [ 102.565002][ T9641] walk_component+0x1ec/0x220 [ 102.565040][ T9641] path_lookupat+0xfe/0x2a0 [ 102.565079][ T9641] filename_lookup+0x147/0x340 [ 102.565163][ T9641] path_listxattrat+0xd1/0x2a0 [ 102.565264][ T9641] __x64_sys_listxattr+0x4a/0x60 [ 102.565298][ T9641] x64_sys_call+0x2df7/0x2ff0 [ 102.565325][ T9641] do_syscall_64+0xd2/0x200 [ 102.565423][ T9641] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.565454][ T9641] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.565489][ T9641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.565535][ T9641] RIP: 0033:0x7fc9e58aeec9 [ 102.565554][ T9641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.565577][ T9641] RSP: 002b:00007fc9e4317038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 102.565608][ T9641] RAX: ffffffffffffffda RBX: 00007fc9e5b05fa0 RCX: 00007fc9e58aeec9 [ 102.565624][ T9641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 102.565713][ T9641] RBP: 00007fc9e4317090 R08: 0000000000000000 R09: 0000000000000000 [ 102.565729][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.565744][ T9641] R13: 00007fc9e5b06038 R14: 00007fc9e5b05fa0 R15: 00007ffc7658c968 [ 102.565768][ T9641] [ 102.858305][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 102.858335][ T29] audit: type=1400 audit(179.764:2096): avc: denied { wake_alarm } for pid=9653 comm="syz.2.1404" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.910809][ T9656] Driver unsupported XDP return value 0 on prog (id 930) dev N/A, expect packet loss! [ 102.926047][ T9654] loop2: detected capacity change from 0 to 512 [ 102.942561][ T3658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 103.012574][ T9654] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.113748][ T9654] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1404: iget: bad extended attribute block 1 [ 103.143219][ T9685] loop3: detected capacity change from 0 to 128 [ 103.164487][ T9685] EXT4-fs: Ignoring removed nobh option [ 103.192775][ T9654] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1404: couldn't read orphan inode 15 (err -117) [ 103.209039][ T9654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 103.241482][ T9685] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.254633][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.328956][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.366938][ T9708] loop3: detected capacity change from 0 to 128 [ 103.416702][ T29] audit: type=1326 audit(180.329:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296f24eec9 code=0x7ffc0000 [ 103.458993][ T29] audit: type=1326 audit(180.360:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f296f24eec9 code=0x7ffc0000 [ 103.482077][ T29] audit: type=1326 audit(180.360:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296f24eec9 code=0x7ffc0000 [ 103.504927][ T29] audit: type=1326 audit(180.360:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f296f24eec9 code=0x7ffc0000 [ 103.506331][ T9715] team19: entered promiscuous mode [ 103.527794][ T29] audit: type=1326 audit(180.360:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296f24eec9 code=0x7ffc0000 [ 103.532959][ T9715] team19: entered allmulticast mode [ 103.555834][ T29] audit: type=1326 audit(180.360:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f296f24eec9 code=0x7ffc0000 [ 103.583793][ T29] audit: type=1326 audit(180.360:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296f24eec9 code=0x7ffc0000 [ 103.592254][ T9755] netlink: 'syz.1.1407': attribute type 10 has an invalid length. [ 103.606718][ T29] audit: type=1326 audit(180.360:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f296f24eec9 code=0x7ffc0000 [ 103.637396][ T29] audit: type=1326 audit(180.360:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9710 comm="syz.1.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296f24eec9 code=0x7ffc0000 [ 103.670666][ T9711] lo speed is unknown, defaulting to 1000 [ 103.690623][ T9755] team0: Device hsr_slave_0 failed to register rx_handler [ 103.745312][ T9] hid-generic 0000:0000:0000.0051: hidraw0: HID v8.00 Device [syz0] on syz0 [ 103.786140][ T9782] netlink: 'syz.5.1417': attribute type 1 has an invalid length. [ 103.833891][ T9780] fido_id[9780]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.838174][ T9711] lo speed is unknown, defaulting to 1000 [ 103.860623][ T9788] __nla_validate_parse: 10 callbacks suppressed [ 103.860641][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 103.895022][ T9788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9788 comm=syz.3.1418 [ 103.912814][ T9791] tipc: Started in network mode [ 103.917816][ T9791] tipc: Node identity 32cb5e3c1655, cluster identity 4711 [ 103.925038][ T9791] tipc: Enabled bearer , priority 0 [ 103.952774][ T9797] loop3: detected capacity change from 0 to 512 [ 103.987481][ T9797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.017283][ T9797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1421'. [ 