last executing test programs: 5m38.777629802s ago: executing program 1 (id=2216): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r1, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r0, r1, 0x2f, 0x2000, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(0x0, 0x0, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x6, 0xd, 0x7, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = semget$private(0x0, 0x20000000102, 0x0) semop(r7, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}], 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="20000400", @ANYRES16=r8, @ANYBLOB="8b33fdffffff00000000050000000c00990000000000faffffff"], 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) r10 = getpgrp(0x0) syz_pidfd_open(r10, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x20000800}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r13, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb7}, 0x94) 5m38.716626188s ago: executing program 1 (id=2219): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x39b803, 0x2}, 0x18) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x2, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x25}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020000}, 0x40084) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000280)=@md0, r2, &(0x7f0000000300)={0x10, 0xd, 0xffffffff, 0x9, 0x3, 0x0, 0x8, 0x5, 0x38000000}) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0xf, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) fcntl$getownex(r0, 0x10, &(0x7f0000000640)={0x0, 0x0}) prlimit64(r6, 0xd, &(0x7f0000000680)={0x1, 0x1}, &(0x7f00000006c0)) fcntl$lock(r1, 0x5, &(0x7f0000000700)={0x1, 0x2, 0x52d26b16, 0x2, r6}) r7 = fcntl$dupfd(r1, 0x406, r1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000740)) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, 0xf, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x121200, 0x116) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c40)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1f, 0x13, &(0x7f0000000a00)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @generic={0x8, 0x4, 0x9, 0x2, 0x7ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@s}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x7, 0x8d, &(0x7f0000000b00)=""/141, 0x0, 0x20, '\x00', r5, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x0, 0x9, 0x6, 0x7}, 0x10, r8, r7, 0x7, &(0x7f0000000c80)=[r0, r7, r0, r1, r7, r7, r1, r7, r0, r1], &(0x7f0000000cc0)=[{0x5, 0x5, 0x3, 0x9}, {0x2, 0x5, 0x6, 0xb}, {0x2, 0x5, 0x4, 0x2}, {0x1, 0x2, 0x5, 0x3}, {0x1, 0x1, 0xc, 0xa}, {0x4, 0x5, 0x0, 0x9}, {0x5, 0x3, 0x2, 0xa}]}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r10, 0x2, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000045) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={r7, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000f80)=[0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f0000001000)=[{}, {}], 0x10, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0x1d, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000001500)={&(0x7f0000001240), 0xc, &(0x7f00000014c0)={&(0x7f0000001300)={0x1a8, r11, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x18c, 0x84, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x80000000}, @NL80211_BAND_LC={0x8, 0x5, 0x1ff}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xd}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7fff}, @NL80211_BAND_LC={0x8, 0x5, 0xff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xff}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0xe09}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffb}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xff}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x52a}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="eae71b16d80b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x1000000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7fffffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x10}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffff7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x10000}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xb260}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="d1afac615184"}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) sched_setscheduler(r6, 0x3, &(0x7f0000001540)=0x7) r13 = signalfd(r1, &(0x7f0000001580)={[0xb55]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r13, {r2, r3}}, './file0\x00'}) 5m38.669632992s ago: executing program 1 (id=2221): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m38.097772226s ago: executing program 1 (id=2235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r4, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400), &(0x7f0000000680)={0x0, 0xfb, 0x41, 0x4, 0x1, "7556b4f253cfd72920e0674e5393eade", "2dff149e2e622003db83195d622affa7b2765a8d06a7ffa0d7efbbe8b0ba31125f5cb6c0262840fbaabb10aa"}, 0x41, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="3d5416ed18f9ffff1b8c0fbf", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000000000a850000000c000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x800) syz_emit_ethernet(0x6e, &(0x7f00000010c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x2f, 0xff, @mcast2, @mcast2, [@fragment={0x1d, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}]}}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) r7 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000340)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) accept4$unix(r7, 0x0, 0x0, 0x800) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0xfffffffffffffffa}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xfa, 0x7ffc1ffb}]}) r10 = memfd_secret(0x80000) fchownat(r10, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f0000000300)='./file0/../file0\x00', 0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r5) 5m37.894543934s ago: executing program 1 (id=2240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x40}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0x9}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180)='q', 0x1, 0x100004) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x404c884, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r6, 0xffffffffffffffff, 0x0, 0xd39a) 5m37.225632216s ago: executing program 1 (id=2246): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$msr(r0, &(0x7f0000000000)=""/39, 0x27) lseek(r0, 0x9, 0x4) 5m37.1868358s ago: executing program 32 (id=2246): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$msr(r0, &(0x7f0000000000)=""/39, 0x27) lseek(r0, 0x9, 0x4) 3.00632924s ago: executing program 5 (id=8353): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x2, 0x0, 0x0, 0x10, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x113206, 0x1000000000001, 0x1, 0x4, 0x7, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x8, @local, @local, 0x1, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000540)={'\x00', 0x8800, 0x7528, 0x5cc, 0x7ffe, 0x9}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 2.978099193s ago: executing program 3 (id=8354): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x792b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {0x0}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a2f01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) write$tun(r4, &(0x7f0000001540)=ANY=[], 0x12ea) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) 2.765729813s ago: executing program 0 (id=8363): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x2, 0x0, 0x0, 0x10, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x113206, 0x1000000000001, 0x1, 0x4, 0x7, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x8, @local, @local, 0x1, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000540)={'\x00', 0x8800, 0x7528, 0x5cc, 0x7ffe, 0x9}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 2.762626243s ago: executing program 5 (id=8364): r0 = syz_io_uring_setup(0x16c4, &(0x7f0000000380)={0x0, 0x5121, 0x80, 0x3, 0x258}, 0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.702694679s ago: executing program 5 (id=8365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB, @ANYRES32], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000800)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6, 0x0, 0x7}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000640)='kvm_msi_set_irq\x00', 0xffffffffffffffff, 0x0, 0x40000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000001000500010007000000340007801800018014000240fc000000000000000000000000000000060004400e1f00000500070088000000060005404e1f00002b5cbb3c31d942f21d051a277ca893b070b13e966707934d42f821702157f29dc635a69d4a4e17a69849f80bfcae3b2a115b8949e5"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 2.550792033s ago: executing program 0 (id=8366): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}, [@TCA_RATE={0x6, 0x5, {0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x841) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.47506997s ago: executing program 0 (id=8367): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000008c0)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) 2.460725161s ago: executing program 0 (id=8368): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x15, "ff00"}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x2) r3 = syz_open_pts(r2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x2, 0x800000000d, 0x2, 0x2, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1d, 0x2, 0x0, 0x1fd, 0x1000000802, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) truncate(&(0x7f00000001c0)='./file0\x00', 0x8) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000140)=@nullb, r1, &(0x7f0000000240)) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='kfree\x00', r8}, 0x18) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x8) fchdir(r10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write$ppp(r10, &(0x7f00000002c0)="93bf18cd000006de01315bd0487e428869bcaaba69cd4822c8866a5c1196a6568d3374f4461916abe41390dc87c56b7e12da39746976a2d3d843815ca78033825d52dcefaea93790affd6830e01270838e0047a34e53", 0x56) r11 = open(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) mknodat$loop(r11, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") 2.118915823s ago: executing program 3 (id=8370): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r2, 0x0, 0xfffffffffffffff4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r0, 0x625, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x85) 1.985379655s ago: executing program 3 (id=8372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.887888814s ago: executing program 5 (id=8373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000308010400000000000000000000000005000300060000000c00048008000b400000000039060dfad2b302a067de3577146c62d07f6391b75a182542dc169f140b23720835892be9e55e13eb1e1db30b487069eeb0ec3885fdab864ffa701d5dcc39494fd4ba5e2014410fd121ce4b434831570e50efc6a443ddfe4deae256808b085d66e0ae8b5aa240fac6931b5a36829fc6d3ba927a5889aaaa0e207306ad157549757fa7e1532b1ab756c8405afccab1"], 0x28}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f531217", 