last executing test programs: 10.211978363s ago: executing program 0 (id=592): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='page_pool_release\x00', r7, 0x0, 0x7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 4.06072649s ago: executing program 4 (id=634): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(r5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='page_pool_release\x00', r6, 0x0, 0x7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) 3.797903686s ago: executing program 4 (id=636): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=f']) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x94, 0x0, 0x1, 0x1}, {0x6, 0x0, 0x0, 0xffffffff}]}) syz_read_part_table(0x4080, &(0x7f0000000000)="$eJzszz9KA0EcBeC3JpEoUbAWxEWwFO2scotcQDyCjY0G03kMwSZ4AG/gkUwjI2GX1cRWQeX7in37e/tnZsKvcP/a3lwuL5td/3K9+t5Om88XT3tJDuu8lVIyTNJf++WiJKdnGWwPNzJKcvV11cn8e08BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8JdP1orc6Pra5n9nNOOelcXvXS9U+qU+S3Y8PFiXZ6qZ+E5P5D2wdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjvSillmdWnbpCk35RVMu36UR6OMhsfVBkm9fE7+3NoAwAIAwEwwTAh87A3CvEJoQPU3ama/uf/lP3Omf/qpGWNphUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBGAQAA//88nie/") socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0xff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000030000000085000000a90000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, r7, 0x5e5a000) 3.340677401s ago: executing program 0 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES16=r1], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) (async) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) (async) close(r6) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) (async) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) (async) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r10 = socket$nl_route(0x10, 0x3, 0x0) (async) open$dir(&(0x7f0000000180)='./file1\x00', 0x800, 0x24) open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x81001) (async) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x74, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x0, 0x8, 0x2, 0xfffff001, 0x7, 0x2, 0x4, 0xff, 0x9, 0x7, 0x19, 0x15, 0xdb, 0x6, 0xf21}}]}}, @TCA_RATE={0x6, 0x5, {0xa2, 0x1c}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/185, 0xb9) 3.137311571s ago: executing program 0 (id=639): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r6) 3.030838561s ago: executing program 0 (id=641): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad7, 0x80, 0x1, 0x8089}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000dc0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x12345}) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 2.807358073s ago: executing program 2 (id=642): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) pause() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c000000040000000100008402f1ffff09000000030000000000000100000000000000010500000020000000000000000000000b02000000006100302e616100615f2e00"], 0x0, 0x58}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, 0x0, &(0x7f0000000080)=r5}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") open(&(0x7f0000000300)='./bus/file0\x00', 0x16000, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2f5, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) uname(&(0x7f0000001600)=""/255) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='afs_cb_miss\x00', 0xffffffffffffffff, 0x0, 0xd4}, 0x18) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="66bb00fe0000010400000000000000000000131c", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000200010000000800010002000000140003007866726d3000"/64], 0x58}}, 0x0) 2.513403132s ago: executing program 0 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRES8=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="33d04e000001000418110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='erofs_fill_inode\x00', r3, 0x0, 0xd}, 0xfffffffffffffcaf) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x266200, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40841}, 0x884) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x4000009, 0x7}, 0x100, 0xa88, 0x8406, 0xc, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, 0x0) syz_io_uring_setup(0x210a, &(0x7f0000000400)={0x0, 0x5eda, 0x80, 0x2, 0x1}, &(0x7f0000000040), &(0x7f00000003c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x24803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001500)=ANY=[@ANYBLOB="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"/4118], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x403, 0x0, 0x2}, 0x10}, 0x94) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x1}, 0x10) 2.258355208s ago: executing program 0 (id=648): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='page_pool_release\x00', r7, 0x0, 0x7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.943770978s ago: executing program 4 (id=654): r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x40) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xa0000007}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000313400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff", 0xe) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a0000000500000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000580), 0x20075, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000002380)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r1, @ANYBLOB="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", @ANYRES16=r0, @ANYRES8=r4], &(0x7f00000003c0)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x1, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r9 = fcntl$dupfd(r8, 0x0, r8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.942308129s ago: executing program 2 (id=655): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r3, 0x541b, 0xf0ff1f00000002) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000001b518190000f0438d341895", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r9 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r10, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r10, r1, 0x0, 0x3ffff) sendfile(r10, r1, 0x0, 0x7ffffffffffffffd) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) 1.609881721s ago: executing program 3 (id=659): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRES8=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="33d04e000001000418110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='erofs_fill_inode\x00', r3, 0x0, 0xd}, 0xfffffffffffffcaf) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x266200, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x884) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x4000009, 0x7}, 0x100, 0xa88, 0x8406, 0xc, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, 0x0) syz_io_uring_setup(0x210a, &(0x7f0000000400)={0x0, 0x5eda, 0x80, 0x2, 0x1}, &(0x7f0000000040), &(0x7f00000003c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x24803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001500)=ANY=[@ANYBLOB="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"/4118], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x403, 0x0, 0x2}, 0x10}, 0x94) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x1}, 0x10) 1.447199348s ago: executing program 1 (id=660): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad7, 0x80, 0x1, 0x8089}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000dc0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x12345}) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 1.437887298s ago: executing program 3 (id=661): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='page_pool_release\x00', r7, 0x0, 0x7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) 1.42059973s ago: executing program 2 (id=662): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @initdev, @dev}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 1.281158064s ago: executing program 2 (id=663): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r5) 1.267914646s ago: executing program 3 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095", @ANYRESDEC=r0, @ANYRESOCT=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x138500, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f6826c190000000000000000852000000400000018110000", @ANYRES32=r1, @ANYBLOB='\t\x00\x00\x00F\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB="4b52edddc1cf7a2d44a9423fe7df0aceb0585f9ff665ca6158816192839e66536a765735696146d5444e47d2310e826ebdbe285169d99bf6f1c60f1d77e393dc3f1c36a87f55e8135f9f08776e4511f23137e4b44e9cff54db1fc89374b05fae0d8eb458b3fedf7ae7dfd5b0d92f4721d8bb02666055c76a3335af2e5d2952e4f8dba646a2a9e05fb7338328a15be8a59bfc8396eec3aad2f75e4c4fb0361aee6e7edf4674d2e651c789de0786399874efeb52b183ab40022c6db02d04eaa551d2bbcbb43144aff379462fb49e2b4a330d19388463ec9be857f174b5e39100b26422ffd320a3788f"], 0x48) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 1.240647218s ago: executing program 3 (id=665): r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x40) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xa0000007}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000313400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff", 0xe) socket$inet6(0xa, 0x800000000000002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000580), 0x20075, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000954c1389edc1a3d22c61616428bd18353c61b2d43beb9fd610acfbfcca592346f3ac680c167daa77de3c4bd21b969319ca2fafb89460ecc07bb4ee867ab404085e89bcd49dd99310d55d609f1945caf668a48d3a66bd06f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000002380)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r1, @ANYBLOB="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", @ANYRES16=r0, @ANYRES8=r4], &(0x7f00000003c0)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x1, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r10 = fcntl$dupfd(r9, 0x0, r9) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.175833494s ago: executing program 1 (id=666): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000001040)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001080), &(0x7f00000010c0), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000001100)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090523bd7000fddbdf25022000cb", @ANYRES32=r5, @ANYBLOB="08000400640101020800080000faff0008000200e000000208000400ac14140508000100ac1414220800090003"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x48000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001380)={'syztnl1\x00', &(0x7f00000012c0)={'syztnl1\x00', 0x0, 0x1, 0x80, 0xf0, 0x7, {{0x18, 0x4, 0x1, 0x3d, 0x60, 0x64, 0x0, 0x4, 0x29, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x24, 0x45, 0x3, 0x8, [{@empty, 0x1000}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@loopback, 0x72}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x1c, 0x19, 0x3, 0x2, [{@loopback, 0x2}, {@loopback, 0x8001}, {@empty, 0x9}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000013c0)=0x0, &(0x7f0000001400)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001680)={&(0x7f0000000cc0)={0x238, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x80005}, 0x40) timer_create(0x7, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000bc0)={[{@grpid}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@grpjquota}, {@nogrpid}, {@auto_da_alloc}, {@dioread_nolock}, {@grpquota}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000005000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b876f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200000000c3001c00bd61c9f9b71032562c07035dfc7100aa532e33060a91f35ca143c9ade016795df63801d1bc6afef4c74e68b97301c52d1925affe72793b3bdc7c2de321567d172d7de11ca29e2c6ccfedaea31a986c0c1a62ea4238e6ffbda7514017f269b3cc4af51b6222519f93ddb4034bfa1e7da4aedef2c9ddb01db99ee28bccd3c6c6506a7b9091df84ed0854d7583e4e52dd9310a6cc401f5d614f548331c3590b7cb16dfb5152fce5bac3000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x4}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, 0x0, 0x2, 0x8}}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 1.094152413s ago: executing program 3 (id=667): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0xf0ff1f00000002) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000001b518190000f0438d341895", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r8 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r9, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r9, r0, 0x0, 0x3ffff) sendfile(r9, r0, 0x0, 0x7ffffffffffffffd) 999.789302ms ago: executing program 1 (id=668): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7472616e733d66672c7266646eb53d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000080)={0x3, 0x3, 0x7, 0xfeee, 0x2, "ee379d019ed09842717b20a96c0b2b773c5867", 0x4, 0x8}) writev(r3, &(0x7f0000003500)=[{&(0x7f0000002180)="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", 0x29c}], 0x1) unshare(0x2040400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x89) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet(0x2, 0x2, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x70bd25, 0x21dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) sendmsg$inet(r6, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 942.280968ms ago: executing program 3 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0048000000090000000c0000000000000700000000060000e0ff000007000000000500000002000093020000000300000061968f41a30000000a0000000200000003000000020000000000000a0500000000d61f0f"], &(0x7f0000000340)=""/242, 0x69, 0xf2, 0x4000000, 0x1, 0x10000, @value=r1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000000)="8cecdb43a69d49f24c69317634e908af3f6bd10b0616655bfce45dd10b781a5e625d270683bff140daf54783bb9c5b0af3", &(0x7f0000000040)=""/118}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0xa000000, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4040014) 864.013125ms ago: executing program 2 (id=670): socket(0x10, 0x803, 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0x178) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000a5c24da1b666b1d3be758a85a52ed3e5753e44ed5f93961af68f0c165b32bcd72edd63daad50b8f995bea6e3ff9fd5fc4a6e6ef58135"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) 759.167606ms ago: executing program 1 (id=671): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRES8=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="33d04e000001000418110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='erofs_fill_inode\x00', r3, 0x0, 0xd}, 0xfffffffffffffcaf) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x266200, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x884) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x4000009, 0x7}, 0x100, 0xa88, 0x8406, 0xc, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, 