104.026325][ T9797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1421'. [ 104.074577][ T3291] udevd[3291]: failed to send result of seq 14087 to main daemon: Connection refused [ 104.110870][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.294380][ T9834] FAULT_INJECTION: forcing a failure. [ 104.294380][ T9834] name failslab, interval 1, probability 0, space 0, times 0 [ 104.307060][ T9834] CPU: 1 UID: 0 PID: 9834 Comm: syz.5.1425 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.307090][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.307121][ T9834] Call Trace: [ 104.307128][ T9834] [ 104.307137][ T9834] __dump_stack+0x1d/0x30 [ 104.307232][ T9834] dump_stack_lvl+0xe8/0x140 [ 104.307255][ T9834] dump_stack+0x15/0x1b [ 104.307275][ T9834] should_fail_ex+0x265/0x280 [ 104.307306][ T9834] ? sctp_add_bind_addr+0x71/0x1e0 [ 104.307338][ T9834] should_failslab+0x8c/0xb0 [ 104.307397][ T9834] __kmalloc_cache_noprof+0x4c/0x320 [ 104.307463][ T9834] sctp_add_bind_addr+0x71/0x1e0 [ 104.307500][ T9834] sctp_copy_local_addr_list+0x199/0x220 [ 104.307549][ T9834] sctp_copy_one_addr+0x7f/0x280 [ 104.307577][ T9834] sctp_bind_addr_copy+0x79/0x290 [ 104.307660][ T9834] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 104.307694][ T9834] sctp_connect_new_asoc+0x1c3/0x3a0 [ 104.307722][ T9834] sctp_sendmsg+0xf10/0x18d0 [ 104.307776][ T9834] ? selinux_socket_sendmsg+0x171/0x1b0 [ 104.307827][ T9834] ? __pfx_sctp_sendmsg+0x10/0x10 [ 104.307867][ T9834] inet_sendmsg+0xc2/0xd0 [ 104.307901][ T9834] __sock_sendmsg+0x102/0x180 [ 104.307940][ T9834] ____sys_sendmsg+0x345/0x4e0 [ 104.307972][ T9834] ___sys_sendmsg+0x17b/0x1d0 [ 104.308029][ T9834] __sys_sendmmsg+0x178/0x300 [ 104.308115][ T9834] __x64_sys_sendmmsg+0x57/0x70 [ 104.308164][ T9834] x64_sys_call+0x1c4a/0x2ff0 [ 104.308192][ T9834] do_syscall_64+0xd2/0x200 [ 104.308260][ T9834] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.308357][ T9834] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 104.308446][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.308473][ T9834] RIP: 0033:0x7fc9e58aeec9 [ 104.308555][ T9834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.308577][ T9834] RSP: 002b:00007fc9e4317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 104.308595][ T9834] RAX: ffffffffffffffda RBX: 00007fc9e5b05fa0 RCX: 00007fc9e58aeec9 [ 104.308608][ T9834] RDX: 0000000000000001 RSI: 0000200000000900 RDI: 0000000000000006 [ 104.308619][ T9834] RBP: 00007fc9e4317090 R08: 0000000000000000 R09: 0000000000000000 [ 104.308633][ T9834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.308654][ T9834] R13: 00007fc9e5b06038 R14: 00007fc9e5b05fa0 R15: 00007ffc7658c968 [ 104.308678][ T9834] [ 104.666205][ T1035] hid-generic 0000:0000:0000.0052: hidraw0: HID v8.00 Device [syz0] on syz0 [ 104.683022][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1428'. [ 104.807343][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1431'. [ 104.816487][ T9853] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1431'. [ 104.825588][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1431'. [ 104.846532][ T9853] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1431'. [ 104.907785][ T9872] loop3: detected capacity change from 0 to 512 [ 104.914886][ T9872] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 104.966947][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1441'. [ 104.977967][ T9872] EXT4-fs (loop3): invalid journal inode [ 105.000437][ T9881] team20: entered promiscuous mode [ 105.005641][ T9881] team20: entered allmulticast mode [ 105.010982][ T9880] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1440'. [ 105.040249][ T10] tipc: Node number set to 614358588 [ 105.062774][ T9925] loop2: detected capacity change from 0 to 128 [ 105.079185][ T9925] EXT4-fs: Ignoring removed nobh option [ 105.117559][ T9925] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.158667][ T9934] team19: entered promiscuous mode [ 105.163889][ T9934] team19: entered allmulticast mode [ 105.188668][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.600297][ T9994] loop2: detected capacity change from 0 to 1024 [ 105.629885][ T9994] EXT4-fs: Ignoring removed orlov option [ 105.654227][ T9994] EXT4-fs: Ignoring removed nobh option [ 105.659865][ T9994] EXT4-fs: Ignoring removed bh option [ 105.729444][ T9986] Set syz1 is full, maxelem 65536 reached [ 105.790596][ T9994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.823271][T10001] openvswitch: netlink: Message has 6 unknown bytes. [ 105.896749][ T1035] hid-generic 0000:0000:0000.0053: hidraw0: HID v8.00 Device [syz0] on syz0 [ 105.942355][ T9993] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1456: Allocating blocks 481-513 which overlap fs metadata [ 105.953201][T10017] lo speed is unknown, defaulting to 1000 [ 106.023703][T10017] lo speed is unknown, defaulting to 1000 [ 106.043599][ T9993] EXT4-fs (loop2): pa ffff888100616d20: logic 352, phys. 465, len 3 [ 106.051690][ T9993] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 106.082024][T10032] FAULT_INJECTION: forcing a failure. [ 106.082024][T10032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.095245][T10032] CPU: 1 UID: 0 PID: 10032 Comm: syz.3.1465 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.095280][T10032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.095296][T10032] Call Trace: [ 106.095304][T10032] [ 106.095311][T10032] __dump_stack+0x1d/0x30 [ 106.095339][T10032] dump_stack_lvl+0xe8/0x140 [ 106.095357][T10032] dump_stack+0x15/0x1b [ 106.095425][T10032] should_fail_ex+0x265/0x280 [ 106.095451][T10032] should_fail+0xb/0x20 [ 106.095506][T10032] should_fail_usercopy+0x1a/0x20 [ 106.095538][T10032] _copy_to_user+0x20/0xa0 [ 106.095605][T10032] simple_read_from_buffer+0xb5/0x130 [ 106.095631][T10032] proc_fail_nth_read+0x10e/0x150 [ 106.095668][T10032] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.095764][T10032] vfs_read+0x1a8/0x770 [ 106.095791][T10032] ? __rcu_read_unlock+0x4f/0x70 [ 106.095844][T10032] ? __fget_files+0x184/0x1c0 [ 106.095871][T10032] ksys_read+0xda/0x1a0 [ 106.095952][T10032] __x64_sys_read+0x40/0x50 [ 106.095974][T10032] x64_sys_call+0x27bc/0x2ff0 [ 106.096070][T10032] do_syscall_64+0xd2/0x200 [ 106.096099][T10032] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 106.096132][T10032] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.096188][T10032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.096213][T10032] RIP: 0033:0x7f58b4f1d8dc [ 106.096228][T10032] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.096360][T10032] RSP: 002b:00007f58b397f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.096381][T10032] RAX: ffffffffffffffda RBX: 00007f58b5175fa0 RCX: 00007f58b4f1d8dc [ 106.096397][T10032] RDX: 000000000000000f RSI: 00007f58b397f0a0 RDI: 0000000000000006 [ 106.096426][T10032] RBP: 00007f58b397f090 R08: 0000000000000000 R09: 0000000000000000 [ 106.096442][T10032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.096457][T10032] R13: 00007f58b5176038 R14: 00007f58b5175fa0 R15: 00007ffd0039c398 [ 106.096479][T10032] [ 106.097205][T10029] lo speed is unknown, defaulting to 1000 [ 106.322784][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.333611][T10029] lo speed is unknown, defaulting to 1000 [ 106.337483][T10061] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 106.753511][T10107] tipc: Can't bind to reserved service type 1 [ 106.812642][T10105] loop0: detected capacity change from 0 to 512 [ 106.826710][T10112] loop3: detected capacity change from 0 to 512 [ 106.834382][T10112] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.848213][T10105] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1476: casefold flag without casefold feature [ 106.863966][T10112] EXT4-fs (loop3): 1 truncate cleaned up [ 106.870049][T10112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.887541][T10105] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1476: couldn't read orphan inode 15 (err -117) [ 106.902212][T10112] netlink: 'syz.3.1480': attribute type 10 has an invalid length. [ 106.910917][T10105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.939167][T10112] dummy0: entered promiscuous mode [ 106.958649][T10112] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 107.016944][T10092] Set syz1 is full, maxelem 65536 reached [ 107.023751][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.066672][T10126] can0: slcan on ttyS3. [ 107.124210][T10126] can0 (unregistered): slcan off ttyS3. [ 107.226513][T10149] vhci_hcd: invalid port number 23 [ 107.255397][ T10] hid_parser_main: 136 callbacks suppressed [ 107.255415][ T10] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 107.269311][ T10] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 107.276860][ T10] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 107.288231][ T10] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 107.295703][ T10] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 107.303426][ T10] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 107.311164][ T10] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 107.318633][ T10] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 107.326148][ T10] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 107.333701][ T10] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 107.342284][ T10] hid-generic 0000:0000:0000.0054: hidraw0: HID v8.00 Device [syz0] on syz0 [ 107.367815][T10162] atomic_op ffff8881003da928 conn xmit_atomic 0000000000000000 [ 107.380870][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.419887][T10177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.427336][T10177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.445573][T10177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.453095][T10177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.495751][T10180] ªªªªªª: renamed from vlan0 (while UP) [ 107.533838][T10183] syzkaller0: entered promiscuous mode [ 107.539506][T10183] syzkaller0: entered allmulticast mode [ 107.575865][T10183] sctp: Trying to GSO but underlying device doesn't support it. [ 107.800740][T10201] unsupported nla_type 52263 [ 107.956967][T10206] loop0: detected capacity change from 0 to 128 [ 107.963796][T10206] EXT4-fs: Ignoring removed nobh option [ 107.971256][T10206] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.995619][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.109195][T10213] loop0: detected capacity change from 0 to 512 [ 108.120297][T10213] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1504: casefold flag without casefold feature [ 108.276229][T10213] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1504: couldn't read orphan inode 15 (err -117) [ 108.296164][T10213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.379684][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 108.379701][ T29] audit: type=1400 audit(185.326:2351): avc: denied { write } for pid=10218 comm="syz.3.1505" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 108.467188][ T29] audit: type=1400 audit(185.387:2352): avc: denied { ioctl } for pid=10218 comm="syz.3.1505" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 108.498472][T10220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.508279][ T29] audit: type=1400 audit(185.447:2353): avc: denied { read write } for pid=10222 comm="syz.1.1506" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 108.517788][T10220] tipc: Started in network mode [ 108.532707][ T29] audit: type=1400 audit(185.447:2354): avc: denied { open } for pid=10222 comm="syz.1.1506" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 108.537653][T10220] tipc: Node identity eedbd46cd9b5, cluster identity 4711 [ 108.561794][ T29] audit: type=1400 audit(185.447:2355): avc: denied { ioctl } for pid=10222 comm="syz.1.1506" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 108.594751][T10220] tipc: Enabled bearer , priority 0 [ 108.603421][T10256] syzkaller0: entered promiscuous mode [ 108.608925][T10256] syzkaller0: entered allmulticast mode [ 108.623837][ T29] audit: type=1400 audit(185.578:2356): avc: denied { ioctl } for pid=10262 comm="syz.1.1507" path="socket:[19268]" dev="sockfs" ino=19268 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.661039][T10218] tipc: Resetting bearer [ 108.683243][T10218] tipc: Disabling bearer [ 108.726096][ T29] audit: type=1400 audit(185.678:2357): avc: denied { setopt } for pid=10264 comm="syz.1.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.748453][ T29] audit: type=1400 audit(185.699:2358): avc: denied { write } for pid=10264 comm="syz.1.1508" path="socket:[19279]" dev="sockfs" ino=19279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.795299][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.806374][T10273] tipc: New replicast peer: 255.255.255.83 [ 108.812327][T10273] tipc: Enabled bearer , priority 10 [ 108.843710][ T29] audit: type=1400 audit(185.799:2359): avc: denied { connect } for pid=10276 comm="syz.5.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.875301][ T29] audit: type=1400 audit(185.819:2360): avc: denied { write } for pid=10276 comm="syz.5.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.895583][T10283] loop2: detected capacity change from 0 to 128 [ 108.908200][T10285] __nla_validate_parse: 6 callbacks suppressed [ 108.908220][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1511'. [ 108.910204][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1515'. [ 108.921181][T10283] EXT4-fs: Ignoring removed nobh option [ 108.936981][T10292] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 108.944178][T10283] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.980819][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.996412][T10311] loop5: detected capacity change from 0 to 1024 [ 108.997620][T10285] team14: entered promiscuous mode [ 109.008262][T10285] team14: entered allmulticast mode [ 109.013782][T10287] IPVS: Unknown mcast interface: ipvlan [ 109.024236][T10311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.052276][T10294] loop3: detected capacity change from 0 to 1024 [ 109.061090][T10294] EXT4-fs: Ignoring removed oldalloc option [ 109.067100][T10294] EXT4-fs: Ignoring removed orlov option [ 109.074309][T10294] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 109.106448][T10311] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.1517'. [ 109.118096][T10294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.124414][T10357] loop2: detected capacity change from 0 to 512 [ 109.134024][T10311] siw: device registration error -23 [ 109.141278][T10357] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.155512][T10287] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1515: Allocating blocks 497-513 which overlap fs metadata [ 109.158549][T10357] EXT4-fs (loop2): 1 truncate cleaned