0x96}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b775", 0x1c}], 0x1}}], 0x2, 0x54004) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000380)={{0x80, 0xa}, 'port0\x00', 0x0, 0x20013, 0x2, 0x0, 0xf, 0x8042, 0xb, 0x0, 0x4, 0x9}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000500)=0x10) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000140)={@private2, @rand_addr=0x64010101, 0x13, 0xf}}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) 1.865531686s ago: executing program 3 (id=8374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) getitimer(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040c54) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_xfrm(r4, 0x0, 0x0) unshare(0x62040200) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000371f68000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 1.622714959s ago: executing program 3 (id=8379): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x792b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7", 0xb4}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a2f01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) write$tun(r4, &(0x7f0000001540)=ANY=[], 0x12ea) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) 1.60696431s ago: executing program 0 (id=8381): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x792b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {0x0}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a2f01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) write$tun(r4, &(0x7f0000001540)=ANY=[], 0x12ea) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) 893.361647ms ago: executing program 5 (id=8391): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x15, "ff00"}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x2) r3 = syz_open_pts(r2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x2, 0x800000000d, 0x2, 0x2, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1d, 0x2, 0x0, 0x1fd, 0x1000000802, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) truncate(&(0x7f00000001c0)='./file0\x00', 0x8) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000140)=@nullb, r1, &(0x7f0000000240)) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='kfree\x00', r8}, 0x18) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x8) fchdir(r10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write$ppp(r10, &(0x7f00000002c0)="93bf18cd000006de01315bd0487e428869bcaaba69cd4822c8866a5c1196a6568d3374f4461916abe41390dc87c56b7e12da39746976a2d3d843815ca78033825d52dcefaea93790affd6830e01270838e0047a34e53", 0x56) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a40)={0xffffffffffffffff, &(0x7f0000000340)="7220cf098af40ea5bb619285dff7e5441e0468937e198ce77f1374b792116b9568ed68f1fd9fe044167f2eb286df52c7d0f11b56499d0441c8987fc2a32fa057714b5c69d4bc45bbc4ce10b7edb11d4bb4bd5cf4fc1f8c39dd6a8a8f4a166f2ca44a8ac940a6a21eef2c750ca5acd08fb1fee6e922dda8d108c34cb761ac36e2bebdc0a8cfc4", &(0x7f0000000400)=""/185}, 0x20) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") 850.994191ms ago: executing program 2 (id=8394): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}, [@TCA_RATE={0x6, 0x5, {0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x841) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 785.187337ms ago: executing program 3 (id=8395): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r1, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffe1b, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20004801}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001811000041ab9b154b31141e0f924a2a1b1e14398129c0ca0a1401b79923d7dc1d954958fbb58beae2962fa79c7be9ea721f4a6095b3a9bbb5cbb25821cc9d9a7a6c19d83aab6e1a1e413a232753009fd7291416e06fca86934e21cd41714722466d66d7259006d4fc68bf6acc8756b8ea4c9cf08e5553bea4e91a9dd203e069fe26a2a7364422154e82057660584e00027e6bd0af9c28b518cde905a6b6e2a410cfab353a9180dd5488fa0429f2a56fa7f1617dc6a0163275db8f26129b8a202bb52a6c51bbc258078218c93934092821bfb66f82", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba4c59e7000fbdbdf250100000008001900ac1414aa06001a004e23000008001900e000000108001800ac1414bb060003000500000006001d0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a20000000020a0108"], 0x3440}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex, 0x11, 0x0, 0x80000000, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) ftruncate(r5, 0xb35) 754.270349ms ago: executing program 0 (id=8396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB, @ANYRES32], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000800)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6, 0x0, 0x7}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000640)='kvm_msi_set_irq\x00', 0xffffffffffffffff, 0x0, 0x40000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000001000500010007000000340007801800018014000240fc000000000000000000000000000000060004400e1f00000500070088000000060005404e1f00002b5cbb3c31d942f21d051a277ca893b070b13e966707934d42f821702157f29dc635a69d4a4e17a69849f80bfcae3b2a115b8949e5"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 700.193614ms ago: executing program 2 (id=8397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 670.858547ms ago: executing program 2 (id=8398): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r5, 0x109000) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x45, &(0x7f0000000140), 0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r6, 0x4b32, 0x91) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="200000001114010028bd7000fcdbdf2508000300012000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 647.696889ms ago: executing program 4 (id=8399): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 518.348392ms ago: executing program 4 (id=8400): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r2, 0x0, 0xfffffffffffffff4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r0, 0x625, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x85) 487.963514ms ago: executing program 2 (id=8401): socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xfffffffffffffde1, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS_GEN={0x0, 0x9, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20048850) (fail_nth: 2) 477.892505ms ago: executing program 4 (id=8402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000308010400000000000000000000000005000300060000000c00048008000b400000000039060dfad2b302a067de3577146c62d07f6391b75a182542dc169f140b23720835892be9e55e13eb1e1db30b487069eeb0ec3885fdab864ffa701d5dcc39494fd4ba5e2014410fd121ce4b434831570e50efc6a443ddfe4deae256808b085d66e0ae8b5aa240fac6931b5a36829fc6d3ba927a5889aaaa0e207306ad157549757fa7e1532b1ab756c8405afccab1"], 0x28}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f531217", 0x96}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b775", 0x1c}], 0x1}}], 0x2, 0x54004) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000380)={{0x80, 0xa}, 'port0\x00', 0x0, 0x20013, 0x2, 0x0, 0xf, 0x8042, 0xb, 0x0, 0x4, 0x9}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000500)=0x10) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000140)={@private2, @rand_addr=0x64010101, 0x13, 0xf}}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) 248.124277ms ago: executing program 4 (id=8403): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r2, 0x0, 0x7fff}, 0x18) syz_emit_ethernet(0xfffffffffffffe71, &(0x7f00000003c0)={@random="57dc3d04d3ee", @local, @void, {@ipv4={0x800, @icmp={{0x0, 0x4, 0x1, 0x2, 0x0, 0x66, 0x0, 0xff, 0x1, 0x0, @local, @remote, {[@cipso={0x86, 0x0, 0x3, [{0x6, 0x0, "b47d92b59a"}, {0x6, 0x0, "a2d2407424"}]}, @ssrr={0x89, 0x0, 0x79, [@private=0xa010100, @empty, @empty, @remote, @initdev={0xac, 0x1e, 0x7, 0x0}, @loopback, @local]}, @lsrr={0x83, 0x0, 0xa1, [@rand_addr=0x64010102, @remote, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast, @broadcast, @empty]}, @noop, @timestamp_addr={0x44, 0x0, 0xdc, 0x1, 0x8, [{@multicast1, 0x2003}, {@multicast1, 0x204}, {@broadcast, 0x5}, {@empty, 0x1}, {@empty, 0xf61}, {@multicast1, 0x80000000}]}]}}, @info_request={0xf, 0x0, 0x0, 0xffff, 0x6}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) wait4(r4, &(0x7f0000000040), 0x1000000, &(0x7f00000008c0)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x1, @remote, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="78da", 0x2}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xa}, 0x8) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="140100002900010000000001fcdbdf250401f2800c0018000bac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000025000f001fffffffbd0301000000000095002008000000006916700000000000bf6700000000000017060000b964b01a4606feff0020000037060000d3551b84bf150000000000000f5700000000000065070000020000002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c400000000000000500000000000000950000000000000032ed3c53e95e5db67754bb12dc8c4ed68ecfd00000000000000030e3c7bdd2d17f2f09000000000000005d7095f9ce000078af6d71d79a5e12814cb1d8a5d4601d295c45a69eb9bdb7dd390700000500000000f16d0a3e127bee45a0100000fe9de56c9d8a814261bdb94a0500000084c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3e1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8da39eb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e4c16dfecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1d932b3a6158446c02bcef3e4acbb400001e3738270b315d362ed834f2af97792f69b649a462e7ee4bcf8b07a10311145eac1f2ede14308d582685e1bece9f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b268f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed8400200aab43176e65ec1118d46d1e827f3472f4441401d2ddc1cbf60ab3a123da773af2245d753887a5ad103649afa1769080584f800231e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000007f37d83f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9be2a29ab028acfc1cb26a0f6a5480a55d6a0c544ba0dc828c22fe3000072c6000000437d57fcf8295f63a70837f5cd4e5e77b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac693a27051f2ab779b8dbe800aeeda0426c7e7c0032028c955735557df78628a59d56f4400a83b29b6ddb55117669d9598c0f3598073f3a922a76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe70cac8b9e44023a1749eb1d0d572b7756e0d0fcd74035c7a1eb6eb4e1c8ef2629f5ecff4626746d6ea4a2215c3b9ee1dbb43f40256b5abcaaa8c27b25def02dbc05823e98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b1d3dfdf0cb8b71ad790000000d0500000000000000000000dd434a25e95d0ec29d3adaccf8400880031ecdfdb4dfbe440104be099ece7e4009c76c716d906fbc3c9b412e0478cfee4485f423c63f49db5a583c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4f18ca372104772a3a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec9f9f3262cb13f4a2575fbe943a6c40000000000000000000000000000000026b80c3899543223a6079ee96198b9a326da3be3098af415ca284b7467103c65a0867032f04384129cdc79b3978bc800990e8e29af8d763ef9b1f31befcad2ce5394601c7c4f5975e8bd07d8dcce3c7bebdc233ba3d45dc60f2f54393895650f154dcf83b84e16a29c743544a6091ec93e0d2fd5b4dc42913e1ba32277d5f4bb2142b46be48b41c717858cfefd4946bf19e617d51f964727bfd5cc5ba15370f6e1b39f1541eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d95ac7ad17a507000000c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde1800a2dc02af2b7bcf6f8af68249ce5370e593d9eafbefdb91fbdff9ee3307d4a1837963b2dc3f3698d90e7915b098f19392e792f05675f252f4e948184001b6494e906925a092483adc7e9c8f7a29d226943c100a92ae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baa0905aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e7ad741e4feb0e37f0c85d13a33250d78cfa7daf529c5bea49cad7c3433e322d8dbdfc85ae7b5b544aacd5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a94548d47c609a93c45f4d7d24b20166d7f510f80d13138216e03995da047ccef9de49a90ced031235e3219ebd9d06c257a50497ec523364a42e2e81fc068fcbb9792b673893ff2c1e27ced4b77b0300fbf46a19600b802cba88b7d0a938d9e0e6cfe5d66b874cd004179e5b6025c0e1050fae1f70437ee7cbaa9ab2f8c06a551236278c474914c7cf8406f95351704fc428806c23d16847bde483d98321d7648496e065f120ed7ffc11c29a1145c09b5e48ccbdb66dfe4188952868da9c0ad91463ec7670bec7772deb4e2b56f411f586dd4285146d1a0686975c89d7caa234be3c6aee7697860385f99a4a918fe6efa78e3227d54fe9c9fde78e16db810abb601e15a231f9510c7607204ad685177659b844efeb1d448b692444375c49e2b482b32470fc2e15511bb71cffa87b8c7179f56366666b57a3e1e226a481b6db11367685750cdec47e3c76f84788dbe28aa4a39a196bde8aa2de215d49c552c70000000000000000dbb68e58b4c96972b8e9e06dde8762bf753ec8545cb623afdaa1e52fec9f21ee2454cb653ebc7577a56204c1f942a944e650c1d1820b7fac005ed19bf0d96c3d946478b31af45aeb262ab41cd9eacbad70fbeaa97f1aa9669fd3e25060281aede1e75795eeee3b6abd08ca490c2ce0531ed667898403ff2bb4f074352da58a3d649057fcdad446222212ef5dc67c8852953c9ebbd2b3807c9361046a375ecd599f6653ce8df9bc7e177e88b1f171df357cf5256041a620ca68b035ccd784f97930a1f363bfd224e9cd1263ff16e6d513c9d7c67158ec5502c17266cea90306808f50a87fb2aaa1b1954bfa3ba8a6df6fbe38bd7ad09cecf8ecbaf005e68bb476ed3d8ea0cf21a9da7c11eedf3454556b63fe1133bf415cfc1b459c8bfc54ca3bd54d15ee11971b119a28d34ae8d20350ba647d2ef813515f4614c7e8cb04059d2b79867c07ae780ea3d8c875ee3834d3cf37271e882554782fa58781a715dec10864761389cd8cb32350917d17b03d37ad4c0400000000000000a78bfa6aa624c498fd927ac1da3b0ddab0cabeb7436b52b59ff23a19b487e1bea3f418b6e3d21e6833edd299b39ccbeddb532d6df19246710b01ad6ed06b18fc4ca5e1e72232dfab2a6f606e4fa637bddddf4ab9f093815de2c1193cf5c014005b1854515f815637caca1a2bff030000b56de1b1927d359fc87abf4dcb23f89c4f8dc93b27e411d1d331153aa8692777ab7076efd7c057dff57c248ba01c52f7a182124ae0f623a0b942581faddacd8f18c812cbcd22a938b6b5df6f3cb0eb5d3aaf5acd944650a8fed42eb945293133a4bbc2a7c3ccac0a9055dbbe29b18c87ab4e3b86c3185650da3d9fc9e42228e449f066557462192cba2b2c2a3ad27ef0f719c1e5c99d506d11dca102c408842af65f17f1dd12fd1c35ee264a15fa041b22ca56d91477e8c5a96c7bb5a4db4caa8ac0e61ad8871aa5c3ce5c8a41b53841e1bf67e2bdcf7c3e830549dda33ae785eaff3c33b7c917fbfd747854f87f8a1b084bb91f0d00000000000000000000000000000000c39a4ab1b1f5f9fe629b3f067b64a755e1af70ca2afe9f6a6f3bc859d345064672eb09a4e94f82a820302651a3077313338cfcebb143567c563959f0de0442526c68c3eea5716c6477ba77f32e77aced7ef77fadfb06cd6860bedb7e3feeb169275e6016a17c7e4a9c26942d65a181caae11f5bba4230c11236f0049986c0edcf201305e7a58ea53c97806b929e7d1dfbbe35cf1b9bb7e2352cfbecb6ea18da0fdc5877c4afb9b7659a9853b313d73bf4f8f4ca26f3633f51cb64ca41e0916169867b4608d684fb618d1f3db858d765ca75bc4a75062523ce6c1f9ab1aa1c1b2d04712eafaf279fd3d594a23e9c5ba4b94425ad0e0dfe43330bc96b163b57b96653b1c3a86257e57586be52fd85e981936b1b0027e4de18cf6d7bf47ebe4dc9f3e8be776e3488b704c90b1ff1daec119b70b800a887eed7418bdfd9cfe6a4a1e6be430f321db5c5a56149427766e0c8262ecdd65e3f9ebd2b3eccf56e1fe831ac61b3b48c7ef798842eceb794a90d59c88b9e034d09b9faeb7acde447ed1cf8ff8adf53e14da1e70999b8423a711274849386a98698530fb0b6d517a8a879ca12a72dec308ec8304e5fd80fd11b20c25809a5a6cb168a0d895903e21f12c72a6a533608b7930be480c5f959d93821a9cb863c842db2db3046e80454f7e1169152f9d89a7cb4e2bdfa95661848540dfd983b96e79e84bae030bf1f4702cc51aaf262ec866ed993c15702aeab59c130c014782bca64c3c213d2d52a408db7668ea48ef544de7bb9d3d4b6d89cb3ab86b3e19b1e0534fc22ef4490000000000000000007235b0d11e8c1ef08fd8df205b5dbe5417c2b7556900ed5ef0ea898077ae62d4f7f2c31b1eb1c661c5f6192f7ec0d306fb665b0f3b8f26e01e57fc03b02df26fbdc97895ba9bf45585a39aeef9609d181fe06d50220739c0aac2556d81b1e54591068376f023eb4ba287938ab22ccffd5770eb3f8c7a9b1f72ab2a83ab778d47dc3e91f72dbff307f4ce02c5d4a83cb9a25accd10e08dc81344c1e60bdedaa056fc00e00"], &(0x7f0000000100)='GPL\x00'}, 0x48) 118.854489ms ago: executing program 4 (id=8404): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000000)={[{@nodelalloc}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$eJzs3T9oHmUcB/Df3fu+xiQvEnURxD8gIhoIcRNc4qIQkBBEBBUiIi5KIsQEt8TJxUFnLZm6hNKtaceSJXRpKXRK2wzpUmhDh4YO7XDlfS+BJG/6J33f3pXc5wPH3SV393uO3Pe5G3L3BFBZQxExFhG1iBiOiEZEJHs3eDefhnZWl/rXpiKy7Ks7SXu7fD23u99gRCxGxCcRsZom8Us9Yn7lu81761988Pdc4/2TK9/2F3qSO7Y2N77cPjHx15nxj+cvXbk1kcRYNPedV+8lh/ysnkS89jyKvSCSetkt4GlM/nH6aiv3r0fEe+38NyKN/I/3z+xLq4346P9H7fvv7ctvFtlWoPeyrNG6By5mQOWkEdGMJB2JiHw5TUdG8mf4a7WB9NeZ2d+Hf56Zm/6p7J4K6JVmxMbn5/rODh7I/81ann/g+Grl/+vJ5eut5e1a2a0BCvFWPmvlf/iHhQ9D/qFy5B+qS/6huo6Yf//RAceI+z9U12Py/3JZbQKK0Zn/RtlNAgri+R8qKcuyTP6hwuQfqmtv/gGAasn6yn4DGShL2f0PAAAAAAAAAAAAAAAAAADQaal/bWp3Kqrmhf8itj7LRxfprF9rj0e8+znygbvJvkFIkh4MSvL9O10eoEunSn77+pUb5da/+Ha59RemIxb/jIjRer3z+kt2rr9n9+oTft/4scsCR5QcWP/0m2LrH/Rgudz64+sR51v9z+hh/U8ab7Tnh/c/zR58Mf23+10eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMI8DAAA//84UXFU") r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x5ef8, 0x80, 0x3, 0x285}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r0, 0x80000) 77.365762ms ago: executing program 2 (id=8405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000003060102000000f4000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 13.284548ms ago: executing program 5 (id=8406): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x792b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {0x0}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a2f01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) write$tun(r4, &(0x7f0000001540)=ANY=[], 0x12ea) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) 2.495889ms ago: executing program 2 (id=8407): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x4f4802) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x60, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_REORDER={0xc, 0x3, {0x10001, 0x8}}]}}}]}, 0x60}}, 0x0) sendto$packet(r1, &(0x7f00000001c0)="44c33b69ebc9e05e9bdec0c288a8", 0x1d, 0x830, &(0x7f0000000440)={0x11, 0x2, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x2, 0xffffffff, 0x15, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x1, 0x7, 0x5, 0x4f4ff3c9}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000009}, 0xc880) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000006080)=@delchain={0x34, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r14 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_raw(r14, &(0x7f0000000100)={0x1d, r15}, 0x2b) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf250400000020000180080003000000000014000200736974300000000000000000000000005c0001800800030000000000140002006261746164765f736c6176655f310000080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766972745f77696669004c000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f31000008000300010000003800018008000300010000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r4, @ANYBLOB="80000000", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="4c000180080003000300000008000100", @ANYRES32=r9, @ANYBLOB="1400020064766d72703000000000000000000000140002007465616d5f736c6176655f3100000000080003000100000008000300010000002400018008000100", @ANYRES32=r13, @ANYBLOB="080003000100000008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB], 0x184}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 0s ago: executing program 4 (id=8408): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}, [@TCA_RATE={0x6, 0x5, {0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x841) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): ][T26326] _copy_to_user+0x20/0xa0 [ 458.322067][T26326] simple_read_from_buffer+0xb5/0x130 [ 458.322093][T26326] proc_fail_nth_read+0x10e/0x150 [ 458.322127][T26326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.322188][T26326] vfs_read+0x1a8/0x770 [ 458.322211][T26326] ? __rcu_read_unlock+0x4f/0x70 [ 458.322235][T26326] ? __fget_files+0x184/0x1c0 [ 458.322263][T26326] ? mutex_lock+0x58/0x90 [ 458.322297][T26326] ksys_read+0xda/0x1a0 [ 458.322329][T26326] __x64_sys_read+0x40/0x50 [ 458.322348][T26326] x64_sys_call+0x2889/0x3000 [ 458.322371][T26326] do_syscall_64+0xca/0x2b0 [ 458.322505][T26326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.322588][T26326] RIP: 0033:0x7f327afde15c [ 458.322606][T26326] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 458.322628][T26326] RSP: 002b:00007f3279a26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 458.322653][T26326] RAX: ffffffffffffffda RBX: 00007f327b236090 RCX: 00007f327afde15c [ 458.322748][T26326] RDX: 000000000000000f RSI: 00007f3279a260a0 RDI: 0000000000000003 [ 458.322764][T26326] RBP: 00007f3279a26090 R08: 0000000000000000 R09: 0000000000000000 [ 458.322780][T26326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.322796][T26326] R13: 00007f327b236128 R14: 00007f327b236090 R15: 00007ffd5f901d58 [ 458.322813][T26326] [ 458.721573][T26351] __nla_validate_parse: 4 callbacks suppressed [ 458.721593][T26351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7464'. [ 458.737719][T26351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7464'. [ 458.794328][T26359] block device autoloading is deprecated and will be removed. [ 458.831140][T26362] SELinux: failed to load policy [ 458.857382][T26372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7471'. [ 458.879191][T26372] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 458.907758][T26372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7471'. [ 458.940520][T26383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7476'. [ 458.945860][T26372] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 458.949973][T26383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7476'. [ 458.998710][T26389] ALSA: seq fatal error: cannot create timer (-22) [ 459.016516][T26390] loop4: detected capacity change from 0 to 1024 [ 459.023327][T26390] EXT4-fs: Ignoring removed orlov option [ 459.032812][T26390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.051511][T26390] netlink: 'syz.4.7479': attribute type 21 has an invalid length. [ 459.059515][T26390] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7479'. [ 459.063108][T26392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7480'. [ 459.068707][T26390] netlink: 'syz.4.7479': attribute type 1 has an invalid length. [ 459.110703][T23381] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.167410][T26405] netlink: 'syz.5.7486': attribute type 30 has an invalid length. [ 459.445257][T26410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7488'. [ 459.458852][T26410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7488'. [ 459.633658][T26420] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 459.714297][T26426] netlink: 'syz.2.7493': attribute type 13 has an invalid length. [ 