0x0) syz_io_uring_setup(0x210a, &(0x7f0000000400)={0x0, 0x5eda, 0x80, 0x2, 0x1}, &(0x7f0000000040), &(0x7f00000003c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x24803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001500)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d3c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a57304eb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165564891f7672701a73ec125b770c673d468da15c209e303876b164ec679324aee482a6ccc2bca7a2900"/4118], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x403, 0x0, 0x2}, 0x10}, 0x94) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x1}, 0x10) 602.308221ms ago: executing program 1 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 455.539506ms ago: executing program 4 (id=673): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r6) 454.810616ms ago: executing program 1 (id=683): r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x40) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xa0000007}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000313400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff", 0xe) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a0000000500000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000580), 0x20075, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000002380)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r1, @ANYBLOB="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", @ANYRES16=r0, @ANYRES8=r4], &(0x7f00000003c0)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x1, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r9 = fcntl$dupfd(r8, 0x0, r8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 95.471431ms ago: executing program 4 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) close(0x3) 29.289947ms ago: executing program 4 (id=675): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='page_pool_release\x00', r7, 0x0, 0x7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) 0s ago: executing program 2 (id=676): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad7, 0x80, 0x1, 0x8089}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000dc0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x12345}) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): ors = 1 limit=128 [ 69.351575][ T4666] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 69.364861][ T4662] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 69.443174][ T4698] netlink: 'syz.4.307': attribute type 10 has an invalid length. [ 69.445697][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 69.461967][ T4698] team0: Device ipvlan0 failed to register rx_handler [ 69.472787][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 69.492086][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 69.492382][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 69.520776][ T4704] loop4: detected capacity change from 0 to 128 [ 69.611695][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 69.649017][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 69.744290][ T4713] loop1: detected capacity change from 0 to 128 [ 69.954042][ T3461] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.025476][ T164] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.078359][ T164] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.097272][ T164] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.107469][ T164] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.141969][ T4729] loop2: detected capacity change from 0 to 128 [ 70.281669][ T4731] netlink: 'syz.3.320': attribute type 10 has an invalid length. [ 70.290825][ T4731] team0: Device ipvlan0 failed to register rx_handler [ 70.728669][ T4740] __nla_validate_parse: 3 callbacks suppressed [ 70.728687][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 70.776610][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 70.797604][ T4741] netlink: 'syz.2.323': attribute type 10 has an invalid length. [ 70.816006][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 70.830052][ T4741] team0: Device ipvlan0 failed to register rx_handler [ 70.876865][ T4746] loop2: detected capacity change from 0 to 128 [ 71.083123][ T4753] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.119931][ T4753] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.197323][ T4758] 9pnet: Could not find request transport: f [ 71.209805][ T4753] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.279651][ T4753] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.384112][ T4758] loop2: detected capacity change from 0 to 32768 [ 71.439306][ T4758] loop2: p1 p2 p3 < p5 p6 > [ 71.456358][ T4758] loop2: p2 size 16775168 extends beyond EOD, truncated [ 71.481182][ T4758] loop2: p5 start 4294970168 is beyond EOD, truncated [ 71.541059][ T3449] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.574616][ T3449] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.594287][ T3449] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.614815][ T3449] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.754024][ T4767] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.849858][ T4767] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.910234][ T4767] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.958035][ T3501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.970176][ T4767] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.008799][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 72.008829][ T29] audit: type=1326 audit(1760601960.935:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abc60eec9 code=0x7ffc0000 [ 72.044656][ T4776] loop3: detected capacity change from 0 to 512 [ 72.050718][ T4778] loop0: detected capacity change from 0 to 128 [ 72.068728][ T4776] EXT4-fs: Ignoring removed oldalloc option [ 72.075026][ T4776] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.095249][ T164] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.118595][ T164] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.138945][ T29] audit: type=1326 audit(1760601960.965:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5abc60eec9 code=0x7ffc0000 [ 72.162274][ T164] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.162275][ T29] audit: type=1326 audit(1760601960.965:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abc60eec9 code=0x7ffc0000 [ 72.170792][ T164] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.193733][ T29] audit: type=1326 audit(1760601960.965:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5abc60eec9 code=0x7ffc0000 [ 72.225128][ T29] audit: type=1326 audit(1760601960.965:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5abc60eec9 code=0x7ffc0000 [ 72.248417][ T29] audit: type=1326 audit(1760601960.965:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5abc60eec9 code=0x7ffc0000 [ 72.271720][ T29] audit: type=1326 audit(1760601960.965:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5abc60ef03 code=0x7ffc0000 [ 72.294957][ T29] audit: type=1326 audit(1760601960.965:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5abc60d97f code=0x7ffc0000 [ 72.318114][ T29] audit: type=1326 audit(1760601960.965:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5abc60ef57 code=0x7ffc0000 [ 72.341349][ T29] audit: type=1326 audit(1760601960.965:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5abc60d710 code=0x7ffc0000 [ 72.378561][ T4776] EXT4-fs (loop3): 1 truncate cleaned up [ 72.385390][ T4776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.423465][ T4784] loop4: detected capacity change from 0 to 128 [ 72.577098][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 72.627309][ T4778] bio_check_eod: 6 callbacks suppressed [ 72.627326][ T4778] syz.0.335: attempt to access beyond end of device [ 72.627326][ T4778] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 72.646329][ T4778] buffer_io_error: 6 callbacks suppressed [ 72.646346][ T4778] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 72.652026][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 72.692962][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 72.711350][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 72.742094][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.758321][ T4795] loop1: detected capacity change from 0 to 512 [ 72.765267][ T4795] EXT4-fs: Ignoring removed oldalloc option [ 72.788162][ T4795] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.838842][ T4795] EXT4-fs (loop1): 1 truncate cleaned up [ 72.845135][ T4795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.926289][ T4807] loop3: detected capacity change from 0 to 512 [ 72.942102][ T4807] EXT4-fs: Ignoring removed oldalloc option [ 72.959290][ T4807] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.971676][ T4807] EXT4-fs (loop3): 1 truncate cleaned up [ 72.972099][ T4807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.125869][ T4813] loop0: detected capacity change from 0 to 128 [ 73.512288][ T4814] syz.0.345: attempt to access beyond end of device [ 73.512288][ T4814] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 73.525656][ T4814] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 73.538657][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.552535][ T4814] syz.0.345: attempt to access beyond end of device [ 73.552535][ T4814] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 73.566029][ T4814] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 73.674712][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.703958][ T4823] loop3: detected capacity change from 0 to 128 [ 73.739717][ T4825] loop1: detected capacity change from 0 to 128 [ 74.010107][ T4830] loop0: detected capacity change from 0 to 512 [ 74.028963][ T4830] EXT4-fs: Ignoring removed oldalloc option [ 74.045802][ T4830] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.089117][ T4830] EXT4-fs (loop0): 1 truncate cleaned up [ 74.105479][ T4830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.200988][ T4823] syz.3.348: attempt to access beyond end of device [ 74.200988][ T4823] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 74.214456][ T4823] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 74.236405][ T4823] syz.3.348: attempt to access beyond end of device [ 74.236405][ T4823] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 74.249906][ T4823] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 74.360298][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 74.370932][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 74.381165][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 74.393467][ T4825] syz.1.349: attempt to access beyond end of device [ 74.393467][ T4825] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 74.406910][ T4825] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 74.417009][ T4826] syz.1.349: attempt to access beyond end of device [ 74.417009][ T4826] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 74.430393][ T4826] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 74.444545][ T4826] syz.1.349: attempt to access beyond end of device [ 74.444545][ T4826] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 74.458009][ T4826] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 74.473296][ T4849] loop3: detected capacity change from 0 to 512 [ 74.480469][ T4849] EXT4-fs: Ignoring removed oldalloc option [ 74.491128][ T4849] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.511763][ T4849] EXT4-fs (loop3): 1 truncate cleaned up [ 74.518499][ T4849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.295375][ T4982] loop4: detected capacity change from 0 to 128 [ 75.362113][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.377300][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.495057][ T4991] 9pnet: Could not find request transport: f [ 75.636936][ T5001] 9pnet: Could not find request transport: f [ 75.644478][ T4999] netlink: 'syz.0.364': attribute type 10 has an invalid length. [ 75.664174][ T4999] team0: Device ipvlan0 failed to register rx_handler [ 75.720232][ T5004] loop1: detected capacity change from 0 to 128 [ 75.948338][ T5016] tipc: Started in network mode [ 75.953262][ T5016] tipc: Node identity a611f430ba3d, cluster identity 4711 [ 75.960480][ T5016] tipc: Enabled bearer , priority 0 [ 75.969325][ T5016] tipc: Disabling bearer [ 76.005354][ T5019] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.081324][ T4991] loop4: detected capacity change from 0 to 32768 [ 76.121989][ T3301] loop4: p1 p2 p3 < p5 p6 > [ 76.128088][ T3301] loop4: p2 size 16775168 extends beyond EOD, truncated [ 76.137992][ T3301] loop4: p5 start 4294970168 is beyond EOD, truncated [ 76.169179][ T5019] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.180294][ T5024] loop2: detected capacity change from 0 to 128 [ 76.194656][ T4991] loop4: p1 p2 p3 < p5 p6 > [ 76.214903][ T4991] loop4: p2 size 16775168 extends beyond EOD, truncated [ 76.229232][ T5021] tipc: Enabled bearer , priority 0 [ 76.238377][ T5021] tipc: Disabling bearer [ 76.252747][ T4991] loop4: p5 start 4294970168 is beyond EOD, truncated [ 76.279954][ T5019] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.315131][ T5026] loop2: detected capacity change from 0 to 128 [ 76.356026][ T5001] loop3: detected capacity change from 0 to 32768 [ 76.366336][ T5019] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.460994][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.494366][ T292] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.513714][ T292] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.545731][ T292] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.759333][ T5033] loop1: detected capacity change from 0 to 512 [ 76.766197][ T5033] EXT4-fs: Ignoring removed oldalloc option [ 76.773341][ T5033] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.794541][ T5033] EXT4-fs (loop1): 1 truncate cleaned up [ 76.818539][ T5033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.892023][ T5026] syz.2.371: attempt to access beyond end of device [ 76.892023][ T5026] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 76.905430][ T5026] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 76.914693][ T5026] syz.2.371: attempt to access beyond end of device [ 76.914693][ T5026] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 76.928097][ T5026] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 77.124496][ T5038] netlink: 'syz.4.374': attribute type 10 has an invalid length. [ 77.134933][ T5038] team0: Device ipvlan0 failed to register rx_handler [ 77.190670][ T5046] loop2: detected capacity change from 0 to 512 [ 77.197574][ T5046] EXT4-fs: Ignoring removed oldalloc option [ 77.204271][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 77.204317][ T29] audit: type=1326 audit(1760601966.105:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 