up [ 109.176242][T10357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.191739][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.225681][T10364] loop3: detected capacity change from 0 to 512 [ 109.232991][T10365] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 109.245698][T10364] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1522: casefold flag without casefold feature [ 109.258700][T10364] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1522: couldn't read orphan inode 15 (err -117) [ 109.279535][T10364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.419210][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.448893][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1529'. [ 109.457928][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1529'. [ 109.461079][T10394] loop2: detected capacity change from 0 to 128 [ 109.467097][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1529'. [ 109.473726][T10394] EXT4-fs: Ignoring removed nobh option [ 109.527641][T10394] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.540994][T10366] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1517: Allocating blocks 449-513 which overlap fs metadata [ 109.558413][T10392] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1529'. [ 109.594805][T10392] hsr_slave_0: left promiscuous mode [ 109.611331][T10392] hsr_slave_1: left promiscuous mode [ 109.629618][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.654892][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.676526][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1531'. [ 109.697016][T10406] loop2: detected capacity change from 0 to 1156 [ 109.715786][T10404] team20: entered promiscuous mode [ 109.721015][T10404] team20: entered allmulticast mode [ 109.726745][T10406] ISOFS: unable to read i-node block [ 109.732169][T10406] isofs_fill_super: get root inode failed [ 109.754162][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1530'. [ 109.780002][T10406] bridge1: entered promiscuous mode [ 109.814142][T10299] EXT4-fs (loop5): pa ffff888106dd6690: logic 48, phys. 177, len 21 [ 109.822330][T10299] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 109.888813][T10447] loop3: detected capacity change from 0 to 8192 [ 109.909773][T10454] bridge0: port 3(ªªªªªª) entered disabled state [ 109.916338][T10454] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.923534][T10454] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.938685][ T3678] tipc: Node number set to 930010220 [ 109.939785][ T3658] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.002929][T10454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.025466][T10454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.087438][T10454] team1: left promiscuous mode [ 110.092329][T10454] team1: left allmulticast mode [ 110.097274][T10454] team2: left promiscuous mode [ 110.102377][T10454] team2: left allmulticast mode [ 110.107325][T10454] team3: left promiscuous mode [ 110.112202][T10454] team3: left allmulticast mode [ 110.133818][T10454] erspan1: left allmulticast mode [ 110.142868][T10454] team4: left promiscuous mode [ 110.147844][T10454] team4: left allmulticast mode [ 110.152900][T10454] team5: left promiscuous mode [ 110.157673][T10454] team5: left allmulticast mode [ 110.162653][T10454] team6: left promiscuous mode [ 110.167469][T10454] team6: left allmulticast mode [ 110.172400][T10454] team7: left promiscuous mode [ 110.177178][T10454] team7: left allmulticast mode [ 110.182194][T10454] team8: left promiscuous mode [ 110.187050][T10454] team8: left allmulticast mode [ 110.192047][T10454] team9: left promiscuous mode [ 110.196914][T10454] team9: left allmulticast mode [ 110.201961][T10454] team10: left promiscuous mode [ 110.206826][T10454] team10: left allmulticast mode [ 110.211890][T10454] team11: left promiscuous mode [ 110.216805][T10454] team11: left allmulticast mode [ 110.221939][T10454] team12: left promiscuous mode [ 110.226803][T10454] team12: left allmulticast mode [ 110.231911][T10454] team13: left promiscuous mode [ 110.236783][T10454] team13: left allmulticast mode [ 110.243343][T10454] team14: left promiscuous mode [ 110.248274][T10454] team14: left allmulticast mode [ 110.253323][T10454] team15: left promiscuous mode [ 110.258197][T10454] team15: left allmulticast mode [ 110.263363][ T10] lo speed is unknown, defaulting to 1000 [ 110.269184][ T10] syz0: Port: 1 Link DOWN [ 110.275275][ T272] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.283925][ T272] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.306851][ T51] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.315280][ T51] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.326135][ T51] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.334584][ T51] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.344360][ T51] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.352820][ T51] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.514517][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 110.523384][T10488] FAULT_INJECTION: forcing a failure. [ 110.523384][T10488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.523437][T10488] CPU: 0 UID: 0 PID: 10488 Comm: syz.0.1543 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.523465][T10488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.523480][T10488] Call Trace: [ 110.523487][T10488] [ 110.523495][T10488] __dump_stack+0x1d/0x30 [ 110.523523][T10488] dump_stack_lvl+0xe8/0x140 [ 110.523556][T10488] dump_stack+0x15/0x1b [ 110.523579][T10488] should_fail_ex+0x265/0x280 [ 110.523650][T10488] should_fail+0xb/0x20 [ 110.523679][T10488] should_fail_usercopy+0x1a/0x20 [ 110.523713][T10488] _copy_from_user+0x1c/0xb0 [ 110.523755][T10488] sock_do_ioctl+0xe6/0x220 [ 110.523831][T10488] sock_ioctl+0x41b/0x610 [ 110.523869][T10488] ? __pfx_sock_ioctl+0x10/0x10 [ 110.523921][T10488] __se_sys_ioctl+0xcb/0x140 [ 110.523948][T10488] __x64_sys_ioctl+0x43/0x50 [ 110.523972][T10488] x64_sys_call+0x1816/0x2ff0 [ 110.524031][T10488] do_syscall_64+0xd2/0x200 [ 110.524070][T10488] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.524104][T10488] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 110.524186][T10488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.524216][T10488] RIP: 0033:0x7f6baa09eec9 [ 110.524235][T10488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.524285][T10488] RSP: 002b:00007f6ba8b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.524311][T10488] RAX: ffffffffffffffda RBX: 00007f6baa2f5fa0 RCX: 00007f6baa09eec9 [ 110.524423][T10488] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000007 [ 110.524440][T10488] RBP: 00007f6ba8b07090 R08: 0000000000000000 R09: 0000000000000000 [ 110.524457][T10488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.524473][T10488] R13: 00007f6baa2f6038 R14: 00007f6baa2f5fa0 R15: 00007ffd96d57338 [ 110.524499][T10488] [ 110.678353][T10494] loop0: detected capacity change from 0 to 1024 [ 110.730507][T10489] team21: entered promiscuous mode [ 110.735661][T10489] team21: entered allmulticast mode [ 110.759469][T10494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.776679][ T10] hid-generic 0000:0000:0000.0055: hidraw0: HID v8.00 Device [syz0] on syz0 [ 110.792044][T10542] FAULT_INJECTION: forcing a failure. [ 110.792044][T10542] name failslab, interval 1, probability 0, space 0, times 0 [ 110.804774][T10542] CPU: 0 UID: 0 PID: 10542 Comm: syz.5.1548 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.804800][T10542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.804813][T10542] Call Trace: [ 110.804820][T10542] [ 110.804830][T10542] __dump_stack+0x1d/0x30 [ 110.804854][T10542] dump_stack_lvl+0xe8/0x140 [ 110.804879][T10542] dump_stack+0x15/0x1b [ 110.804919][T10542] should_fail_ex+0x265/0x280 [ 110.804944][T10542] should_failslab+0x8c/0xb0 [ 110.804982][T10542] __kmalloc_noprof+0xa5/0x3e0 [ 110.805016][T10542] ? alloc_pipe_info+0x1c9/0x350 [ 110.805049][T10542] alloc_pipe_info+0x1c9/0x350 [ 110.805085][T10542] splice_direct_to_actor+0x592/0x680 [ 110.805115][T10542] ? kstrtouint_from_user+0x9f/0xf0 [ 110.805158][T10542] ? __pfx_direct_splice_actor+0x10/0x10 [ 110.805178][T10542] ? __rcu_read_unlock+0x4f/0x70 [ 110.805204][T10542] ? get_pid_task+0x96/0xd0 [ 110.805304][T10542] ? avc_policy_seqno+0x15/0x30 [ 110.805334][T10542] ? selinux_file_permission+0x1e4/0x320 [ 110.805363][T10542] do_splice_direct+0xda/0x150 [ 110.805388][T10542] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 110.805478][T10542] do_sendfile+0x380/0x650 [ 110.805518][T10542] __x64_sys_sendfile64+0x105/0x150 [ 110.805554][T10542] x64_sys_call+0x2bb0/0x2ff0 [ 110.805678][T10542] do_syscall_64+0xd2/0x200 [ 110.805716][T10542] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.805814][T10542] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 110.805863][T10542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.805924][T10542] RIP: 0033:0x7fc9e58aeec9 [ 110.805939][T10542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.805956][T10542] RSP: 002b:00007fc9e4317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 110.806007][T10542] RAX: ffffffffffffffda RBX: 00007fc9e5b05fa0 RCX: 00007fc9e58aeec9 [ 110.806023][T10542] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 110.806036][T10542] RBP: 00007fc9e4317090 R08: 0000000000000000 R09: 0000000000000000 [ 110.806048][T10542] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 110.806060][T10542] R13: 00007fc9e5b06038 R14: 00007fc9e5b05fa0 R15: 00007ffc7658c968 [ 110.806078][T10542] [ 111.030333][T10494] siw: device registration error -23 [ 111.140825][T10494] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1546: Allocating blocks 449-513 which overlap fs metadata [ 111.161744][T10562] lo speed is unknown, defaulting to 1000 [ 111.253440][T10562] lo speed is unknown, defaulting to 1000 [ 111.343181][T10569] team22: entered