459.754453][T26426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.766554][T26426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.826801][T26440] netlink: 'syz.5.7498': attribute type 30 has an invalid length. [ 459.899113][T26442] netlink: 'syz.5.7499': attribute type 4 has an invalid length. [ 460.039901][T26457] netlink: 'syz.5.7502': attribute type 30 has an invalid length. [ 460.047836][T26457] netlink: 'syz.5.7502': attribute type 29 has an invalid length. [ 460.072099][T26457] loop5: detected capacity change from 0 to 128 [ 460.085283][T26462] ALSA: seq fatal error: cannot create timer (-22) [ 460.097637][T26457] bio_check_eod: 50 callbacks suppressed [ 460.097653][T26457] syz.5.7502: attempt to access beyond end of device [ 460.097653][T26457] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 460.124106][T26457] syz.5.7502: attempt to access beyond end of device [ 460.124106][T26457] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 460.137902][T26457] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 460.147377][T26457] syz.5.7502: attempt to access beyond end of device [ 460.147377][T26457] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 460.161220][T26457] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 460.170342][T26457] syz.5.7502: attempt to access beyond end of device [ 460.170342][T26457] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 460.184258][T26457] syz.5.7502: attempt to access beyond end of device [ 460.184258][T26457] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 460.198077][T26457] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 460.202938][ T3714] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 460.206679][ T3669] Bluetooth: hci0: command 0x1003 tx timeout [ 460.218863][T26457] syz.5.7502: attempt to access beyond end of device [ 460.218863][T26457] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 460.232843][T26457] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 460.241952][T26457] syz.5.7502: attempt to access beyond end of device [ 460.241952][T26457] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 460.241966][T26318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.255651][T26457] syz.5.7502: attempt to access beyond end of device [ 460.255651][T26457] loop5: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 460.278170][T26457] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 460.287540][T26457] syz.5.7502: attempt to access beyond end of device [ 460.287540][T26457] loop5: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 460.301332][T26457] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 460.311010][T26457] syz.5.7502: attempt to access beyond end of device [ 460.311010][T26457] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 460.312170][T26467] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 460.326315][T26457] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 460.363857][T26457] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 460.381694][T26474] loop0: detected capacity change from 0 to 512 [ 460.389328][T26457] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 460.400437][T26457] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 460.413371][T26474] EXT4-fs (loop0): 1 truncate cleaned up [ 460.432453][T26474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.685735][ T2447] Bluetooth: hci0: Frame reassembly failed (-84) [ 460.739853][T26509] random: crng reseeded on system resumption [ 460.763025][T26511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 460.797708][T26511] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 460.896193][T26524] loop4: detected capacity change from 0 to 128 [ 460.903182][T26524] vfat: Unknown parameter '01777777777777777777777ÿÿÿ0xffffffffffffffff18446744073709551615' [ 460.919410][T26524] pimreg: entered allmulticast mode [ 460.974191][T26528] netlink: 'syz.5.7532': attribute type 30 has an invalid length. [ 461.133125][T26544] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 461.153339][T26544] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 461.222885][T22693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.292762][T26546] SELinux: policydb version 0 does not match my version range 15-35 [ 461.294494][ T3489] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 461.301140][T26546] SELinux: failed to load policy [ 461.311677][ T3489] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 461.501231][T26563] FAULT_INJECTION: forcing a failure. [ 461.501231][T26563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.514500][T26563] CPU: 1 UID: 0 PID: 26563 Comm: syz.5.7547 Not tainted syzkaller #0 PREEMPT(voluntary) [ 461.514533][T26563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.514542][T26563] Call Trace: [ 461.514548][T26563] [ 461.514554][T26563] __dump_stack+0x1d/0x30 [ 461.514585][T26563] dump_stack_lvl+0x95/0xd0 [ 461.514599][T26563] dump_stack+0x15/0x1b [ 461.514613][T26563] should_fail_ex+0x265/0x280 [ 461.514630][T26563] should_fail+0xb/0x20 [ 461.514643][T26563] should_fail_usercopy+0x1a/0x20 [ 461.514748][T26563] strncpy_from_user+0x27/0x260 [ 461.514770][T26563] getname_flags+0xae/0x3b0 [ 461.514787][T26563] __se_sys_statx+0x5e/0x1b0 [ 461.514818][T26563] ? vfs_write+0x7e8/0x960 [ 461.514831][T26563] ? __rcu_read_unlock+0x4f/0x70 [ 461.514848][T26563] ? __fget_files+0x184/0x1c0 [ 461.514864][T26563] ? mutex_unlock+0x4f/0x90 [ 461.514881][T26563] ? fput+0x8f/0xc0 [ 461.514898][T26563] ? ksys_write+0x192/0x1a0 [ 461.514912][T26563] __x64_sys_statx+0x67/0x80 [ 461.514972][T26563] x64_sys_call+0x2d43/0x3000 [ 461.515068][T26563] do_syscall_64+0xca/0x2b0 [ 461.515090][T26563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.515105][T26563] RIP: 0033:0x7f327afdf749 [ 461.515117][T26563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.515183][T26563] RSP: 002b:00007f3279a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 461.515201][T26563] RAX: ffffffffffffffda RBX: 00007f327b235fa0 RCX: 00007f327afdf749 [ 461.515211][T26563] RDX: 0000000000006000 RSI: 0000200000019180 RDI: ffffffffffffffff [ 461.515219][T26563] RBP: 00007f3279a47090 R08: 0000000000000000 R09: 0000000000000000 [ 461.515228][T26563] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 461.515237][T26563] R13: 00007f327b236038 R14: 00007f327b235fa0 R15: 00007ffd5f901d58 [ 461.515309][T26563] [ 461.732988][T26567] random: crng reseeded on system resumption [ 461.742783][T26523] pimreg: left allmulticast mode [ 461.867919][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 461.867938][ T29] audit: type=1326 audit(1767022458.684:55228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26584 comm="syz.3.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff869bef749 code=0x7ffc0000 [ 461.898072][ T29] audit: type=1326 audit(1767022458.684:55229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26584 comm="syz.3.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff869bef749 code=0x7ffc0000 [ 461.921991][ T29] audit: type=1326 audit(1767022458.684:55230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26584 comm="syz.3.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff869bef749 code=0x7ffc0000 [ 461.945913][ T29] audit: type=1326 audit(1767022458.684:55231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26584 comm="syz.3.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff869bef749 code=0x7ffc0000 [ 461.969724][ T29] audit: type=1326 audit(1767022458.684:55232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26584 comm="syz.3.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff869bef749 code=0x7ffc0000 [ 461.993345][ T29] audit: type=1326 audit(1767022458.684:55233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26584 comm="syz.3.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff869bef749 code=0x7ffc0000 [ 462.017114][ T29] audit: type=1326 audit(1767022458.684:55234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26584 comm="syz.3.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff869bef749 code=0x7ffc0000 [ 462.040710][ T29] audit: type=1326 audit(1767022458.684:55235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26584 comm="syz.3.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff869bef749 code=0x7ffc0000 [ 462.064282][ T29] audit: type=1326 audit(1767022458.684:55236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26584 comm="syz.3.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff869bef749 code=0x7ffc0000 [ 462.087974][ T29] audit: type=1326 audit(1767022458.684:55237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26584 comm="syz.3.7557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff869bef749 code=0x7ffc0000 [ 462.112456][T26574] SELinux: policydb version 0 does not match my version range 15-35 [ 462.121031][T26574] SELinux: failed to load policy [ 462.293592][T26604] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 462.309053][T22041] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 462.318091][T22041] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 462.355585][T26609] loop0: detected capacity change from 0 to 128 [ 462.386790][T26611] ALSA: seq fatal error: cannot create timer (-22) [ 462.431526][T26617] ALSA: seq fatal error: cannot create timer (-22) [ 462.433068][T26600] lo speed is unknown, defaulting to 1000 [ 462.528587][ T3488] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 462.536339][T26626] loop5: detected capacity change from 0 to 2048 [ 462.544729][ T3488] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 462.569360][T26626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.582453][T26626] ext4 filesystem being mounted at /534/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.619567][T19771] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.668298][T26638] loop5: detected capacity change from 0 to 128 [ 462.760471][ T3714] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 462.760782][ T3669] Bluetooth: hci0: command 0x1003 tx timeout [ 462.782146][T26640] FAULT_INJECTION: forcing a failure. [ 462.782146][T26640] name failslab, interval 1, probability 0, space 0, times 0 [ 462.795018][T26640] CPU: 0 UID: 0 PID: 26640 Comm: syz.2.7575 Not tainted syzkaller #0 PREEMPT(voluntary) [ 462.795051][T26640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.795066][T26640] Call Trace: [ 462.795073][T26640] [ 462.795120][T26640] __dump_stack+0x1d/0x30 [ 462.795169][T26640] dump_stack_lvl+0x95/0xd0 [ 462.795187][T26640] dump_stack+0x15/0x1b [ 462.795201][T26640] should_fail_ex+0x265/0x280 [ 462.795218][T26640] should_failslab+0x8c/0xb0 [ 462.795233][T26640] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 462.795269][T26640] ? __alloc_skb+0x2ff/0x4b0 [ 462.795324][T26640] __alloc_skb+0x2ff/0x4b0 [ 462.795349][T26640] ? __alloc_skb+0x228/0x4b0 [ 462.795373][T26640] netlink_alloc_large_skb+0xbf/0xf0 [ 462.795462][T26640] netlink_sendmsg+0x3cf/0x6b0 [ 462.795488][T26640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.795572][T26640] __sock_sendmsg+0x145/0x180 [ 462.795607][T26640] ____sys_sendmsg+0x31e/0x4a0 [ 462.795628][T26640] ___sys_sendmsg+0x17b/0x1d0 [ 