77.233847][ T29] audit: type=1326 audit(1760601966.105:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 77.257210][ T29] audit: type=1326 audit(1760601966.105:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 77.280588][ T29] audit: type=1326 audit(1760601966.105:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 77.280752][ T29] audit: type=1326 audit(1760601966.105:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 77.280823][ T29] audit: type=1326 audit(1760601966.105:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 77.320881][ T5046] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.327774][ T29] audit: type=1326 audit(1760601966.105:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09ef3cef03 code=0x7ffc0000 [ 77.327802][ T29] audit: type=1326 audit(1760601966.115:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09ef3cd97f code=0x7ffc0000 [ 77.327828][ T29] audit: type=1326 audit(1760601966.115:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f09ef3cef57 code=0x7ffc0000 [ 77.374343][ T5046] EXT4-fs (loop2): 1 truncate cleaned up [ 77.384160][ T29] audit: type=1326 audit(1760601966.115:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09ef3cd710 code=0x7ffc0000 [ 77.417939][ T5046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.547067][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.677209][ T5068] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.743075][ T5071] tipc: Enabled bearer , priority 0 [ 77.762543][ T5068] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.787558][ T5071] tipc: Disabling bearer [ 77.819632][ T5068] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.889642][ T5068] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.964431][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.978300][ T5100] loop4: detected capacity change from 0 to 512 [ 77.980534][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.985177][ T5100] EXT4-fs: Ignoring removed oldalloc option [ 77.995338][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.012468][ T5100] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.023030][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.032402][ T5100] EXT4-fs (loop4): 1 truncate cleaned up [ 78.049997][ T5100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.135847][ T5114] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.180444][ T5114] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.208987][ T5124] tipc: Enabled bearer , priority 0 [ 78.217394][ T5124] tipc: Disabling bearer [ 78.240262][ T5114] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.309816][ T5114] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.327175][ T5142] loop3: detected capacity change from 0 to 512 [ 78.334287][ T5142] EXT4-fs: Ignoring removed oldalloc option [ 78.352648][ T5142] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.364848][ T5142] EXT4-fs (loop3): 1 truncate cleaned up [ 78.371283][ T5142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.742504][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.744557][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.779182][ T5207] loop2: detected capacity change from 0 to 128 [ 78.917037][ T5210] 9pnet: Could not find request transport: f [ 79.063351][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.224377][ T5214] netlink: 'syz.3.389': attribute type 10 has an invalid length. [ 79.281008][ T5214] team0: Device ipvlan0 failed to register rx_handler [ 79.316493][ T5210] loop4: detected capacity change from 0 to 32768 [ 79.372227][ T5223] loop0: detected capacity change from 0 to 512 [ 79.386795][ T5225] loop3: detected capacity change from 0 to 512 [ 79.393630][ T3301] loop4: p1 p2 p3 < p5 p6 > [ 79.400398][ T3301] loop4: p2 size 16775168 extends beyond EOD, truncated [ 79.408775][ T5223] EXT4-fs: Ignoring removed oldalloc option [ 79.424732][ T5223] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.441125][ T3301] loop4: p5 start 4294970168 is beyond EOD, truncated [ 79.449313][ T5225] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.391: error while reading EA inode 32 err=-116 [ 79.470302][ T5210] loop4: p1 p2 p3 < p5 p6 > [ 79.479221][ T5223] EXT4-fs (loop0): 1 truncate cleaned up [ 79.485287][ T5223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.498586][ T5210] loop4: p2 size 16775168 extends beyond EOD, truncated [ 79.506312][ T5225] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.391: error while reading EA inode 32 err=-116 [ 79.521440][ T5210] loop4: p5 start 4294970168 is beyond EOD, truncated [ 79.538458][ T5225] EXT4-fs (loop3): 1 orphan inode deleted [ 79.548060][ T5225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.568194][ T5207] syz.2.388: attempt to access beyond end of device [ 79.568194][ T5207] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 79.581595][ T5207] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 79.592568][ T5225] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.391: deleted inode referenced: 15 [ 79.608627][ T5209] syz.2.388: attempt to access beyond end of device [ 79.608627][ T5209] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 79.621997][ T5209] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 79.709488][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.737119][ T5209] syz.2.388: attempt to access beyond end of device [ 79.737119][ T5209] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 79.750609][ T5209] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 79.885696][ T5231] tipc: Enabled bearer , priority 0 [ 79.895831][ T5231] tipc: Disabling bearer [ 80.020902][ T5236] 9pnet: Could not find request transport: f [ 80.054682][ T5240] loop2: detected capacity change from 0 to 128 [ 80.179974][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.281013][ T5243] loop0: detected capacity change from 0 to 128 [ 80.341831][ T5236] loop3: detected capacity change from 0 to 32768 [ 80.383243][ T5247] __nla_validate_parse: 5 callbacks suppressed [ 80.383273][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 80.407571][ T3301] loop3: p1 p2 p3 < p5 p6 > [ 80.413299][ T3301] loop3: p2 size 16775168 extends beyond EOD, truncated [ 80.439619][ T3301] loop3: p5 start 4294970168 is beyond EOD, truncated [ 80.439866][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 80.456110][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 80.465101][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 80.477432][ T5236] loop3: p1 p2 p3 < p5 p6 > [ 80.483998][ T5236] loop3: p2 size 16775168 extends beyond EOD, truncated [ 80.493051][ T5236] loop3: p5 start 4294970168 is beyond EOD, truncated [ 80.927142][ T5242] syz.2.396: attempt to access beyond end of device [ 80.927142][ T5242] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 80.940576][ T5242] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 80.958384][ T5244] syz.2.396: attempt to access beyond end of device [ 80.958384][ T5244] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 80.971754][ T5244] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 80.986987][ T5253] loop4: detected capacity change from 0 to 512 [ 81.008071][ T5253] EXT4-fs: Ignoring removed oldalloc option [ 81.022247][ T5242] syz.2.396: attempt to access beyond end of device [ 81.022247][ T5242] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 81.035678][ T5242] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 81.045683][ T5253] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.062871][ T5253] EXT4-fs (loop4): 1 truncate cleaned up [ 81.069403][ T5253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.272407][ T5268] loop0: detected capacity change from 0 to 128 [ 81.592891][ T292] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.609875][ T292] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.637916][ T292] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.661025][ T292] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829456][ T5320] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.909955][ T5320] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.921770][ T5268] syz.0.401: attempt to access beyond end of device [ 81.921770][ T5268] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 81.935244][ T5268] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 81.980887][ T292] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.012509][ T292] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.021932][ T5320] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.044668][ T292] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.057211][ T292] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.065673][ T5332] tipc: Enabled bearer , priority 0 [ 82.073640][ T5320] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.086181][ T5332] tipc: Disabling bearer [ 82.179211][ T5363] loop0: detected capacity change from 0 to 512 [ 82.192009][ T5363] EXT4-fs: Ignoring removed oldalloc option [ 82.208782][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 82.208796][ T29] audit: type=1326 audit(1760601971.135:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 82.226428][ T5363] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.256588][ T5367] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.268900][ T29] audit: type=1326 audit(1760601971.175:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 82.271211][ T5363] EXT4-fs (loop0): 1 truncate cleaned up [ 82.292357][ T29] audit: type=1326 audit(1760601971.195:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 82.311578][ T5363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.321840][ T29] audit: type=1326 audit(1760601971.225:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 82.356595][ T29] audit: type=1326 audit(1760601971.225:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 82.365297][ T5373] tipc: Enabled bearer , priority 0 [ 82.380279][ T29] audit: type=1326 audit(1760601971.265:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 82.409949][ T29] audit: type=1326 audit(1760601971.265:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5252 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 82.433398][ T29] audit: type=1326 audit(1760601971.265:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabcd1cd710 code=0x7ffc0000 [ 82.456807][ T29] audit: type=1326 audit(1760601971.265:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fabcd1cdc17 code=0x7ffc0000 [ 82.480079][ T29] audit: type=1326 audit(1760601971.265:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabcd1cd710 code=0x7ffc0000 [ 82.504943][ T5373] tipc: Disabling bearer [ 82.513981][ T5367] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.600051][ T5367] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.660070][ T5367] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.685771][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.710288][ T5409] loop4: detected capacity change from 0 to 128 [ 82.867696][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.091151][ T5409] syz.4.409: attempt to access beyond end of device [ 83.091151][ T5409] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 83.104611][ T5409] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 83.219082][ T5421] loop2: detected capacity change from 0 to 128 [ 83.351140][ T5417] loop0: detected capacity change from 0 to 32768 [ 83.431242][ T5417] loop0: p1 p2 p3 < p5 p6 > [ 83.444185][ T5429] loop2: detected capacity change from 0 to 512 [ 83.451250][ T5429] EXT4-fs: Ignoring removed oldalloc option [ 83.459152][ T5429] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.459323][ T5417] loop0: p2 size 16775168 extends beyond EOD, truncated [ 83.478251][ T5417] loop0: p5 start 4294970168 is beyond EOD, truncated [ 83.478459][ T5429] EXT4-fs (loop2): 1 truncate cleaned up [ 83.508740][ T5429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.608305][ T5433] loop0: detected capacity change from 0 to 128 [ 83.660973][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 83.661567][ T4004] udevd[4004]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 83.671063][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 83.680825][ T4005] udevd[4005]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 83.955832][ T5433] syz.0.417: attempt to access beyond end of device [ 83.955832][ T5433] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 83.969234][ T5433] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 84.152369][ T5442] loop4: detected capacity change from 0 to 512 [ 84.159169][ T5443] loop0: detected capacity change from 0 to 512 [ 84.159428][ T5442] EXT4-fs: Ignoring removed oldalloc option [ 84.166608][ T5443] EXT4-fs: Ignoring removed oldalloc option [ 84.180774][ T5443] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.192031][ T5442] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.206162][ T5443] EXT4-fs (loop0): 1 truncate cleaned up [ 84.206487][ T5442] EXT4-fs (loop4): 1 truncate cleaned up [ 84.218576][ T5442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.231925][ T5443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.260738][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.285583][ T5447] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.319369][ T5447] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.379641][ T5447] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.429522][ T5447] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.475570][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.487182][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.499419][ T164] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.510822][ T164] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.782881][ T5456] 9pnet: Could not find request transport: f [ 84.941294][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.996040][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.033548][ T5459] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.084651][ T5468] tipc: Enabling of bearer rejected, failed to enable media [ 85.096588][ T5459] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.107596][ T5456] loop2: detected capacity change from 0 to 32768 [ 85.157248][ T3301] loop2: p1 p2 p3 < p5 p6 > [ 85.162866][ T3301] loop2: p2 size 16775168 extends beyond EOD, truncated [ 85.171378][ T5459] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.184568][ T3301] loop2: p5 start 4294970168 is beyond EOD, truncated [ 85.197767][ T5456] loop2: p1 p2 p3 < p5 p6 > [ 85.205553][ T5456] loop2: p2 size 16775168 extends beyond EOD, truncated [ 85.214301][ T5456] loop2: p5 start 4294970168 is beyond EOD, truncated [ 85.269500][ T5459] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.464467][ T3449] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.480016][ T3449] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.502361][ T3449] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.510755][ T3449] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.698209][ T292] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.731489][ T292] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.753115][ T292] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.778028][ T292] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.816935][ T292] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.847616][ T292] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.872738][ T292] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.898019][ T292] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.987687][ T5542] 9pnet: Could not find request transport: f [ 86.111029][ T5552] loop3: detected capacity change from 0 to 128 [ 86.536464][ T5542] loop1: detected capacity change from 0 to 32768 [ 86.556273][ T5584] loop2: detected capacity change from 0 to 128 [ 86.588945][ T5542] loop1: p1 p2 p3 < p5 p6 > [ 86.718052][ T5542] loop1: p2 size 16775168 extends beyond EOD, truncated [ 86.758931][ T5542] loop1: p5 start 4294970168 is beyond EOD, truncated [ 86.881274][ T5603] loop3: detected capacity change from 0 to 512 [ 86.919817][ T5603] EXT4-fs: Ignoring removed oldalloc option [ 86.934239][ T5603] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.949406][ T5603] EXT4-fs (loop3): 1 truncate cleaned up [ 86.976138][ T5603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.041181][ T5584] syz.2.434: attempt to access beyond end of device [ 87.041181][ T5584] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 87.054630][ T5584] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 87.218559][ T5626] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.269989][ T5626] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.303628][ T5629] 9pnet: Could not find request transport: f [ 87.329852][ T5626] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.539580][ T5626] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.585735][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.795489][ T5638] loop4: detected capacity change from 0 to 128 [ 87.819037][ T5639] 9pnet: Could not find request transport: f [ 88.008518][ T5643] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.069756][ T5643] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.209863][ T5643] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.280951][ T5643] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.383202][ T5639] loop3: detected capacity change from 0 to 32768 [ 88.532569][ T5639] loop3: p1 p2 p3 < p5 p6 > [ 88.559069][ T5639] loop3: p2 size 16775168 extends beyond EOD, truncated [ 88.571819][ T5651] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.591706][ T5639] loop3: p5 start 4294970168 is beyond EOD, truncated [ 88.650076][ T5651] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.672384][ T5652] tipc: Enabled bearer , priority 0 [ 88.715655][ T5654] loop4: detected capacity change from 0 to 128 [ 88.730175][ T5651] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.799501][ T5651] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.876037][ T3449] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.888886][ T3449] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.905677][ T3449] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.915586][ T5650] tipc: Disabling bearer [ 88.923610][ T3449] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.994921][ T292] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.997224][ T5657] loop2: detected capacity change from 0 to 128 [ 89.003956][ T292] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.031658][ T292] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.052518][ T292] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.103790][ T5659] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.160245][ T5663] tipc: Enabled bearer , priority 0 [ 89.169885][ T5663] tipc: Disabling bearer [ 89.178995][ T5659] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.190646][ T5655] syz.4.443: attempt to access beyond end of device [ 89.190646][ T5655] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 89.204061][ T5655] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 89.212954][ T5654] syz.4.443: attempt to access beyond end of device [ 89.212954][ T5654] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 89.226389][ T5654] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 89.235830][ T5654] syz.4.443: attempt to access beyond end of device [ 89.235830][ T5654] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 89.249237][ T5654] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 89.261778][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 89.261865][ T29] audit: type=1326 audit(1760601978.185:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 89.268550][ T5665] loop2: detected capacity change from 0 to 512 [ 89.308925][ T292] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.316335][ T29] audit: type=1326 audit(1760601978.185:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 89.317180][ T292] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.340498][ T29] audit: type=1326 audit(1760601978.185:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 89.349611][ T5665] EXT4-fs: Ignoring removed oldalloc option [ 89.371970][ T29] audit: type=1326 audit(1760601978.185:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 89.401251][ T29] audit: type=1326 audit(1760601978.185:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 89.424738][ T29] audit: type=1326 audit(1760601978.185:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 89.448064][ T29] audit: type=1326 audit(1760601978.185:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09ef3cef03 code=0x7ffc0000 [ 89.471234][ T29] audit: type=1326 audit(1760601978.185:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09ef3cd97f code=0x7ffc0000 [ 89.478140][ T5665] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.494397][ T29] audit: type=1326 audit(1760601978.185:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f09ef3cef57 code=0x7ffc0000 [ 89.494430][ T29] audit: type=1326 audit(1760601978.195:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09ef3cd710 code=0x7ffc0000 [ 89.552508][ T5659] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.585155][ T5665] EXT4-fs (loop2): 1 truncate cleaned up [ 89.596267][ T3449] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.615082][ T3449] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.623904][ T5665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.637788][ T5659] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.665266][ T5671] loop1: detected capacity change from 0 to 128 [ 89.988833][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.009201][ T5671] syz.1.448: attempt to access beyond end of device [ 90.009201][ T5671] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 90.022570][ T5671] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 90.109358][ T5678] loop2: detected capacity change from 0 to 512 [ 90.109973][ T5678] EXT4-fs: Ignoring removed oldalloc option [ 90.123711][ T5678] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.140173][ T5678] EXT4-fs (loop2): 1 truncate cleaned up [ 90.146433][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.333767][ T5683] loop1: detected capacity change from 0 to 512 [ 90.340976][ T5683] EXT4-fs: Ignoring removed oldalloc option [ 90.347705][ T5683] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.371027][ T5683] EXT4-fs (loop1): 1 truncate cleaned up [ 90.377397][ T5683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.435183][ T5688] loop4: detected capacity change from 0 to 128 [ 90.541898][ T5691] 9pnet: Could not find request transport: f [ 90.920877][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.017415][ T5694] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.064487][ T5694] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.089143][ T5695] tipc: Enabled bearer , priority 0 [ 91.128329][ T5694] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.156571][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.179532][ T5695] tipc: Disabling bearer [ 91.205316][ T5697] loop1: detected capacity change from 0 to 128 [ 91.215259][ T5694] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.356057][ T5700] netlink: 'syz.4.456': attribute type 10 has an invalid length. [ 91.365894][ T5700] team0: Device ipvlan0 failed to register rx_handler [ 91.699248][ T5698] syz.1.455: attempt to access beyond end of device [ 91.699248][ T5698] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 91.712602][ T5698] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 91.880032][ T5704] loop4: detected capacity change from 0 to 32768 [ 91.919824][ T5704] loop4: p1 p2 p3 < p5 p6 > [ 91.934469][ T5704] loop4: p2 size 16775168 extends beyond EOD, truncated [ 91.942997][ T5704] loop4: p5 start 4294970168 is beyond EOD, truncated [ 92.003856][ T5708] loop1: detected capacity change from 0 to 128 [ 92.452194][ T5716] loop4: detected capacity change from 0 to 32768 [ 92.462506][ T5724] loop3: detected capacity change from 0 to 512 [ 92.469583][ T5724] EXT4-fs: Ignoring removed oldalloc option [ 92.476343][ T5724] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.491901][ T5724] EXT4-fs (loop3): 1 truncate cleaned up [ 92.498123][ T5724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.519526][ T5716] loop4: p1 p2 p3 < p5 p6 > [ 92.525069][ T5716] loop4: p2 size 16775168 extends beyond EOD, truncated [ 92.533662][ T5716] loop4: p5 start 4294970168 is beyond EOD, truncated [ 92.611206][ T4005] udevd[4005]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 92.611257][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 92.622687][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 92.633812][ T4004] udevd[4004]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 92.650598][ T5729] loop4: detected capacity change from 0 to 512 [ 92.657561][ T5729] EXT4-fs: Ignoring removed oldalloc option [ 92.664176][ T5729] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.674993][ T5729] EXT4-fs (loop4): 1 truncate cleaned up [ 92.681829][ T5729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.872711][ T292] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.884591][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.895511][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.906958][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.933046][ T5732] loop2: detected capacity change from 0 to 128 [ 93.063799][ T292] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.076265][ T292] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.087810][ T292] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.100177][ T164] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.136147][ T5735] FAULT_INJECTION: forcing a failure. [ 93.136147][ T5735] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.149295][ T5735] CPU: 0 UID: 0 PID: 5735 Comm: syz.0.467 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.149317][ T5735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.149393][ T5735] Call Trace: [ 93.149399][ T5735] [ 93.149407][ T5735] __dump_stack+0x1d/0x30 [ 93.149429][ T5735] dump_stack_lvl+0xe8/0x140 [ 93.149512][ T5735] dump_stack+0x15/0x1b [ 93.149604][ T5735] should_fail_ex+0x265/0x280 [ 93.149650][ T5735] should_fail+0xb/0x20 [ 93.149678][ T5735] should_fail_usercopy+0x1a/0x20 [ 93.149698][ T5735] _copy_from_user+0x1c/0xb0 [ 93.149799][ T5735] ___sys_sendmsg+0xc1/0x1d0 [ 93.149884][ T5735] __x64_sys_sendmsg+0xd4/0x160 [ 93.149922][ T5735] x64_sys_call+0x191e/0x3000 [ 93.149946][ T5735] do_syscall_64+0xd2/0x200 [ 93.149968][ T5735] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.150063][ T5735] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 93.150082][ T5735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.150105][ T5735] RIP: 0033:0x7fabcd1ceec9 [ 93.150122][ T5735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.150160][ T5735] RSP: 002b:00007fabcbc37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.150248][ T5735] RAX: ffffffffffffffda RBX: 00007fabcd425fa0 RCX: 00007fabcd1ceec9 [ 93.150260][ T5735] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 93.150273][ T5735] RBP: 00007fabcbc37090 R08: 0000000000000000 R09: 0000000000000000 [ 93.150285][ T5735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.150360][ T5735] R13: 00007fabcd426038 R14: 00007fabcd425fa0 R15: 00007ffcd98cb0c8 [ 93.150384][ T5735] [ 93.351493][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.367172][ T5738] loop1: detected capacity change from 0 to 128 [ 93.389196][ T5741] loop3: detected capacity change from 0 to 128 [ 93.449184][ T5743] FAULT_INJECTION: forcing a failure. [ 93.449184][ T5743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.462368][ T5743] CPU: 1 UID: 0 PID: 5743 Comm: syz.1.471 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.462397][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.462440][ T5743] Call Trace: [ 93.462447][ T5743] [ 93.462455][ T5743] __dump_stack+0x1d/0x30 [ 93.462480][ T5743] dump_stack_lvl+0xe8/0x140 [ 93.462504][ T5743] dump_stack+0x15/0x1b [ 93.462530][ T5743] should_fail_ex+0x265/0x280 [ 93.462565][ T5743] should_fail+0xb/0x20 [ 93.462597][ T5743] should_fail_usercopy+0x1a/0x20 [ 93.462646][ T5743] _copy_to_user+0x20/0xa0 [ 93.462673][ T5743] simple_read_from_buffer+0xb5/0x130 [ 93.462735][ T5743] proc_fail_nth_read+0x10e/0x150 [ 93.462774][ T5743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.462812][ T5743] vfs_read+0x1a8/0x770 [ 93.462833][ T5743] ? __rcu_read_unlock+0x4f/0x70 [ 93.462862][ T5743] ? __fget_files+0x184/0x1c0 [ 93.462924][ T5743] ksys_read+0xda/0x1a0 [ 93.463001][ T5743] __x64_sys_read+0x40/0x50 [ 93.463022][ T5743] x64_sys_call+0x27c0/0x3000 [ 93.463057][ T5743] do_syscall_64+0xd2/0x200 [ 93.463087][ T5743] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.463120][ T5743] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 93.463221][ T5743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.463242][ T5743] RIP: 0033:0x7fb57394d8dc [ 93.463262][ T5743] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.463353][ T5743] RSP: 002b:00007fb5723af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.463377][ T5743] RAX: ffffffffffffffda RBX: 00007fb573ba5fa0 RCX: 00007fb57394d8dc [ 93.463390][ T5743] RDX: 000000000000000f RSI: 00007fb5723af0a0 RDI: 0000000000000006 [ 93.463402][ T5743] RBP: 00007fb5723af090 R08: 0000000000000000 R09: 0000000000000000 [ 93.463417][ T5743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.463432][ T5743] R13: 