promiscuous mode [ 111.348474][T10569] team22: entered allmulticast mode [ 111.441127][T10614] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 111.516139][T10549] EXT4-fs (loop0): pa ffff888106dd6700: logic 48, phys. 177, len 21 [ 111.524250][T10549] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 111.558940][ T1035] hid-generic 0000:0000:0000.0056: hidraw0: HID v8.00 Device [syz0] on syz0 [ 111.570410][T10549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.706550][T10650] loop2: detected capacity change from 0 to 128 [ 111.920684][T10651] lo speed is unknown, defaulting to 1000 [ 111.950494][T10674] team23: entered promiscuous mode [ 111.955764][T10674] team23: entered allmulticast mode [ 112.035366][T10651] lo speed is unknown, defaulting to 1000 [ 112.183250][ T272] ================================================================== [ 112.191365][ T272] BUG: KCSAN: data-race in copy_process / free_pid [ 112.197888][ T272] [ 112.200232][ T272] read-write to 0xffffffff8685fc48 of 4 bytes by task 10761 on cpu 0: [ 112.208384][ T272] free_pid+0x77/0x180 [ 112.212455][ T272] free_pids+0x7a/0xb0 [ 112.216534][ T272] release_task+0x9a9/0xb60 [ 112.221049][ T272] do_exit+0xd81/0x15c0 [ 112.225217][ T272] call_usermodehelper_exec_async+0x247/0x250 [ 112.231319][ T272] ret_from_fork+0x11f/0x1b0 [ 112.235918][ T272] ret_from_fork_asm+0x1a/0x30 [ 112.240689][ T272] [ 112.243014][ T272] read to 0xffffffff8685fc48 of 4 bytes by task 272 on cpu 1: [ 112.250467][ T272] copy_process+0x14a6/0x2000 [ 112.255151][ T272] kernel_clone+0x16c/0x5c0 [ 112.259662][ T272] user_mode_thread+0x7d/0xb0 [ 112.264352][ T272] call_usermodehelper_exec_work+0x41/0x160 [ 112.270265][ T272] process_scheduled_works+0x4cb/0x9d0 [ 112.275736][ T272] worker_thread+0x582/0x770 [ 112.280343][ T272] kthread+0x489/0x510 [ 112.284413][ T272] ret_from_fork+0x11f/0x1b0 [ 112.289010][ T272] ret_from_fork_asm+0x1a/0x30 [ 112.293778][ T272] [ 112.296102][ T272] value changed: 0x80000104 -> 0x80000103 [ 112.301831][ T272] [ 112.304151][ T272] Reported by Kernel Concurrency Sanitizer on: [ 112.310301][ T272] CPU: 1 UID: 0 PID: 272 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.320116][ T272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 112.330175][ T272] Workqueue: events_unbound call_usermodehelper_exec_work [ 112.337305][ T272] ================================================================== [ 112.411878][T10713] loop2: detected capacity change from 0 to 1024 [ 112.483263][T10713] EXT4-fs: Ignoring removed orlov option [ 112.489115][T10713] ext4: Unknown parameter 'obj_role' [ 112.755558][ T51] bond0 (unregistering): Released all slaves [ 112.979081][ T51] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.036380][ T51] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.094695][ T51] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.153503][ T51] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.215672][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.226026][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.261882][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.272190][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.319665][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.330023][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.379143][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.389441][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.603566][ T51] bridge0: port 3(vlan0) entered disabled state [ 113.610483][ T51] bridge_slave_1: left allmulticast mode [ 113.616126][ T51] bridge_slave_1: left promiscuous mode [ 113.621849][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.629790][ T51] bridge_slave_0: left allmulticast mode [ 113.635514][ T51] bridge_slave_0: left promiscuous mode [ 113.641330][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.649954][ T51] bridge0: port 3(vlan0) entered disabled state [ 113.656975][ T51] bridge_slave_1: left allmulticast mode [ 113.662624][ T51] bridge_slave_1: left promiscuous mode [ 113.668412][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.678553][ T51] bridge_slave_0: left allmulticast mode [ 113.684229][ T51] bridge_slave_0: left promiscuous mode [ 113.689853][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.698721][ T51] ªªªªªª: left allmulticast mode [ 113.703684][ T51] veth0_vlan: left allmulticast mode [ 113.709076][ T51] ªªªªªª: left promiscuous mode [ 113.714216][ T51] bridge0: port 3(ªªªªªª) entered disabled state [ 113.721136][ T51] bridge_slave_1: left allmulticast mode [ 113.726802][ T51] bridge_slave_1: left promiscuous mode [ 113.732458][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.740119][ T51] bridge_slave_0: left allmulticast mode [ 113.745890][ T51] bridge_slave_0: left promiscuous mode [ 113.751592][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.862382][ T51] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.871145][ T51] bond_slave_0: left promiscuous mode [ 113.878323][ T51] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.887087][ T51] bond_slave_1: left promiscuous mode [ 113.893666][ T51] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 113.902085][ T51] dummy0: left promiscuous mode [ 113.907735][ T51] $Hÿ (unregistering): Released all slaves [ 113.916500][ T51] bond0 (unregistering): (slave batadv1): Releasing active interface [ 113.925433][ T51] bond0 (unregistering): Released all slaves [ 113.933842][ T51] bond1 (unregistering): Released all slaves [ 114.046904][ T57] smc: removing ib device syz2 [ 114.052056][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.062806][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.072296][ T51] bond0 (unregistering): Released all slaves [ 114.081082][ T51] bond1 (unregistering): (slave batadv1): Releasing active interface [ 114.090084][ T51] bond1 (unregistering): Released all slaves [ 114.136108][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.145405][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.154245][ T51] bond0 (unregistering): Released all slaves [ 114.162630][ T51] bond1 (unregistering): (slave batadv1): Releasing active interface [ 114.171058][ T51] bond1 (unregistering): Released all slaves [ 114.271469][ T51] tipc: Disabling bearer [ 114.276648][ T51] tipc: Left network mode [ 114.281940][ T51] tipc: Disabling bearer [ 114.286959][ T51] tipc: Left network mode [ 114.387094][ T51] hsr_slave_0: left promiscuous mode [ 114.393035][ T51] hsr_slave_1: left promiscuous mode [ 114.400377][ T51] hsr_slave_0: left promiscuous mode [ 114.406120][ T51] hsr_slave_1: left promiscuous mode [ 114.411705][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.419117][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.426604][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.434044][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.443239][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.450898][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.462259][ T51] veth1_macvtap: left promiscuous mode [ 114.467781][ T51] veth0_macvtap: left promiscuous mode [ 114.473328][ T51] veth1_vlan: left promiscuous mode [ 114.479377][ T51] veth1_macvtap: left promiscuous mode [ 114.484927][ T51] veth0_macvtap: left promiscuous mode [ 114.490602][ T51] veth1_vlan: left promiscuous mode [ 114.631403][ T51] team0 (unregistering): Port device team_slave_1 removed [ 114.641009][ T51] team0 (unregistering): Port device team_slave_0 removed [ 114.671116][ T57] smc: removing ib device sz1 [ 114.771312][ T51] team0 (unregistering): Port device team_slave_1 removed [ 114.781640][ T51] team0 (unregistering): Port device team_slave_0 removed [ 114.866913][ T51] team0 (unregistering): Port device team_slave_1 removed [ 114.876726][ T51] team0 (unregistering): Port device team_slave_0 removed [ 114.884164][ T1879] smc: removing ib device syz! [ 114.910347][ T3375] lo speed is unknown, defaulting to 1000 [ 114.916332][ T3375] sz1: Port: 1 Link DOWN [ 115.646667][ T51] IPVS: stop unused estimator thread 0... [ 117.336273][ T1879] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.383680][ T1879] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.452145][ T1879] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.490982][ T1879] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.541276][ T1879] bridge0: port 3(vlan0) entered disabled state [ 117.548244][ T1879] bridge_slave_1: left allmulticast mode [ 117.553933][ T1879] bridge_slave_1: left promiscuous mode [ 117.559601][ T1879] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.567887][ T1879] bridge_slave_0: left allmulticast mode [ 117.573548][ T1879] bridge_slave_0: left promiscuous mode [ 117.579262][ T1879] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.647336][ T1879] tipc: Disabling bearer [ 117.686176][ T1879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.696427][ T1879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.705930][ T1879] bond0 (unregistering): Released all slaves [ 117.754051][ T1879] tipc: Left network mode [ 117.761154][ T1879] hsr_slave_0: left promiscuous mode [ 117.766917][ T1879] hsr_slave_1: left promiscuous mode [ 117.772585][ T1879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.779972][ T1879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.787687][ T1879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.795101][ T1879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.805646][ T1879] veth1_macvtap: left promiscuous mode [ 117.811130][ T1879] veth0_macvtap: left promiscuous mode [ 117.816720][ T1879] veth1_vlan: left promiscuous mode [ 117.918499][ T1879] team0 (unregistering): Port device team_slave_1 removed [ 117.928149][ T1879] team0 (unregistering): Port device team_slave_0 removed [ 117.954114][ T1879] team0 (unregistering): Port device dummy0 removed [ 117.965783][ T10] infiniband syz1: ib_query_port failed (-19)