462.795655][T26640] __x64_sys_sendmsg+0xd4/0x160 [ 462.795705][T26640] x64_sys_call+0x17ba/0x3000 [ 462.795793][T26640] do_syscall_64+0xca/0x2b0 [ 462.795816][T26640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.795831][T26640] RIP: 0033:0x7fb9e980f749 [ 462.795843][T26640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.795870][T26640] RSP: 002b:00007fb9e8277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.795885][T26640] RAX: ffffffffffffffda RBX: 00007fb9e9a65fa0 RCX: 00007fb9e980f749 [ 462.795894][T26640] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000006 [ 462.795902][T26640] RBP: 00007fb9e8277090 R08: 0000000000000000 R09: 0000000000000000 [ 462.795979][T26640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.795988][T26640] R13: 00007fb9e9a66038 R14: 00007fb9e9a65fa0 R15: 00007ffc4b5cb4a8 [ 462.796059][T26640] [ 463.025310][T26647] loop5: detected capacity change from 0 to 128 [ 463.042011][T26647] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 463.054941][T26647] ext4 filesystem being mounted at /537/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 463.118296][T19771] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 463.155632][T26653] ALSA: seq fatal error: cannot create timer (-22) [ 463.335902][T26660] validate_nla: 5 callbacks suppressed [ 463.335919][T26660] netlink: 'syz.0.7582': attribute type 3 has an invalid length. [ 463.339357][T26658] FAULT_INJECTION: forcing a failure. [ 463.339357][T26658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.362602][T26658] CPU: 1 UID: 0 PID: 26658 Comm: syz.5.7581 Not tainted syzkaller #0 PREEMPT(voluntary) [ 463.362637][T26658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.362652][T26658] Call Trace: [ 463.362661][T26658] [ 463.362671][T26658] __dump_stack+0x1d/0x30 [ 463.362702][T26658] dump_stack_lvl+0x95/0xd0 [ 463.362803][T26658] dump_stack+0x15/0x1b [ 463.362827][T26658] should_fail_ex+0x265/0x280 [ 463.362855][T26658] should_fail+0xb/0x20 [ 463.362878][T26658] should_fail_usercopy+0x1a/0x20 [ 463.363014][T26658] _copy_to_user+0x20/0xa0 [ 463.363053][T26658] pagemap_read+0x379/0x5e0 [ 463.363131][T26658] ? __pfx_pagemap_read+0x10/0x10 [ 463.363157][T26658] vfs_read+0x1a8/0x770 [ 463.363176][T26658] ? __fget_files+0x184/0x1c0 [ 463.363196][T26658] ? __rcu_read_unlock+0x4f/0x70 [ 463.363236][T26658] ? __fget_files+0x184/0x1c0 [ 463.363261][T26658] ? mutex_unlock+0x4f/0x90 [ 463.363294][T26658] __x64_sys_pread64+0xfd/0x150 [ 463.363319][T26658] x64_sys_call+0x281b/0x3000 [ 463.363405][T26658] do_syscall_64+0xca/0x2b0 [ 463.363443][T26658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.363466][T26658] RIP: 0033:0x7f327afdf749 [ 463.363485][T26658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.363569][T26658] RSP: 002b:00007f3279a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 463.363591][T26658] RAX: ffffffffffffffda RBX: 00007f327b235fa0 RCX: 00007f327afdf749 [ 463.363604][T26658] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000004 [ 463.363619][T26658] RBP: 00007f3279a47090 R08: 0000000000000000 R09: 0000000000000000 [ 463.363634][T26658] R10: 0000000fffffdff8 R11: 0000000000000246 R12: 0000000000000001 [ 463.363649][T26658] R13: 00007f327b236038 R14: 00007f327b235fa0 R15: 00007ffd5f901d58 [ 463.363741][T26658] [ 463.676356][T26670] ALSA: seq fatal error: cannot create timer (-22) [ 463.752576][T26680] loop4: detected capacity change from 0 to 128 [ 463.773322][T26679] block device autoloading is deprecated and will be removed. [ 463.842282][T26694] ALSA: seq fatal error: cannot create timer (-22) [ 463.923219][T26708] netlink: 'syz.2.7601': attribute type 3 has an invalid length. [ 463.993482][T26715] FAULT_INJECTION: forcing a failure. [ 463.993482][T26715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.006834][T26715] CPU: 1 UID: 0 PID: 26715 Comm: syz.2.7604 Not tainted syzkaller #0 PREEMPT(voluntary) [ 464.006889][T26715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.006911][T26715] Call Trace: [ 464.006917][T26715] [ 464.006924][T26715] __dump_stack+0x1d/0x30 [ 464.006952][T26715] dump_stack_lvl+0x95/0xd0 [ 464.007055][T26715] dump_stack+0x15/0x1b [ 464.007114][T26715] should_fail_ex+0x265/0x280 [ 464.007137][T26715] should_fail+0xb/0x20 [ 464.007167][T26715] should_fail_usercopy+0x1a/0x20 [ 464.007195][T26715] _copy_from_user+0x1c/0xb0 [ 464.007232][T26715] ___sys_sendmsg+0xc1/0x1d0 [ 464.007270][T26715] __x64_sys_sendmsg+0xd4/0x160 [ 464.007300][T26715] x64_sys_call+0x17ba/0x3000 [ 464.007405][T26715] do_syscall_64+0xca/0x2b0 [ 464.007439][T26715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.007464][T26715] RIP: 0033:0x7fb9e980f749 [ 464.007483][T26715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.007548][T26715] RSP: 002b:00007fb9e8277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.007572][T26715] RAX: ffffffffffffffda RBX: 00007fb9e9a65fa0 RCX: 00007fb9e980f749 [ 464.007643][T26715] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000006 [ 464.007657][T26715] RBP: 00007fb9e8277090 R08: 0000000000000000 R09: 0000000000000000 [ 464.007671][T26715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.007686][T26715] R13: 00007fb9e9a66038 R14: 00007fb9e9a65fa0 R15: 00007ffc4b5cb4a8 [ 464.007707][T26715] [ 464.195334][T26712] loop4: detected capacity change from 0 to 8192 [ 464.243099][T26719] __nla_validate_parse: 24 callbacks suppressed [ 464.243117][T26719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7606'. [ 464.281081][T26719] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 464.351317][T26730] netlink: 'syz.4.7610': attribute type 4 has an invalid length. [ 464.392660][T26733] loop4: detected capacity change from 0 to 164 [ 464.411725][T26733] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 464.430721][T26733] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 464.453331][T26733] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 464.470863][T26733] Symlink component flag not implemented [ 464.476549][T26733] Symlink component flag not implemented [ 464.495783][T26733] Symlink component flag not implemented (7) [ 464.501937][T26733] Symlink component flag not implemented (116) [ 464.713709][T26755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7620'. [ 464.764609][T26761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7622'. [ 464.795778][T15429] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.806489][T26759] netlink: 'syz.0.7621': attribute type 4 has an invalid length. [ 464.816010][T15429] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.833752][T26755] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 464.845713][T26765] FAULT_INJECTION: forcing a failure. [ 464.845713][T26765] name failslab, interval 1, probability 0, space 0, times 0 [ 464.858469][T26765] CPU: 1 UID: 0 PID: 26765 Comm: syz.0.7624 Not tainted syzkaller #0 PREEMPT(voluntary) [ 464.858521][T26765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.858537][T26765] Call Trace: [ 464.858545][T26765] [ 464.858555][T26765] __dump_stack+0x1d/0x30 [ 464.858586][T26765] dump_stack_lvl+0x95/0xd0 [ 464.858612][T26765] dump_stack+0x15/0x1b [ 464.858631][T26765] should_fail_ex+0x265/0x280 [ 464.858685][T26765] should_failslab+0x8c/0xb0 [ 464.858706][T26765] __kvmalloc_node_noprof+0x149/0x6b0 [ 464.858734][T26765] ? pfifo_fast_init+0xce/0x360 [ 464.858871][T26765] ? __pfx_pfifo_fast_dequeue+0x10/0x10 [ 464.858906][T26765] pfifo_fast_init+0xce/0x360 [ 464.858935][T26765] qdisc_create_dflt+0xef/0x2d0 [ 464.859013][T26765] dev_activate+0x209/0x9e0 [ 464.859047][T26765] __dev_open+0x4b4/0x560 [ 464.859073][T26765] __dev_change_flags+0x147/0x3c0 [ 464.859099][T26765] netif_change_flags+0x5a/0xd0 [ 464.859164][T26765] dev_change_flags+0xce/0x180 [ 464.859192][T26765] devinet_ioctl+0x531/0xe00 [ 464.859230][T26765] inet_ioctl+0x2f8/0x3a0 [ 464.859366][T26765] packet_ioctl+0x239/0x280 [ 464.859388][T26765] sock_do_ioctl+0x73/0x220 [ 464.859442][T26765] sock_ioctl+0x41b/0x610 [ 464.859520][T26765] ? __pfx_sock_ioctl+0x10/0x10 [ 464.859638][T26765] __se_sys_ioctl+0xce/0x140 [ 464.859677][T26765] __x64_sys_ioctl+0x43/0x50 [ 464.859785][T26765] x64_sys_call+0x14b0/0x3000 [ 464.859862][T26765] do_syscall_64+0xca/0x2b0 [ 464.859898][T26765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.859919][T26765] RIP: 0033:0x7fc5d695f749 [ 464.859935][T26765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.860067][T26765] RSP: 002b:00007fc5d53bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.860094][T26765] RAX: ffffffffffffffda RBX: 00007fc5d6bb5fa0 RCX: 00007fc5d695f749 [ 464.860110][T26765] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000005 [ 464.860127][T26765] RBP: 00007fc5d53bf090 R08: 0000000000000000 R09: 0000000000000000 [ 464.860196][T26765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.860253][T26765] R13: 00007fc5d6bb6038 R14: 00007fc5d6bb5fa0 R15: 00007ffd665518f8 [ 464.860278][T26765] [ 464.860302][T26765] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 465.099036][T15429] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.134117][T15429] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.163639][T26775] loop4: detected capacity change from 0 to 1024 [ 465.177081][T26775] ext4: Unknown parameter 'uid' [ 465.199214][T26775] loop4: detected capacity change from 0 to 512 [ 465.211221][T26775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 465.218635][T26775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 465.238549][T26775] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c11c, mo2=0102] [ 465.246780][T26775] System zones: 0-2, 18-18, 34-34 [ 465.252562][T26775] EXT4-fs error (device loop4): ext4_quota_enable:7177: inode #4: comm syz.4.7629: iget: immutable or append flags not allowed on symlinks [ 465.270500][ T3488] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 465.288366][T26775] EXT4-fs error (device loop4): ext4_quota_enable:7180: comm syz.4.7629: Bad quota inode: 4, type: 1 [ 465.299427][ T3488] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 465.322220][T26775] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 465.358527][T26775] EXT4-fs (loop4): mount failed [ 465.437621][T26793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7635'. [ 465.458555][T26793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7635'. [ 465.487464][T26797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7636'. [ 465.522122][T26797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7636'. [ 465.530588][T26799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7634'. [ 465.540142][T26799] netlink: 'syz.5.7634': attribute type 30 has an invalid length. [ 465.548107][T26799] netlink: 'syz.5.7634': attribute type 29 has an invalid length. [ 465.556111][T26799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7634'. [ 465.567039][T26799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7634'. [ 465.578557][T26799] loop5: detected capacity change from 0 to 128 [ 465.587738][T26799] bio_check_eod: 132 callbacks suppressed [ 465.587757][T26799] syz.5.7634: attempt to access beyond