00007fb573ba6038 R14: 00007fb573ba5fa0 R15: 00007ffdd1a2a3a8 [ 93.463455][ T5743] [ 93.492237][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.684189][ T5746] loop1: detected capacity change from 0 to 128 [ 93.698933][ T5748] loop0: detected capacity change from 0 to 128 [ 93.717266][ T5732] syz.2.466: attempt to access beyond end of device [ 93.717266][ T5732] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 93.730879][ T5732] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 93.751375][ T5750] netlink: 'syz.4.472': attribute type 13 has an invalid length. [ 93.836801][ T5733] syz.2.466: attempt to access beyond end of device [ 93.836801][ T5733] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 93.850250][ T5733] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 93.887268][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.894604][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.934192][ T5757] loop2: detected capacity change from 0 to 128 [ 94.014248][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.036951][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.116317][ T31] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.128704][ T31] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.137458][ T31] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.147275][ T31] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.177454][ T5753] syz.0.474: attempt to access beyond end of device [ 94.177454][ T5753] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 94.190885][ T5753] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 94.202053][ T5753] syz.0.474: attempt to access beyond end of device [ 94.202053][ T5753] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 94.215439][ T5753] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 94.303437][ T5765] loop0: detected capacity change from 0 to 128 [ 94.391956][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 94.392028][ T29] audit: type=1326 audit(1760601983.315:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 94.421961][ T29] audit: type=1326 audit(1760601983.315:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 94.445501][ T29] audit: type=1326 audit(1760601983.315:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 94.469017][ T29] audit: type=1326 audit(1760601983.315:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 94.492329][ T29] audit: type=1326 audit(1760601983.315:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 94.515711][ T29] audit: type=1326 audit(1760601983.315:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 94.539388][ T29] audit: type=1326 audit(1760601983.315:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 94.552205][ T5758] syz.2.475: attempt to access beyond end of device [ 94.552205][ T5758] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 94.562835][ T29] audit: type=1326 audit(1760601983.315:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3773b1ef03 code=0x7ffc0000 [ 94.576092][ T5758] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 94.607810][ T29] audit: type=1326 audit(1760601983.315:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3773b1d97f code=0x7ffc0000 [ 94.631004][ T29] audit: type=1326 audit(1760601983.315:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5760 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3773b1ef57 code=0x7ffc0000 [ 94.655084][ T5767] loop4: detected capacity change from 0 to 512 [ 94.662391][ T5767] EXT4-fs: Ignoring removed oldalloc option [ 94.675562][ T5767] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.697840][ T5757] syz.2.475: attempt to access beyond end of device [ 94.697840][ T5757] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 94.711256][ T5757] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 94.727280][ T5767] EXT4-fs (loop4): 1 truncate cleaned up [ 94.758691][ T5767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.788737][ T5774] 9pnet: Could not find request transport: f [ 94.827297][ T5773] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.861050][ T5773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.479'. [ 95.058510][ T5780] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.136715][ T5774] loop3: detected capacity change from 0 to 32768 [ 95.184819][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.209796][ T5780] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.228854][ T3301] loop3: p1 p2 p3 < p5 p6 > [ 95.235854][ T3301] loop3: p2 size 16775168 extends beyond EOD, truncated [ 95.256109][ T3301] loop3: p5 start 4294970168 is beyond EOD, truncated [ 95.271270][ T5787] netlink: 'syz.4.482': attribute type 10 has an invalid length. [ 95.288612][ T5787] team0: Device ipvlan0 failed to register rx_handler [ 95.302536][ T5774] loop3: p1 p2 p3 < p5 p6 > [ 95.309612][ T5780] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.323823][ T5774] loop3: p2 size 16775168 extends beyond EOD, truncated [ 95.370497][ T5789] FAULT_INJECTION: forcing a failure. [ 95.370497][ T5789] name failslab, interval 1, probability 0, space 0, times 1 [ 95.383250][ T5789] CPU: 0 UID: 0 PID: 5789 Comm: syz.0.483 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.383285][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 95.383302][ T5789] Call Trace: [ 95.383310][ T5789] [ 95.383318][ T5789] __dump_stack+0x1d/0x30 [ 95.383345][ T5789] dump_stack_lvl+0xe8/0x140 [ 95.383371][ T5789] dump_stack+0x15/0x1b [ 95.383494][ T5789] should_fail_ex+0x265/0x280 [ 95.383532][ T5789] should_failslab+0x8c/0xb0 [ 95.383559][ T5789] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 95.383652][ T5789] ? __alloc_skb+0x101/0x320 [ 95.383686][ T5789] __alloc_skb+0x101/0x320 [ 95.383762][ T5789] ? kthread_insert_work+0x104/0x1f0 [ 95.383792][ T5789] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 95.383825][ T5789] nfc_genl_device_removed+0x39/0x1d0 [ 95.383928][ T5789] nfc_unregister_device+0x1b/0x130 [ 95.384020][ T5789] nci_unregister_device+0x146/0x160 [ 95.384129][ T5789] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 95.384156][ T5789] virtual_ncidev_close+0x2a/0x50 [ 95.384186][ T5789] __fput+0x29b/0x650 [ 95.384268][ T5789] fput_close_sync+0x6e/0x120 [ 95.384307][ T5789] __x64_sys_close+0x56/0xf0 [ 95.384361][ T5789] x64_sys_call+0x273c/0x3000 [ 95.384383][ T5789] do_syscall_64+0xd2/0x200 [ 95.384408][ T5789] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.384580][ T5789] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.384603][ T5789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.384654][ T5789] RIP: 0033:0x7fabcd1ceec9 [ 95.384670][ T5789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.384689][ T5789] RSP: 002b:00007fabcbc37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 95.384710][ T5789] RAX: ffffffffffffffda RBX: 00007fabcd425fa0 RCX: 00007fabcd1ceec9 [ 95.384723][ T5789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 95.384736][ T5789] RBP: 00007fabcbc37090 R08: 0000000000000000 R09: 0000000000000000 [ 95.384748][ T5789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.384819][ T5789] R13: 00007fabcd426038 R14: 00007fabcd425fa0 R15: 00007ffcd98cb0c8 [ 95.384839][ T5789] [ 95.611720][ T5774] loop3: p5 start 4294970168 is beyond EOD, truncated [ 95.648948][ T5780] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.724870][ T5804] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.766064][ T5807] loop4: detected capacity change from 0 to 128 [ 95.809230][ T5808] tipc: Enabled bearer , priority 0 [ 95.817140][ T5808] tipc: Disabling bearer [ 95.826550][ T5810] loop1: detected capacity change from 0 to 128 [ 95.832274][ T5804] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.929799][ T5804] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.989596][ T5804] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.206592][ T5811] syz.1.488: attempt to access beyond end of device [ 96.206592][ T5811] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 96.220118][ T5811] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 96.252147][ T5810] syz.1.488: attempt to access beyond end of device [ 96.252147][ T5810] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 96.265603][ T5810] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 96.277491][ T5807] syz.4.487: attempt to access beyond end of device [ 96.277491][ T5807] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 96.288969][ T5810] syz.1.488: attempt to access beyond end of device [ 96.288969][ T5810] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 96.290929][ T5807] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 96.304147][ T5810] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 96.573738][ T5820] FAULT_INJECTION: forcing a failure. [ 96.573738][ T5820] name failslab, interval 1, probability 0, space 0, times 0 [ 96.586494][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz.1.492 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.586583][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.586638][ T5820] Call Trace: [ 96.586646][ T5820] [ 96.586656][ T5820] __dump_stack+0x1d/0x30 [ 96.586683][ T5820] dump_stack_lvl+0xe8/0x140 [ 96.586709][ T5820] dump_stack+0x15/0x1b [ 96.586731][ T5820] should_fail_ex+0x265/0x280 [ 96.586776][ T5820] should_failslab+0x8c/0xb0 [ 96.586903][ T5820] __kmalloc_noprof+0xa5/0x570 [ 96.586940][ T5820] ? sk_prot_alloc+0xa8/0x190 [ 96.586972][ T5820] ? should_fail_ex+0xdb/0x280 [ 96.587033][ T5820] sk_prot_alloc+0xa8/0x190 [ 96.587070][ T5820] sk_alloc+0x34/0x360 [ 96.587104][ T5820] bpf_prog_test_run_skb+0x251/0xbf0 [ 96.587205][ T5820] ? __rcu_read_unlock+0x4f/0x70 [ 96.587277][ T5820] ? __fget_files+0x184/0x1c0 [ 96.587306][ T5820] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 96.587332][ T5820] bpf_prog_test_run+0x22a/0x390 [ 96.587360][ T5820] __sys_bpf+0x4c0/0x7c0 [ 96.587416][ T5820] __x64_sys_bpf+0x41/0x50 [ 96.587463][ T5820] x64_sys_call+0x2aee/0x3000 [ 96.587484][ T5820] do_syscall_64+0xd2/0x200 [ 96.587535][ T5820] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.587623][ T5820] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.587652][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.587681][ T5820] RIP: 0033:0x7fb57394eec9 [ 96.587700][ T5820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.587722][ T5820] RSP: 002b:00007fb5723af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.587740][ T5820] RAX: ffffffffffffffda RBX: 00007fb573ba5fa0 RCX: 00007fb57394eec9 [ 96.587819][ T5820] RDX: 000000000000004c RSI: 0000200000000600 RDI: 000000000000000a [ 96.587845][ T5820] RBP: 00007fb5723af090 R08: 0000000000000000 R09: 0000000000000000 [ 96.587860][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.587874][ T5820] R13: 00007fb573ba6038 R14: 00007fb573ba5fa0 R15: 00007ffdd1a2a3a8 [ 96.587912][ T5820] [ 96.887723][ T5825] loop1: detected capacity change from 0 to 1024 [ 96.898061][ T5825] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.911559][ T5825] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.493: Invalid block bitmap block 0 in block_group 0 [ 96.925462][ T5825] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.493: Failed to acquire dquot type 0 [ 96.931061][ T5824] Zero length message leads to an empty skb [ 96.957506][ T5825] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.493: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.973850][ T5825] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.493: Invalid inode bitmap blk 0 in block_group 0 [ 96.988106][ T164] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 97.000549][ T5825] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 97.014688][ T5825] EXT4-fs (loop1): 1 orphan inode deleted [ 97.030405][ T5825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.044120][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.108762][ T5831] tipc: Enabled bearer , priority 0 [ 97.116657][ T5831] tipc: Disabling bearer [ 97.231609][ T5838] loop4: detected capacity change from 0 to 128 [ 97.587182][ T5845] loop4: detected capacity change from 0 to 128 [ 97.610490][ T5847] loop0: detected capacity change from 0 to 128 [ 97.671071][ T5825] syz.1.493 (5825) used greatest stack depth: 9232 bytes left [ 97.916566][ T3449] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.952665][ T3449] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.984521][ T3449] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.008349][ T3449] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.390734][ T164] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.413613][ T164] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.449743][ T164] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.459387][ T5875] tipc: Enabled bearer , priority 0 [ 98.476931][ T164] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.489200][ T5873] tipc: Disabling bearer [ 98.576979][ T5881] loop4: detected capacity change from 0 to 128 [ 98.617599][ T5887] loop0: detected capacity change from 0 to 128 [ 98.740159][ T5897] loop3: detected capacity change from 0 to 128 [ 98.928908][ T5907] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.960250][ T5907] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.019676][ T5907] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.096974][ T5890] bio_check_eod: 3 callbacks suppressed [ 99.096989][ T5890] syz.4.511: attempt to access beyond end of device [ 99.096989][ T5890] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 99.116002][ T5890] buffer_io_error: 3 callbacks suppressed [ 99.116018][ T5890] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 99.131393][ T5907] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.147759][ T5881] syz.4.511: attempt to access beyond end of device [ 99.147759][ T5881] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 99.161169][ T5881] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 99.225850][ T3461] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.247797][ T3461] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.256520][ T292] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.267983][ T292] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.279575][ T5887] syz.0.512: attempt to access beyond end of device [ 99.279575][ T5887] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 99.293052][ T5887] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 99.315345][ T5937] bridge0: port 3(gretap0) entered blocking state [ 99.318145][ T5936] loop3: detected capacity change from 0 to 128 [ 99.321858][ T5937] bridge0: port 3(gretap0) entered disabled state [ 99.325868][ T5937] gretap0: entered allmulticast mode [ 99.348843][ T5937] gretap0: entered promiscuous mode [ 99.363805][ T5937] gretap0: left allmulticast mode [ 99.369039][ T5937] gretap0: left promiscuous mode [ 