end of device [ 465.587757][T26799] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 465.594593][T26804] random: crng reseeded on system resumption [ 465.608396][T26799] syz.5.7634: attempt to access beyond end of device [ 465.608396][T26799] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 465.627089][T26799] buffer_io_error: 9 callbacks suppressed [ 465.627108][T26799] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 465.656740][T26799] syz.5.7634: attempt to access beyond end of device [ 465.656740][T26799] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 465.670666][T26799] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 465.676606][T26811] loop4: detected capacity change from 0 to 512 [ 465.679805][T26799] syz.5.7634: attempt to access beyond end of device [ 465.679805][T26799] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 465.685781][T15427] Bluetooth: hci0: Frame reassembly failed (-84) [ 465.706107][T26811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 465.721200][T26799] syz.5.7634: attempt to access beyond end of device [ 465.721200][T26799] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 465.727337][T26811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.734920][T26799] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 465.756286][T26799] syz.5.7634: attempt to access beyond end of device [ 465.756286][T26799] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 465.770165][T26799] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 465.779129][T26799] syz.5.7634: attempt to access beyond end of device [ 465.779129][T26799] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 465.782423][T26811] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 465.792940][T26799] syz.5.7634: attempt to access beyond end of device [ 465.792940][T26799] loop5: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 465.816856][T26799] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 465.825598][T26799] syz.5.7634: attempt to access beyond end of device [ 465.825598][T26799] loop5: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 465.839294][T26799] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 465.848136][T26799] syz.5.7634: attempt to access beyond end of device [ 465.848136][T26799] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 465.862393][T26799] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 465.871001][T26799] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 465.888339][T26799] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 465.896982][T26799] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 465.904553][T26823] FAULT_INJECTION: forcing a failure. [ 465.904553][T26823] name failslab, interval 1, probability 0, space 0, times 0 [ 465.918203][T26823] CPU: 1 UID: 0 PID: 26823 Comm: syz.2.7645 Not tainted syzkaller #0 PREEMPT(voluntary) [ 465.918292][T26823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.918306][T26823] Call Trace: [ 465.918378][T26823] [ 465.918386][T26823] __dump_stack+0x1d/0x30 [ 465.918415][T26823] dump_stack_lvl+0x95/0xd0 [ 465.918478][T26823] dump_stack+0x15/0x1b [ 465.918500][T26823] should_fail_ex+0x265/0x280 [ 465.918517][T26823] should_failslab+0x8c/0xb0 [ 465.918577][T26823] __kmalloc_noprof+0xb9/0x5a0 [ 465.918657][T26823] ? io_alloc_ocqe+0xaa/0x2a0 [ 465.918712][T26823] io_alloc_ocqe+0xaa/0x2a0 [ 465.918804][T26823] io_cqe_overflow_locked+0x26/0x40 [ 465.918822][T26823] __io_submit_flush_completions+0x35c/0xb10 [ 465.918880][T26823] io_submit_sqes+0x101c/0x11b0 [ 465.918907][T26823] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 465.918935][T26823] ? 0xffffffff81000000 [ 465.918970][T26823] ? __rcu_read_unlock+0x4f/0x70 [ 465.918985][T26823] ? proc_fail_nth_write+0x13b/0x160 [ 465.919004][T26823] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 465.919029][T26823] ? vfs_write+0x7e8/0x960 [ 465.919042][T26823] ? __rcu_read_unlock+0x4f/0x70 [ 465.919086][T26823] ? __fget_files+0x184/0x1c0 [ 465.919155][T26823] ? mutex_unlock+0x4f/0x90 [ 465.919217][T26823] ? fput+0x8f/0xc0 [ 465.919235][T26823] __x64_sys_io_uring_enter+0x78/0x90 [ 465.919258][T26823] x64_sys_call+0x27e4/0x3000 [ 465.919274][T26823] do_syscall_64+0xca/0x2b0 [ 465.919337][T26823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.919352][T26823] RIP: 0033:0x7fb9e980f749 [ 465.919363][T26823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.919456][T26823] RSP: 002b:00007fb9e8277038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 465.919479][T26823] RAX: ffffffffffffffda RBX: 00007fb9e9a65fa0 RCX: 00007fb9e980f749 [ 465.919547][T26823] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 465.919563][T26823] RBP: 00007fb9e8277090 R08: 0000000000000000 R09: 0000000000000000 [ 465.919578][T26823] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 465.919593][T26823] R13: 00007fb9e9a66038 R14: 00007fb9e9a65fa0 R15: 00007ffc4b5cb4a8 [ 465.919615][T26823] [ 467.283473][T26841] netlink: 'syz.2.7653': attribute type 10 has an invalid length. [ 467.372448][T26842] FAULT_INJECTION: forcing a failure. [ 467.372448][T26842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.385747][T26842] CPU: 1 UID: 0 PID: 26842 Comm: syz.3.7650 Not tainted syzkaller #0 PREEMPT(voluntary) [ 467.385848][T26842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.385861][T26842] Call Trace: [ 467.385881][T26842] [ 467.385889][T26842] __dump_stack+0x1d/0x30 [ 467.385918][T26842] dump_stack_lvl+0x95/0xd0 [ 467.385951][T26842] dump_stack+0x15/0x1b [ 467.385974][T26842] should_fail_ex+0x265/0x280 [ 467.386003][T26842] should_fail+0xb/0x20 [ 467.386095][T26842] should_fail_usercopy+0x1a/0x20 [ 467.386133][T26842] _copy_from_user+0x1c/0xb0 [ 467.386163][T26842] __sys_connect+0xd0/0x2b0 [ 467.386239][T26842] __x64_sys_connect+0x3f/0x50 [ 467.386270][T26842] x64_sys_call+0x2e09/0x3000 [ 467.386299][T26842] do_syscall_64+0xca/0x2b0 [ 467.386338][T26842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.386363][T26842] RIP: 0033:0x7ff869bef749 [ 467.386379][T26842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.386459][T26842] RSP: 002b:00007ff868636038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 467.386483][T26842] RAX: ffffffffffffffda RBX: 00007ff869e46090 RCX: 00007ff869bef749 [ 467.386496][T26842] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000009 [ 467.386511][T26842] RBP: 00007ff868636090 R08: 0000000000000000 R09: 0000000000000000 [ 467.386574][T26842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.386588][T26842] R13: 00007ff869e46128 R14: 00007ff869e46090 R15: 00007ffe97e73838 [ 467.386611][T26842] [ 467.400462][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 467.400480][ T29] audit: type=1400 audit(1767022464.194:55573): avc: denied { bind } for pid=26834 comm="syz.3.7650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 467.575096][ T29] audit: type=1400 audit(1767022464.194:55574): avc: denied { listen } for pid=26834 comm="syz.3.7650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 467.595060][ T29] audit: type=1400 audit(1767022464.204:55575): avc: denied { connect } for pid=26836 comm="syz.0.7651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 467.671983][T26854] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 467.710853][T26864] netlink: 'syz.3.7660': attribute type 4 has an invalid length. [ 467.720411][ T3714] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 467.728022][T26811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.769943][T26872] random: crng reseeded on system resumption [ 467.782221][T26856] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 468.009794][T26893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 468.068872][T15429] Bluetooth: hci0: Frame reassembly failed (-84) [ 468.073124][T26900] loop0: detected capacity change from 0 to 512 [ 468.082717][T26905] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 468.093623][T26900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 468.118154][T26900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.118283][ T29] audit: type=1326 audit(1767022464.934:55576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26909 comm="syz.4.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3cdf749 code=0x7ffc0000 [ 468.154989][ T29] audit: type=1326 audit(1767022464.974:55577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26909 comm="syz.4.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f1de3cdf749 code=0x7ffc0000 [ 468.178777][ T29] audit: type=1326 audit(1767022464.974:55578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26909 comm="syz.4.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3cdf749 code=0x7ffc0000 [ 468.179054][T26900] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 468.202474][ T29] audit: type=1326 audit(1767022464.974:55579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26909 comm="syz.4.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1de3cdf749 code=0x7ffc0000 [ 468.202527][ T29] audit: type=1326 audit(1767022464.974:55580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26909 comm="syz.4.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3cdf749 code=0x7ffc0000 [ 468.260462][ T29] audit: type=1326 audit(1767022464.974:55581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26909 comm="syz.4.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3cdf749 code=0x7ffc0000 [ 468.284484][ T29] audit: type=1326 audit(1767022464.974:55582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26909 comm="syz.4.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1de3cdf749 code=0x7ffc0000 [ 468.748568][T26942] FAULT_INJECTION: forcing a failure. [ 468.748568][T26942] name failslab, interval 1, probability 0, space 0, times 0 [ 468.761375][T26942] CPU: 1 UID: 0 PID: 26942 Comm: syz.5.7684 Not tainted syzkaller #0 PREEMPT(voluntary) [ 468.761410][T26942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 468.761425][T26942] Call Trace: [ 468.761461][T26942] [ 468.761471][T26942] __dump_stack+0x1d/0x30 [ 468.761533][T26942] dump_stack_lvl+0x95/0xd0 [ 468.761561][T26942] dump_stack+0x15/0x1b [ 468.761585][T26942] should_fail_ex+0x265/0x280 [ 468.761684][T26942] should_failslab+0x8c/0xb0 [ 468.761710][T26942] kmem_cache_alloc_noprof+0x69/0x4b0 [ 468.761836][T26942] ? prepare_creds+0x39/0x550 [ 468.761859][T26942] prepare_creds+0x39/0x550 [ 468.761878][T26942] copy_creds+0x8f/0x340 [ 468.761896][T26942] ? dup_task_struct+0x60b/0x950 [ 468.761963][T26942] copy_process+0x638/0x1ef0 [ 468.761988][T26942] kernel_clone+0x16c/0x5c0 [ 468.762010][T26942] __x64_sys_clone+0xe6/0x120 [ 468.762036][T26942] x64_sys_call+0x12d0/0x3000 [ 468.762112][T26942] do_syscall_64+0xca/0x2b0 [ 468.762152][T26942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.762247][T26942] RIP: 0033:0x7f327afdf749 [ 468.762263][T26942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.762285][T26942] RSP: 002b:00007f3279a04fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 468.762310][T26942] RAX: ffffffffffffffda RBX: 00007f327b236180 RCX: 00007f327afdf749 [ 468.762372][T26942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 468.762385][T26942] RBP: 00007f3279a05090 R08: 0000000000000000 R09: 0000000000000000 [ 468.762397][T26942] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 468.762411][T26942] R13: 00007f327b236218 R14: 00007f327b236180 R15: 00007ffd5f901d58 [ 468.762430][T26942] [ 469.090886][T26942] lo speed is unknown, defaulting to 1000 [ 469.227936][T26940] SELinux: policydb version 0 does not match my version range 15-35 [ 469.244115][T26940] SELinux: failed to load policy [ 469.300183][T26947] netlink: 'syz.5.7688': attribute type 3 has an invalid length. [ 469.430596][T26956] netlink: 'syz.3.7693': attribute type 4 has an invalid length. [ 469.440228][T26959] __nla_validate_parse: 11 callbacks suppressed [ 469.440247][T26959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7694'. [ 469.441662][T26958] block device autoloading is deprecated and will be removed. [ 469.509462][T26958] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7690'. [ 469.528582][T26970] ALSA: seq fatal error: cannot create timer (-22) [ 469.534134][T26971] Cannot find add_set index 0 as target [ 469.562878][T26973] random: crng reseeded on system resumption [ 469.609444][T26975] random: crng reseeded on system resumption [ 469.617655][T26951] lo speed is unknown, defaulting to 1000 [ 469.810226][T26992] netlink: 'syz.5.7706': attribute type 4 has an invalid length. [ 469.843210][T26994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7707'. [ 469.853393][T26994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 469.873199][T26994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7707'. [ 469.885767][T26994] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 469.936484][T26999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.945095][T26999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.959137][T27001] ALSA: seq fatal error: cannot create timer (-22) [ 469.985981][T15422] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.988680][T27003] Invalid argument reading file caps for ./file0 [ 469.995094][T15422] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.995137][T15422] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.995244][T15422] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.120610][ T3669] Bluetooth: hci0: command 0x1003 tx timeout [ 470.122128][ T3714] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 470.134414][T26900] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.147291][T27009] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 470.158301][T27012] loop0: detected capacity change from 0 to 512 [ 470.167168][T27012] EXT4-fs (loop0): 1 truncate cleaned up [ 470.173952][T27012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.248185][T22693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.279595][T27023] netlink: 'syz.0.7717': attribute type 4 has an invalid length. [ 470.305808][T27027] loop0: detected capacity change from 0 to 128 [ 470.334040][T27031] ALSA: seq fatal error: cannot create timer (-22) [ 470.352789][T27029] loop4: detected capacity change from 0 to 8192 [ 470.362133][T27029] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 470.368878][T27029] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 470.376608][T27029] vhci_hcd vhci_hcd.0: Device attached [ 470.385082][T27029] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 470.394055][T27029] FAT-fs (loop4): Filesystem has been set read-only [ 470.401554][T27029] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 1046) [ 470.412035][T27036] openvswitch: netlink: Missing key (keys=40, expected=80) [ 470.420322][T27034] vhci_hcd: connection closed [ 470.420871][T15425] vhci_hcd vhci_hcd.4: stop threads [ 470.421571][T27036] 9p: Bad value for 'source' [ 470.425670][T15425] vhci_hcd vhci_hcd.4: release socket [ 470.440996][T15425] vhci_hcd vhci_hcd.4: disconnect device [ 470.457224][T15422] Bluetooth: hci0: Frame reassembly failed (-84) [ 470.591497][T27048] loop5: detected capacity change from 0 to 512 [ 470.599726][T27048] EXT4-fs: Ignoring removed bh option [ 470.605555][T27048] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 470.615813][T27048] EXT4-fs (loop5): 1 truncate cleaned up [ 470.622065][T27048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.698648][T19771] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.796302][T27058] netlink: 'syz.5.7731': attribute type 4 has an invalid length. [ 470.962237][T27066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7735'. [ 470.975261][T27070] random: crng reseeded on system resumption [ 470.999380][T27072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7738'. [ 471.014870][T27080] ipt_rpfilter: unknown options [ 471.032473][T27072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7738'. [ 471.088823][T27086] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7738'. [ 471.235023][T27104] FAULT_INJECTION: forcing a failure. [ 471.235023][T27104] name failslab, interval 1, probability 0, space 0, times 0 [ 471.247876][T27104] CPU: 0 UID: 0 PID: 27104 Comm: syz.5.7745 Not tainted syzkaller #0 PREEMPT(voluntary) [ 471.247941][T27104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.247956][T27104] Call Trace: [ 471.247965][T27104] [ 471.247974][T27104] __dump_stack+0x1d/0x30 [ 471.248051][T27104] dump_stack_lvl+0x95/0xd0 [ 471.248107][T27104] dump_stack+0x15/0x1b [ 471.248130][T27104] should_fail_ex+0x265/0x280 [ 471.248157][T27104] should_failslab+0x8c/0xb0 [ 471.248180][T27104] kmem_cache_alloc_noprof+0x69/0x4b0 [ 471.248216][T27104] ? alloc_empty_file+0x76/0x200 [ 471.248258][T27104] alloc_empty_file+0x76/0x200 [ 471.248290][T27104] path_openat+0x63/0x23b0 [ 471.248380][T27104] ? __rcu_read_unlock+0x4f/0x70 [ 471.248401][T27104] ? terminate_walk+0x1e6/0x210 [ 471.248427][T27104] ? path_openat+0x1d88/0x23b0 [ 471.248484][T27104] ? path_openat+0x1e82/0x23b0 [ 471.248560][T27104] ? _parse_integer_limit+0x170/0x190 [ 471.248657][T27104] do_filp_open+0x109/0x230 [ 471.248701][T27104] do_open_execat+0xd8/0x260 [ 471.248739][T27104] alloc_bprm+0x25/0x350 [ 471.248792][T27104] do_execveat_common+0x12e/0x750 [ 471.248819][T27104] __x64_sys_execve+0x5c/0x70 [ 471.248932][T27104] x64_sys_call+0x271d/0x3000 [ 471.248960][T27104] do_syscall_64+0xca/0x2b0 [ 471.249000][T27104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.249026][T27104] RIP: 0033:0x7f327afdf749 [ 471.249104][T27104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.249123][T27104] RSP: 002b:00007f3279a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 471.249250][T27104] RAX: ffffffffffffffda RBX: 00007f327b235fa0 RCX: 00007f327afdf749 [ 471.249263][T27104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 471.249275][T27104] RBP: 00007f3279a47090 R08: 0000000000000000 R09: 0000000000000000 [ 471.249287][T27104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.249299][T27104] R13: 00007f327b236038 R14: 00007f327b235fa0 R15: 00007ffd5f901d58 [ 471.249330][T27104] [ 471.515282][T27112] random: crng reseeded on system resumption [ 471.544805][T27115] loop4: detected capacity change from 0 to 512 [ 471.554495][T27115] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.7752: corrupted in-inode xattr: e_value size too large [ 471.572474][T27115] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.7752: couldn't read orphan inode 15 (err -117) [ 471.587283][T27115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.600950][T27115] SET target dimension over the limit! [ 471.611030][T27115] can0: slcan on ptm1. [ 471.678664][T27122] loop0: detected capacity change from 0 to 2048 [ 471.682018][T27123] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7752'. [ 471.702319][T27122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.730163][T27122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7753'. [ 471.740567][T27115] can0 (unregistered): slcan off ptm1. [ 471.750691][T27115] FAULT_INJECTION: forcing a failure. [ 471.750691][T27115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.764019][T27115] CPU: 1 UID: 0 PID: 27115 Comm: syz.4.7752 Not tainted syzkaller #0 PREEMPT(voluntary) [ 471.764048][T27115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.764060][T27115] Call Trace: [ 471.764068][T27115] [ 471.764076][T27115] __dump_stack+0x1d/0x30 [ 471.764105][T27115] dump_stack_lvl+0x95/0xd0 [ 471.764217][T27115] dump_stack+0x15/0x1b [ 471.764240][T27115] should_fail_ex+0x265/0x280 [ 471.764267][T27115] should_fail+0xb/0x20 [ 471.764290][T27115] should_fail_usercopy+0x1a/0x20 [ 471.764318][T27115] _copy_from_user+0x1c/0xb0 [ 471.764385][T27115] __copy_msghdr+0x244/0x300 [ 471.764418][T27115] ___sys_sendmsg+0x109/0x1d0 [ 471.764505][T27115] __x64_sys_sendmsg+0xd4/0x160 [ 471.764541][T27115] x64_sys_call+0x17ba/0x3000 [ 471.764569][T27115] do_syscall_64+0xca/0x2b0 [ 471.764671][T27115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.764692][T27115] RIP: 0033:0x7f1de3cdf749 [ 471.764708][T27115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.764725][T27115] RSP: 002b:00007f1de273f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.764748][T27115] RAX: ffffffffffffffda RBX: 00007f1de3f35fa0 RCX: 00007f1de3cdf749 [ 471.764763][T27115] RDX: 0000000004000000 RSI: 0000200000000400 RDI: 000000000000000e [ 471.764848][T27115] RBP: 00007f1de273f090 R08: 0000000000000000 R09: 0000000000000000 [ 471.764864][T27115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.764878][T27115] R13: 00007f1de3f36038 R14: 00007f1de3f35fa0 R15: 00007ffd47dcdf18 [ 471.764977][T27115] [ 471.940643][T22693] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 471.970467][T22693] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 471.970751][T23381] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.996398][T22693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.087930][T27142] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 472.162585][T27151] loop0: detected capacity change from 0 to 512 [ 472.182849][T27151] EXT4-fs (loop0): 1 truncate cleaned up [ 472.189373][T27151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.206368][T27147] lo speed is unknown, defaulting to 1000 [ 472.212633][T27149] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 472.249660][ T3488] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 472.253249][T27160] ALSA: seq fatal error: cannot create timer (-22) [ 472.264813][ T3488] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 472.309771][T27164] loop5: detected capacity change from 0 to 512 [ 472.340643][T27169] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 472.357440][T27164] EXT4-fs (loop5): 1 truncate cleaned up [ 472.363789][T27164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.510784][T27176] FAULT_INJECTION: forcing a failure. [ 472.510784][T27176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.520443][ T3714] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 472.524038][T27176] CPU: 1 UID: 0 PID: 27176 Comm: syz.2.7770 Not tainted syzkaller #0 PREEMPT(voluntary) [ 472.524068][T27176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 