99.374131][ T5937] FAULT_INJECTION: forcing a failure. [ 99.374131][ T5937] name failslab, interval 1, probability 0, space 0, times 0 [ 99.386837][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: syz.4.518 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.386865][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.386895][ T5937] Call Trace: [ 99.386902][ T5937] [ 99.386909][ T5937] __dump_stack+0x1d/0x30 [ 99.386943][ T5937] dump_stack_lvl+0xe8/0x140 [ 99.386969][ T5937] dump_stack+0x15/0x1b [ 99.386990][ T5937] should_fail_ex+0x265/0x280 [ 99.387092][ T5937] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 99.387133][ T5937] should_failslab+0x8c/0xb0 [ 99.387168][ T5937] __kmalloc_noprof+0xa5/0x570 [ 99.387251][ T5937] ? switchdev_deferred_enqueue+0x2d/0x1c0 [ 99.387365][ T5937] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 99.387421][ T5937] switchdev_deferred_enqueue+0x2d/0x1c0 [ 99.387462][ T5937] switchdev_port_attr_set+0x6c/0xe0 [ 99.387539][ T5937] br_set_state+0x205/0x390 [ 99.387615][ T5937] ? _raw_spin_unlock_bh+0x36/0x40 [ 99.387654][ T5937] br_stp_disable_port+0x5d/0x150 [ 99.387695][ T5937] del_nbp+0xdc/0x790 [ 99.387729][ T5937] ? selinux_capable+0x31/0x40 [ 99.387755][ T5937] br_del_if+0x99/0x1e0 [ 99.387847][ T5937] ? br_ioctl_stub+0x73a/0x860 [ 99.387890][ T5937] br_ioctl_stub+0x745/0x860 [ 99.388010][ T5937] ? ioctl_has_perm+0x257/0x2a0 [ 99.388048][ T5937] ? do_vfs_ioctl+0x866/0xe10 [ 99.388072][ T5937] ? __pfx_br_ioctl_stub+0x10/0x10 [ 99.388107][ T5937] sock_ioctl+0x39c/0x610 [ 99.388181][ T5937] ? __pfx_sock_ioctl+0x10/0x10 [ 99.388221][ T5937] __se_sys_ioctl+0xce/0x140 [ 99.388249][ T5937] __x64_sys_ioctl+0x43/0x50 [ 99.388270][ T5937] x64_sys_call+0x1816/0x3000 [ 99.388297][ T5937] do_syscall_64+0xd2/0x200 [ 99.388326][ T5937] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.388357][ T5937] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 99.388461][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.388485][ T5937] RIP: 0033:0x7f3773b1eec9 [ 99.388501][ T5937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.388522][ T5937] RSP: 002b:00007f377257f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.388543][ T5937] RAX: ffffffffffffffda RBX: 00007f3773d75fa0 RCX: 00007f3773b1eec9 [ 99.388610][ T5937] RDX: 0000200000000200 RSI: 00000000000089a3 RDI: 0000000000000003 [ 99.388624][ T5937] RBP: 00007f377257f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.388638][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.388652][ T5937] R13: 00007f3773d76038 R14: 00007f3773d75fa0 R15: 00007fffe76b4618 [ 99.388671][ T5937] [ 99.643587][ T5937] bridge0: error setting offload STP state on port 3(gretap0) [ 99.873549][ T5964] 9pnet: Could not find request transport: f [ 100.034062][ T5978] ip6gretap0: entered promiscuous mode [ 100.072014][ T5978] ip6gretap0: left promiscuous mode [ 100.204025][ T5992] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.249999][ T5992] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.266566][ T5998] tipc: Enabled bearer , priority 0 [ 100.275395][ T5998] tipc: Disabling bearer [ 100.300227][ T5992] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.380077][ T5992] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.683725][ T6029] netlink: 'syz.4.525': attribute type 10 has an invalid length. [ 100.698502][ T6029] team0: Device ipvlan0 failed to register rx_handler [ 100.842167][ T6042] loop2: detected capacity change from 0 to 512 [ 100.848125][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 100.848231][ T29] audit: type=1326 audit(1760601989.765:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 100.849243][ T6042] EXT4-fs: Ignoring removed oldalloc option [ 100.854606][ T29] audit: type=1326 audit(1760601989.765:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 100.907095][ T29] audit: type=1326 audit(1760601989.765:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 100.917156][ T6042] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.930665][ T29] audit: type=1326 audit(1760601989.765:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 100.930699][ T29] audit: type=1326 audit(1760601989.765:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 100.930730][ T29] audit: type=1326 audit(1760601989.765:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 101.010837][ T29] audit: type=1326 audit(1760601989.765:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09ef3cef03 code=0x7ffc0000 [ 101.034005][ T29] audit: type=1326 audit(1760601989.765:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09ef3cd97f code=0x7ffc0000 [ 101.057164][ T29] audit: type=1326 audit(1760601989.765:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f09ef3cef57 code=0x7ffc0000 [ 101.080526][ T29] audit: type=1326 audit(1760601989.765:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09ef3cd710 code=0x7ffc0000 [ 101.118222][ T6042] EXT4-fs (loop2): 1 truncate cleaned up [ 101.118605][ T6042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.234934][ T6044] loop4: detected capacity change from 0 to 32768 [ 101.292010][ T6044] loop4: p1 p2 p3 < p5 p6 > [ 101.302146][ T6044] loop4: p2 size 16775168 extends beyond EOD, truncated [ 101.315777][ T6048] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.327724][ T6044] loop4: p5 start 4294970168 is beyond EOD, truncated [ 101.372514][ T6049] tipc: Enabled bearer , priority 0 [ 101.382030][ T6048] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.453773][ T6049] tipc: Disabling bearer [ 101.490243][ T6048] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.533609][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 101.570106][ T6048] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.621802][ T6057] loop4: detected capacity change from 0 to 128 [ 101.638460][ T3461] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.650416][ T3461] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.663517][ T3461] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.666084][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.684733][ T3461] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.854985][ T6067] loop1: detected capacity change from 0 to 512 [ 101.874918][ T6067] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.534: error while reading EA inode 32 err=-116 [ 101.889640][ T6067] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.534: error while reading EA inode 32 err=-116 [ 101.908662][ T6067] EXT4-fs (loop1): 1 orphan inode deleted [ 101.928550][ T6067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.984721][ T6067] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.534: deleted inode referenced: 15 [ 102.099111][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.119931][ T6057] syz.4.531: attempt to access beyond end of device [ 102.119931][ T6057] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 102.133330][ T6057] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 102.201753][ T6070] netlink: 'syz.2.536': attribute type 10 has an invalid length. [ 102.233587][ T6070] team0: Device ipvlan0 failed to register rx_handler [ 102.434560][ T6082] 9pnet: Could not find request transport: f [ 102.852334][ T6084] loop2: detected capacity change from 0 to 32768 [ 102.898404][ T3301] loop2: p1 p2 p3 < p5 p6 > [ 102.904138][ T3301] loop2: p2 size 16775168 extends beyond EOD, truncated [ 102.917214][ T3301] loop2: p5 start 4294970168 is beyond EOD, truncated [ 102.924197][ T6082] loop4: detected capacity change from 0 to 32768 [ 102.953623][ T3461] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.961979][ T3461] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.978760][ T6084] loop2: p1 p2 p3 < p5 p6 > [ 102.985548][ T3461] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.985946][ T6084] loop2: p2 size 16775168 extends beyond EOD, truncated [ 103.001653][ T3461] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.018569][ T6082] loop4: p1 p2 p3 < p5 p6 > [ 103.024033][ T6082] loop4: p2 size 16775168 extends beyond EOD, truncated [ 103.058364][ T6084] loop2: p5 start 4294970168 is beyond EOD, truncated [ 103.117698][ T6082] loop4: p5 start 4294970168 is beyond EOD, truncated [ 103.131119][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 103.320505][ T6101] loop1: detected capacity change from 0 to 512 [ 103.333611][ T6101] EXT4-fs: Ignoring removed oldalloc option [ 103.374243][ T4004] udevd[4004]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 103.385659][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 103.395606][ T6101] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.407143][ T3508] udevd[3508]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 103.420345][ T6105] loop0: detected capacity change from 0 to 512 [ 103.431885][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 103.432379][ T6101] EXT4-fs (loop1): 1 truncate cleaned up [ 103.455330][ T6109] loop2: detected capacity change from 0 to 128 [ 103.479543][ T6101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.518751][ T6105] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.546: error while reading EA inode 32 err=-116 [ 103.548123][ T6105] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.546: error while reading EA inode 32 err=-116 [ 103.573599][ T6107] udevd[6107]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 103.584360][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 103.584761][ T4005] udevd[4005]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 103.605259][ T4004] udevd[4004]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 103.618213][ T6105] EXT4-fs (loop0): 1 orphan inode deleted [ 103.624259][ T6105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.681671][ T6105] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.546: deleted inode referenced: 15 [ 103.769418][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.919347][ T6115] netlink: 'syz.0.549': attribute type 10 has an invalid length. [ 103.938056][ T6115] team0: Device ipvlan0 failed to register rx_handler [ 104.019441][ T6117] loop4: detected capacity change from 0 to 512 [ 104.043079][ T6117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.087283][ T6117] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.106888][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.165687][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 104.176092][ T6127] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.233487][ T6127] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.248529][ T6131] tipc: Enabled bearer , priority 0 [ 104.256757][ T6131] tipc: Disabling bearer [ 104.272972][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 104.312402][ T6127] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.347828][ T6139] loop2: detected capacity change from 0 to 128 [ 104.367359][ T6127] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.425959][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.427723][ T6142] 9pnet: Could not find request transport: f [ 104.612380][ T6152] netlink: 'syz.3.562': attribute type 10 has an invalid length. [ 104.650395][ T6152] team0: Device ipvlan0 failed to register rx_handler [ 104.983767][ T6139] syz.2.558: attempt to access beyond end of device [ 104.983767][ T6139] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 104.997148][ T6139] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 105.014978][ T6148] syz.2.558: attempt to access beyond end of device [ 105.014978][ T6148] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 105.028391][ T6148] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 105.057926][ T6148] syz.2.558: attempt to access beyond end of device [ 105.057926][ T6148] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 105.071401][ T6148] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 105.161159][ T6164] loop2: detected capacity change from 0 to 128 [ 105.515656][ T6165] syz.2.566: attempt to access beyond end of device [ 105.515656][ T6165] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 105.529076][ T6165] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 105.558156][ T6165] syz.2.566: attempt to access beyond end of device [ 105.558156][ T6165] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 105.571690][ T6165] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 105.826111][ T6174] loop2: detected capacity change from 0 to 128 [ 105.931694][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 105.950545][ T6178] loop3: detected capacity change from 0 to 128 [ 106.158668][ T6181] netlink: 'syz.4.573': attribute type 10 has an invalid length. [ 106.175075][ T6181] team0: Device ipvlan0 failed to register rx_handler [ 106.231552][ T6185] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.287625][ T6187] tipc: Enabled bearer , priority 0 [ 106.300929][ T6187] tipc: Disabling bearer [ 106.314325][ T6174] syz.2.570: attempt to access beyond end of device [ 106.314325][ T6174] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 106.327685][ T6174] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 106.337253][ T6185] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.431903][ T6185] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.447869][ T6178] syz.3.572: attempt to access beyond end of device [ 106.447869][ T6178] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 106.461371][ T6178] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 106.520025][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 106.520040][ T29] audit: type=1326 audit(1760601995.445:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.3.578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5abc60eec9 code=0x0 [ 106.556858][ T6185] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.620326][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.632641][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.648935][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.713094][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.756644][ T6236] netlink: 'syz.1.581': attribute type 10 has an invalid length. [ 106.765904][ T6236] team0: Device ipvlan0 failed to register rx_handler [ 106.985861][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 106.995660][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 107.005224][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 107.014640][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 107.272638][ T6281] netlink: 'syz.1.585': attribute type 10 has an invalid length. [ 107.292070][ T6281] team0: Device ipvlan0 failed to register rx_handler [ 107.331656][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.365834][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.428542][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.454239][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.470423][ T6287] loop0: detected capacity change from 0 to 128 [ 107.505188][ T6290] loop1: detected capacity change from 0 to 128 [ 107.858471][ T6311] netlink: 'syz.4.588': attribute type 10 has an invalid length. [ 107.859290][ T6300] syz.0.586: attempt to access beyond end of device [ 107.859290][ T6300] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 107.879702][ T6300] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 107.882738][ T6311] team0: Device ipvlan0 failed to register rx_handler [ 107.898085][ T6287] syz.0.586: attempt to access beyond end of device [ 107.898085][ T6287] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 107.911491][ T6287] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 107.993257][ T6324] loop0: detected capacity change from 0 to 128 [ 108.146723][ T6290] syz.1.587: attempt to access beyond end of device [ 108.146723][ T6290] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 108.160109][ T6290] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 108.182548][ T6344] loop4: detected capacity change from 0 to 512 [ 108.189699][ T6344] EXT4-fs: Ignoring removed oldalloc option [ 108.196064][ T29] audit: type=1326 audit(1760601997.105:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 108.219438][ T29] audit: type=1326 audit(1760601997.105:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 108.243024][ T29] audit: type=1326 audit(1760601997.105:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 108.266405][ T29] audit: type=1326 audit(1760601997.105:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 108.266982][ T6344] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.289921][ T29] audit: type=1326 audit(1760601997.105:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 108.289961][ T29] audit: type=1326 audit(1760601997.105:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3773b1eec9 code=0x7ffc0000 [ 108.346539][ T29] audit: type=1326 audit(1760601997.105:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3773b1ef03 code=0x7ffc0000 [ 108.369783][ T29] audit: type=1326 audit(1760601997.105:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3773b1d97f code=0x7ffc0000 [ 108.393027][ T29] audit: type=1326 audit(1760601997.105:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3773b1ef57 code=0x7ffc0000 [ 108.420076][ T6344] EXT4-fs (loop4): 1 truncate cleaned up [ 108.426550][ T6344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.495499][ T6354] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.540134][ T6354] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.556405][ T6361] tipc: Enabled bearer , priority 0 [ 108.564558][ T6361] tipc: Disabling bearer [ 108.591633][ T6354] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.641923][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 108.652597][ T6354] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.664046][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 108.673301][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 108.682555][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 108.735849][ T6371] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.779910][ T6371] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.798287][ T6376] tipc: Enabled bearer , priority 0 [ 108.806474][ T6376] tipc: Disabling bearer [ 108.839600][ T6371] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.893428][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.916480][ T6378] 9pnet: Could not find request transport: f [ 108.939251][ T6371] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.028908][ T292] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.060910][ T292] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.069707][ T292] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.088044][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.132903][ T6384] netlink: 'syz.3.601': attribute type 10 has an invalid length. [ 109.141846][ T6384] team0: Device ipvlan0 failed to register rx_handler [ 109.275612][ T6378] loop1: detected capacity change from 0 to 32768 [ 109.391511][ T3516] loop1: p1 p2 p3 < p5 p6 > [ 109.397553][ T3516] loop1: p2 size 16775168 extends beyond EOD, truncated [ 109.408441][ T3516] loop1: p5 start 4294970168 is beyond EOD, truncated [ 109.437335][ T6378] loop1: p1 p2 p3 < p5 p6 > [ 109.440016][ T6378] loop1: p2 size 16775168 extends beyond EOD, truncated [ 109.442611][ T6378] loop1: p5 start 4294970168 is beyond EOD, truncated [ 109.553770][ T6397] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.649739][ T6397] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.721839][ T6397] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.780093][ T6397] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.816080][ T6405] loop2: detected capacity change from 0 to 128 [ 109.848912][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 109.863113][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 110.055138][ T6413] loop4: detected capacity change from 0 to 512 [ 110.062165][ T6413] EXT4-fs: Ignoring removed oldalloc option [ 110.071912][ T6413] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.139012][ T6413] EXT4-fs (loop4): 1 truncate cleaned up [ 110.145098][ T6411] bio_check_eod: 1 callbacks suppressed [ 110.145111][ T6411] syz.2.608: attempt to access beyond end of device [ 110.145111][ T6411] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.145462][ T6413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.150810][ T6411] buffer_io_error: 1 callbacks suppressed [ 110.150826][ T6411] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 110.190638][ T6405] syz.2.608: attempt to access beyond end of device [ 110.190638][ T6405] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.204026][ T6405] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 110.215012][ T6405] syz.2.608: attempt to access beyond end of device [ 110.215012][ T6405] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.228384][ T6405] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 110.344273][ T6416] loop2: detected capacity change from 0 to 128 [ 110.598752][ T6416] syz.2.611: attempt to access beyond end of device [ 110.598752][ T6416] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.612144][ T6416] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 110.621445][ T6417] syz.2.611: attempt to access beyond end of device [ 110.621445][ T6417] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.634787][ T6417] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 110.644096][ T6417] syz.2.611: attempt to access beyond end of device [ 110.644096][ T6417] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.657458][ T6417] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 110.706061][ T6420] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.749687][ T6420] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.767226][ T6421] tipc: Enabled bearer , priority 0 [ 110.775822][ T6421] tipc: Disabling bearer [ 110.809495][ T6420] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.826415][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.889793][ T6420] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.940239][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.956504][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.968146][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.984627][ T6429] loop4: detected capacity change from 0 to 512 [ 110.991047][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.008169][ T6429] EXT4-fs: Ignoring removed oldalloc option [ 111.024037][ T6429] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.058738][ T6429] EXT4-fs (loop4): 1 truncate cleaned up [ 111.064941][ T6429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.136370][ T6434] loop2: detected capacity change from 0 to 512 [ 111.146545][ T6434] EXT4-fs: Ignoring removed oldalloc option [ 111.158200][ T6434] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.169899][ T6434] EXT4-fs (loop2): 1 truncate cleaned up [ 111.176118][ T6434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.754903][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.896570][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.970959][ T6439] FAULT_INJECTION: forcing a failure. [ 111.970959][ T6439] name failslab, interval 1, probability 0, space 0, times 0 [ 111.983644][ T6439] CPU: 0 UID: 0 PID: 6439 Comm: syz.2.617 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.983676][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.983731][ T6439] Call Trace: [ 111.983784][ T6439] [ 111.983791][ T6439] __dump_stack+0x1d/0x30 [ 111.983811][ T6439] dump_stack_lvl+0xe8/0x140 [ 111.983828][ T6439] dump_stack+0x15/0x1b [ 111.983843][ T6439] should_fail_ex+0x265/0x280 [ 111.983883][ T6439] should_failslab+0x8c/0xb0 [ 111.983966][ T6439] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 111.984003][ T6439] ? __get_vm_area_node+0x106/0x1d0 [ 111.984036][ T6439] __get_vm_area_node+0x106/0x1d0 [ 111.984063][ T6439] __vmalloc_node_range_noprof+0x28c/0xed0 [ 111.984118][ T6439] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 111.984149][ T6439] ? __rcu_read_unlock+0x4f/0x70 [ 111.984179][ T6439] ? cred_has_capability+0x210/0x280 [ 111.984260][ T6439] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 111.984289][ T6439] __vmalloc_noprof+0x83/0xc0 [ 111.984360][ T6439] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 111.984446][ T6439] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 111.984505][ T6439] ? bpf_prog_alloc+0x2a/0x150 [ 111.984566][ T6439] bpf_prog_alloc+0x3c/0x150 [ 111.984649][ T6439] bpf_prog_load+0x506/0x1100 [ 111.984698][ T6439] ? security_bpf+0x2b/0x90 [ 111.984722][ T6439] __sys_bpf+0x469/0x7c0 [ 111.984825][ T6439] __x64_sys_bpf+0x41/0x50 [ 111.984858][ T6439] x64_sys_call+0x2aee/0x3000 [ 111.984882][ T6439] do_syscall_64+0xd2/0x200 [ 111.984913][ T6439] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.984948][ T6439] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 111.984973][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.985052][ T6439] RIP: 0033:0x7f09ef3ceec9 [ 111.985072][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.985109][ T6439] RSP: 002b:00007f09ede37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.985194][ T6439] RAX: ffffffffffffffda RBX: 00007f09ef625fa0 RCX: 00007f09ef3ceec9 [ 111.985216][ T6439] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 111.985232][ T6439] RBP: 00007f09ede37090 R08: 0000000000000000 R09: 0000000000000000 [ 111.985249][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.985263][ T6439] R13: 00007f09ef626038 R14: 00007f09ef625fa0 R15: 00007ffefe954568 [ 111.985282][ T6439] [ 111.985291][ T6439] syz.2.617: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 112.222733][ T6439] CPU: 0 UID: 0 PID: 6439 Comm: syz.2.617 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.222761][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 112.222777][ T6439] Call Trace: [ 112.222834][ T6439] [ 112.222843][ T6439] __dump_stack+0x1d/0x30 [ 112.222873][ T6439] dump_stack_lvl+0xe8/0x140 [ 112.222898][ T6439] dump_stack+0x15/0x1b [ 112.222919][ T6439] warn_alloc+0x12b/0x1a0 [ 112.222964][ T6439] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 112.223013][ T6439] ? __rcu_read_unlock+0x4f/0x70 [ 112.223049][ T6439] ? cred_has_capability+0x210/0x280 [ 112.223088][ T6439] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 112.223187][ T6439] __vmalloc_noprof+0x83/0xc0 [ 112.223225][ T6439] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 112.223316][ T6439] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 112.223356][ T6439] ? bpf_prog_alloc+0x2a/0x150 [ 112.223413][ T6439] bpf_prog_alloc+0x3c/0x150 [ 112.223604][ T6439] bpf_prog_load+0x506/0x1100 [ 112.223658][ T6439] ? security_bpf+0x2b/0x90 [ 112.223750][ T6439] __sys_bpf+0x469/0x7c0 [ 112.223803][ T6439] __x64_sys_bpf+0x41/0x50 [ 112.223844][ T6439] x64_sys_call+0x2aee/0x3000 [ 112.223953][ T6439] do_syscall_64+0xd2/0x200 [ 112.223987][ T6439] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 112.224094][ T6439] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 112.224125][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.224200][ T6439] RIP: 0033:0x7f09ef3ceec9 [ 112.224223][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.224247][ T6439] RSP: 002b:00007f09ede37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.224272][ T6439] RAX: ffffffffffffffda RBX: 00007f09ef625fa0 RCX: 00007f09ef3ceec9 [ 112.224292][ T6439] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 112.224310][ T6439] RBP: 00007f09ede37090 R08: 0000000000000000 R09: 0000000000000000 [ 112.224329][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.224385][ T6439] R13: 00007f09ef626038 R14: 00007f09ef625fa0 R15: 00007ffefe954568 [ 112.224410][ T6439] [ 112.224434][ T6439] Mem-Info: [ 112.453134][ T6439] active_anon:10283 inactive_anon:0 isolated_anon:0 [ 112.453134][ T6439] active_file:8767 inactive_file:2259 isolated_file:0 [ 112.453134][ T6439] unevictable:0 dirty:299 writeback:0 [ 112.453134][ T6439] slab_reclaimable:3163 slab_unreclaimable:38004 [ 112.453134][ T6439] mapped:29365 shmem:1880 pagetables:1117 [ 112.453134][ T6439] sec_pagetables:0 bounce:0 [ 112.453134][ T6439] kernel_misc_reclaimable:0 [ 112.453134][ T6439] free:1867432 free_pcp:8399 free_cma:0 [ 112.498166][ T6439] Node 0 active_anon:34404kB inactive_anon:0kB active_file:35068kB inactive_file:9036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117460kB dirty:1196kB writeback:0kB shmem:792kB kernel_stack:3456kB pagetables:4468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 112.505134][ T6445] loop1: detected capacity change from 0 to 128 [ 112.525626][ T6439] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.561731][ T6439] lowmem_reserve[]: 0 2883 7862 7862 [ 112.567087][ T6439] Node 0 DMA32 free:2949056kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 112.598428][ T6439] lowmem_reserve[]: 0 0 4978 4978 [ 112.603608][ T6439] Node 0 Normal free:4513424kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34520kB inactive_anon:0kB active_file:35068kB inactive_file:9036kB unevictable:0kB writepending:1196kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:28228kB local_pcp:2772kB free_cma:0kB [ 112.636596][ T6439] lowmem_reserve[]: 0 0 0 0 [ 112.641189][ T6439] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.654044][ T6439] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 4*16kB (M) 1*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949056kB [ 112.670275][ T6439] Node 0 Normal: 1210*4kB (UME) 521*8kB (UME) 290*16kB (UME) 232*32kB (UME) 113*64kB (UME) 70*128kB (UME) 33*256kB (UM) 22*512kB (UME) 10*1024kB (M) 7*2048kB (UME) 1082*4096kB (UM) = 4513424kB [ 112.689777][ T6439] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 112.699124][ T6439] 11226 total pagecache pages [ 112.703816][ T6439] 0 pages in swap cache [ 112.708004][ T6439] Free swap = 124996kB [ 112.712184][ T6439] Total swap = 124996kB [ 112.716352][ T6439] 2097051 pages RAM [ 112.720209][ T6439] 0 pages HighMem/MovableOnly [ 112.724895][ T6439] 80479 pages reserved [ 112.782918][ T6449] __nla_validate_parse: 2 callbacks suppressed [ 112.782936][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 112.799107][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 112.799684][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 112.817233][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 112.846723][ T6446] syz.1.619: attempt to access beyond end of device [ 112.846723][ T6446] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 112.860181][ T6446] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 112.883588][ T6445] syz.1.619: attempt to access beyond end of device [ 112.883588][ T6445] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 112.897008][ T6445] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 112.909173][ T6445] syz.1.619: attempt to access beyond end of device [ 112.909173][ T6445] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 112.922649][ T6445] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 113.015639][ T6457] loop2: detected capacity change from 0 to 128 [ 113.110073][ T6458] 9pnet: Could not find request transport: f [ 113.429218][ T6471] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.463212][ T6465] loop4: detected capacity change from 0 to 32768 [ 113.512238][ T6471] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.522260][ T3301] loop4: p1 p2 p3 < p5 p6 > [ 113.529739][ T3301] loop4: p2 size 16775168 extends beyond EOD, truncated [ 113.556600][ T6457] syz.2.623: attempt to access beyond end of device [ 113.556600][ T6457] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 113.570054][ T6457] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 113.580616][ T3301] loop4: p5 start 4294970168 is beyond EOD, truncated [ 113.656842][ T6465] loop4: p1 p2 p3 < p5 p6 > [ 113.663492][ T6471] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.674223][ T6465] loop4: p2 size 16775168 extends beyond EOD, truncated [ 113.684427][ T6465] loop4: p5 start 4294970168 is beyond EOD, truncated [ 113.716923][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 113.716940][ T29] audit: type=1326 audit(1760602002.635:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6473 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 113.734713][ T6476] loop2: detected capacity change from 0 to 512 [ 113.765877][ T29] audit: type=1326 audit(1760602002.635:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6473 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 113.789336][ T29] audit: type=1326 audit(1760602002.635:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6473 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 113.792256][ T6476] EXT4-fs: Ignoring removed oldalloc option [ 113.812698][ T29] audit: type=1326 audit(1760602002.635:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6473 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 113.812783][ T29] audit: type=1326 audit(1760602002.655:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6473 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 113.835848][ T6476] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.842012][ T29] audit: type=1326 audit(1760602002.655:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6473 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 113.898480][ T29] audit: type=1326 audit(1760602002.655:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6473 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f09ef3ceec9 code=0x7ffc0000 [ 113.921846][ T29] audit: type=1326 audit(1760602002.655:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6473 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09ef3cef03 code=0x7ffc0000 [ 113.945049][ T29] audit: type=1326 audit(1760602002.655:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6473 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09ef3cd97f code=0x7ffc0000 [ 113.968272][ T29] audit: type=1326 audit(1760602002.655:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6473 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f09ef3cef57 code=0x7ffc0000 [ 113.993349][ T6471] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.994488][ T6476] EXT4-fs (loop2): 1 truncate cleaned up [ 114.009699][ T6476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.086374][ T3449] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.099355][ T3449] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.115717][ T3449] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.124284][ T3449] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.133609][ T6480] loop3: detected capacity change from 0 to 128 [ 114.430020][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 114.492101][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.566104][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 114.580030][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 114.592580][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 114.599002][ T6492] netlink: 'syz.3.632': attribute type 10 has an invalid length. [ 114.601763][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 114.621191][ T6492] team0: Device ipvlan0 failed to register rx_handler [ 114.771087][ T6503] loop2: detected capacity change from 0 to 512 [ 114.779061][ T6503] EXT4-fs: Ignoring removed oldalloc option [ 114.785792][ T6503] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.798717][ T6503] EXT4-fs (loop2): 1 truncate cleaned up [ 114.804774][ T6503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.019253][ T6508] 9pnet: Could not find request transport: f [ 115.131510][ T6511] loop1: detected capacity change from 0 to 128 [ 115.260520][ T6508] loop4: detected capacity change from 0 to 32768 [ 115.308482][ T6508] loop4: p1 p2 p3 < p5 p6 > [ 115.314358][ T6508] loop4: p2 size 16775168 extends beyond EOD, truncated [ 115.383343][ T6508] loop4: p5 start 4294970168 is beyond EOD, truncated [ 115.588359][ T3449] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.623674][ T6522] tipc: Enabling of bearer rejected, failed to enable media [ 115.635894][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.648824][ T3449] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.657079][ T3449] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.748628][ T292] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.943229][ T6511] bio_check_eod: 4 callbacks suppressed [ 115.943296][ T6511] syz.1.637: attempt to access beyond end of device [ 115.943296][ T6511] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 115.962306][ T6511] buffer_io_error: 4 callbacks suppressed [ 115.962339][ T6511] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 115.980123][ T6534] loop3: detected capacity change from 0 to 128 [ 116.034639][ T6535] loop2: detected capacity change from 0 to 512 [ 116.058727][ T6535] EXT4-fs: Ignoring removed oldalloc option [ 116.102809][ T6535] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.139456][ T6535] EXT4-fs (loop2): 1 truncate cleaned up [ 116.145578][ T6535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.196118][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 116.235940][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 116.445832][ T6552] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.502710][ T6555] tipc: Enabled bearer , priority 0 [ 116.513191][ T6552] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.528968][ T6555] tipc: Disabling bearer [ 116.558676][ T6557] netlink: 'syz.3.650': attribute type 10 has an invalid length. [ 116.570222][ T6557] team0: Device ipvlan0 failed to register rx_handler [ 116.579828][ T6552] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.664841][ T6552] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.681994][ T6564] loop3: detected capacity change from 0 to 512 [ 116.695552][ T6564] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.653: error while reading EA inode 32 err=-116 [ 116.708594][ T6564] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.653: error while reading EA inode 32 err=-116 [ 116.735304][ T6564] EXT4-fs (loop3): 1 orphan inode deleted [ 116.742591][ T6564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.743542][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.786597][ T6564] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.653: deleted inode referenced: 15 [ 116.822581][ T6569] loop2: detected capacity change from 0 to 128 [ 116.831737][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.869835][ T6571] loop3: detected capacity change from 0 to 128 [ 116.872315][ T6567] netlink: 'syz.4.654': attribute type 10 has an invalid length. [ 116.894210][ T6567] team0: Device ipvlan0 failed to register rx_handler [ 117.165431][ T6569] syz.2.655: attempt to access beyond end of device [ 117.165431][ T6569] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 117.178861][ T6569] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 117.188031][ T6569] syz.2.655: attempt to access beyond end of device [ 117.188031][ T6569] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 117.201435][ T6569] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 117.294301][ T3449] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.315485][ T3449] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.332788][ T6589] tipc: Enabling of bearer rejected, failed to enable media [ 117.343851][ T3449] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.367056][ T3449] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.391581][ T6591] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.445598][ T6595] tipc: Enabled bearer , priority 0 [ 117.454492][ T6595] tipc: Disabling bearer [ 117.464482][ T6591] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.518830][ T6596] netlink: 'syz.3.665': attribute type 10 has an invalid length. [ 117.527805][ T6596] team0: Device ipvlan0 failed to register rx_handler [ 117.551499][ T6591] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.565718][ T6598] loop1: detected capacity change from 0 to 512 [ 117.584385][ T6598] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.666: error while reading EA inode 32 err=-116 [ 117.600330][ T6598] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.666: error while reading EA inode 32 err=-116 [ 117.602139][ T6601] loop3: detected capacity change from 0 to 128 [ 117.612869][ T6591] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.629045][ T6598] EXT4-fs (loop1): 1 orphan inode deleted [ 117.635431][ T6598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.649139][ T6598] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.666: deleted inode referenced: 15 [ 117.679344][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.721673][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.744972][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.771133][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.803590][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.928002][ T6630] __nla_validate_parse: 6 callbacks suppressed [ 117.928023][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 117.950984][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 117.962441][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 117.979876][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 118.255112][ T6667] netlink: 'syz.1.683': attribute type 10 has an invalid length. [ 118.264429][ T6667] team0: Device ipvlan0 failed to register rx_handler [ 118.300781][ T6674] tipc: Enabled bearer , priority 0 [ 118.315922][ T6674] tipc: Disabling bearer [ 118.684451][ T6725] tipc: Enabled bearer , priority 0 [ 118.719103][ T6729] ================================================================== [ 118.727242][ T6729] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 118.734591][ T6729] [ 118.736944][ T6729] write to 0xffff888120f31b18 of 4 bytes by task 6732 on cpu 0: [ 118.744621][ T6729] touch_atime+0x1e8/0x340 [ 118.749102][ T6729] pick_link+0x747/0x830 [ 118.753375][ T6729] step_into+0x790/0x7f0 [ 118.757657][ T6729] walk_component+0x162/0x220 [ 118.762367][ T6729] path_lookupat+0xfe/0x2a0 [ 118.766913][ T6729] do_o_path+0x45/0x130 [ 118.771113][ T6729] path_openat+0x1df9/0x2170 [ 118.775721][ T6729] do_filp_open+0x109/0x230 [ 118.780239][ T6729] io_openat2+0x272/0x390 [ 118.784587][ T6729] io_openat+0x1b/0x30 [ 118.788669][ T6729] __io_issue_sqe+0xfe/0x2e0 [ 118.793287][ T6729] io_issue_sqe+0x56/0xa80 [ 118.797722][ T6729] io_wq_submit_work+0x3f7/0x5f0 [ 118.802681][ T6729] io_worker_handle_work+0x44e/0x9b0 [ 118.807987][ T6729] io_wq_worker+0x22e/0x860 [ 118.812520][ T6729] ret_from_fork+0x122/0x1b0 [ 118.817123][ T6729] ret_from_fork_asm+0x1a/0x30 [ 118.821898][ T6729] [ 118.824224][ T6729] read to 0xffff888120f31b18 of 4 bytes by task 6729 on cpu 1: [ 118.831767][ T6729] atime_needs_update+0x25f/0x3e0 [ 118.836808][ T6729] pick_link+0x2df/0x830 [ 118.841067][ T6729] step_into+0x790/0x7f0 [ 118.845327][ T6729] walk_component+0x162/0x220 [ 118.850022][ T6729] path_lookupat+0xfe/0x2a0 [ 118.854549][ T6729] do_o_path+0x45/0x130 [ 118.858726][ T6729] path_openat+0x1df9/0x2170 [ 118.863324][ T6729] do_filp_open+0x109/0x230 [ 118.867842][ T6729] io_openat2+0x272/0x390 [ 118.872189][ T6729] io_openat+0x1b/0x30 [ 118.876269][ T6729] __io_issue_sqe+0xfe/0x2e0 [ 118.880880][ T6729] io_issue_sqe+0x56/0xa80 [ 118.885319][ T6729] io_submit_sqes+0x675/0x1060 [ 118.890102][ T6729] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 118.895678][ T6729] __x64_sys_io_uring_enter+0x78/0x90 [ 118.901076][ T6729] x64_sys_call+0x2df0/0x3000 [ 118.905762][ T6729] do_syscall_64+0xd2/0x200 [ 118.910280][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.916185][ T6729] [ 118.918517][ T6729] value changed: 0x25b25225 -> 0x26740bf0 [ 118.924237][ T6729] [ 118.926564][ T6729] Reported by Kernel Concurrency Sanitizer on: [ 118.932718][ T6729] CPU: 1 UID: 0 PID: 6729 Comm: syz.2.676 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.942353][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.952413][ T6729] ================================================================== [ 118.964817][ T6725] tipc: Disabling bearer [ 119.883554][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.894578][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.905413][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.916804][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0