472.524101][T27176] Call Trace: [ 472.524108][T27176] [ 472.524116][T27176] __dump_stack+0x1d/0x30 [ 472.524142][T27176] dump_stack_lvl+0x95/0xd0 [ 472.524173][T27176] dump_stack+0x15/0x1b [ 472.524193][T27176] should_fail_ex+0x265/0x280 [ 472.524220][T27176] should_fail+0xb/0x20 [ 472.524240][T27176] should_fail_usercopy+0x1a/0x20 [ 472.524265][T27176] strncpy_from_user+0x27/0x260 [ 472.524314][T27176] path_setxattrat+0xeb/0x310 [ 472.524354][T27176] __x64_sys_lsetxattr+0x71/0x90 [ 472.524379][T27176] x64_sys_call+0x2ef0/0x3000 [ 472.524482][T27176] do_syscall_64+0xca/0x2b0 [ 472.524528][T27176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.524551][T27176] RIP: 0033:0x7fb9e980f749 [ 472.524568][T27176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.524661][T27176] RSP: 002b:00007fb9e8277038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 472.524683][T27176] RAX: ffffffffffffffda RBX: 00007fb9e9a65fa0 RCX: 00007fb9e980f749 [ 472.524738][T27176] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000200000000900 [ 472.524751][T27176] RBP: 00007fb9e8277090 R08: 0000000000000000 R09: 0000000000000000 [ 472.524765][T27176] R10: 0000000000000025 R11: 0000000000000246 R12: 0000000000000001 [ 472.524777][T27176] R13: 00007fb9e9a66038 R14: 00007fb9e9a65fa0 R15: 00007ffc4b5cb4a8 [ 472.524797][T27176] [ 472.524828][ T3669] Bluetooth: hci0: command 0x1003 tx timeout [ 472.641205][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 472.641223][ T29] audit: type=1400 audit(1767022469.464:55874): avc: denied { ioctl } for pid=27185 comm="syz.2.7774" path="socket:[95584]" dev="sockfs" ino=95584 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 472.733522][ T29] audit: type=1400 audit(1767022469.554:55875): avc: denied { bind } for pid=27190 comm="syz.2.7775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 472.763996][ T29] audit: type=1400 audit(1767022469.554:55876): avc: denied { listen } for pid=27190 comm="syz.2.7775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 472.799624][ T29] audit: type=1400 audit(1767022469.614:55877): avc: denied { create } for pid=27193 comm="syz.2.7777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 472.819792][ T29] audit: type=1400 audit(1767022469.614:55878): avc: denied { connect } for pid=27193 comm="syz.2.7777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 472.840212][ T29] audit: type=1400 audit(1767022469.614:55879): avc: denied { write } for pid=27193 comm="syz.2.7777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 472.876002][T27197] ALSA: seq fatal error: cannot create timer (-22) [ 472.928208][ T29] audit: type=1400 audit(1767022469.744:55880): avc: denied { read } for pid=27204 comm="syz.3.7782" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 472.952062][ T29] audit: type=1400 audit(1767022469.744:55881): avc: denied { open } for pid=27204 comm="syz.3.7782" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 472.993994][T22693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.073868][ T29] audit: type=1400 audit(1767022469.894:55882): avc: denied { create } for pid=27216 comm="syz.4.7789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 473.095508][ T29] audit: type=1400 audit(1767022469.914:55883): avc: denied { write } for pid=27216 comm="syz.4.7789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 473.227454][T19771] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.299041][T27215] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 473.343122][T27229] loop0: detected capacity change from 0 to 512 [ 473.367334][T27229] EXT4-fs (loop0): 1 truncate cleaned up [ 473.373589][T27229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.406782][T27231] random: crng reseeded on system resumption [ 473.499601][T27246] veth1_to_bond: entered allmulticast mode [ 473.520688][T27246] veth1_to_bond: left allmulticast mode [ 473.585611][T27253] loop4: detected capacity change from 0 to 512 [ 473.611516][T27253] EXT4-fs (loop4): 1 truncate cleaned up [ 473.632411][T27253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.779630][T27266] SELinux: policydb version 0 does not match my version range 15-35 [ 473.790584][T27266] SELinux: failed to load policy [ 473.939562][T27286] netlink: 'syz.2.7811': attribute type 30 has an invalid length. [ 473.947825][T27286] netlink: 'syz.2.7811': attribute type 29 has an invalid length. [ 474.080864][T27289] netlink: 'syz.5.7815': attribute type 10 has an invalid length. [ 474.150617][T26790] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 474.166438][T26790] EXT4-fs (loop4): Remounting filesystem read-only [ 474.184696][T22693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.203595][T27294] SELinux: policydb version 0 does not match my version range 15-35 [ 474.211906][T27294] SELinux: failed to load policy [ 474.236477][T27298] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 474.413342][T23381] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.453420][T27320] EXT4-fs (loop5): 1 truncate cleaned up [ 474.459572][T27320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.537016][T27319] !yz!: rxe_newlink: already configured on team_slave_0 [ 474.575516][T27327] SELinux: policydb version 0 does not match my version range 15-35 [ 474.584114][T27327] SELinux: failed to load policy [ 474.603681][T27329] __nla_validate_parse: 27 callbacks suppressed [ 474.603697][T27329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7830'. [ 474.626023][T27329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7830'. [ 474.924402][T27365] SELinux: policydb version 0 does not match my version range 15-35 [ 474.933280][T27365] SELinux: failed to load policy [ 475.015428][T27368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7845'. [ 475.024522][T27368] netlink: 'syz.4.7845': attribute type 30 has an invalid length. [ 475.032438][T27368] netlink: 'syz.4.7845': attribute type 29 has an invalid length. [ 475.040251][T27368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7845'. [ 475.050552][T27368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7845'. [ 475.059555][T27368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7845'. [ 475.085925][T27368] bio_check_eod: 20 callbacks suppressed [ 475.085952][T27368] syz.4.7845: attempt to access beyond end of device [ 475.085952][T27368] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 475.105976][T27368] syz.4.7845: attempt to access beyond end of device [ 475.105976][T27368] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 475.119786][T27368] buffer_io_error: 9 callbacks suppressed [ 475.119804][T27368] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 475.119861][T27368] syz.4.7845: attempt to access beyond end of device [ 475.119861][T27368] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 475.119885][T27368] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 475.120245][T27368] syz.4.7845: attempt to access beyond end of device [ 475.120245][T27368] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 475.128919][T27368] syz.4.7845: attempt to access beyond end of device [ 475.128919][T27368] loop4: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 475.185322][T27368] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 475.194818][T27376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7846'. [ 475.203785][T27376] netlink: 'syz.0.7846': attribute type 30 has an invalid length. [ 475.208213][T27368] syz.4.7845: attempt to access beyond end of device [ 475.208213][T27368] loop4: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 475.211687][T27376] netlink: 'syz.0.7846': attribute type 29 has an invalid length. [ 475.211706][T27376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7846'. [ 475.225483][T27368] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 475.251374][T27368] syz.4.7845: attempt to access beyond end of device [ 475.251374][T27368] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 475.254945][T27376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7846'. [ 475.265788][T27368] syz.4.7845: attempt to access beyond end of device [ 475.265788][T27368] loop4: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 475.276673][T27376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7846'. [ 475.287631][T27368] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 475.311841][T27380] set_capacity_and_notify: 2 callbacks suppressed [ 475.311856][T27380] loop0: detected capacity change from 0 to 128 [ 475.325003][T27368] syz.4.7845: attempt to access beyond end of device [ 475.325003][T27368] loop4: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 475.338824][T27368] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 475.348144][T27368] syz.4.7845: attempt to access beyond end of device [ 475.348144][T27368] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 475.362907][T19771] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.370809][T27368] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 475.374071][T27376] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 475.380758][T27368] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 475.398632][T27376] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 475.415008][T27384] loop5: detected capacity change from 0 to 128 [ 475.484838][T27385] openvswitch: netlink: Missing key (keys=40, expected=80) [ 475.493843][T27385] 9p: Bad value for 'source' [ 475.500308][T27387] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 475.757441][T27407] netlink: 'syz.3.7860': attribute type 10 has an invalid length. [ 475.926600][T27416] netlink: 'syz.4.7863': attribute type 3 has an invalid length. [ 475.980566][T27420] loop4: detected capacity change from 0 to 512 [ 475.989185][T27420] EXT4-fs (loop4): 1 truncate cleaned up [ 475.995352][T27420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.081254][T27427] random: crng reseeded on system resumption [ 476.090690][T27422] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 476.105901][T27422] EXT4-fs (loop4): Remounting filesystem read-only [ 476.163249][ T3489] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 476.171155][ T3489] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 476.406181][T27450] random: crng reseeded on system resumption [ 476.551555][T27463] openvswitch: netlink: Missing key (keys=40, expected=80) [ 476.559591][T27463] 9p: Bad value for 'source' [ 476.634737][T27452] lo speed is unknown, defaulting to 1000 [ 476.663676][ T2447] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 476.723641][T27452] chnl_net:caif_netlink_parms(): no params data found [ 476.833887][T23381] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.951953][ T2447] bond0 (unregistering): Released all slaves [ 476.961108][ T2447] bond1 (unregistering): Released all slaves [ 476.976829][T27478] ipt_rpfilter: unknown options [ 477.005205][T27489] random: crng reseeded on system resumption [ 477.026595][T27452] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.033202][T27491] loop4: detected capacity change from 0 to 512 [ 477.033865][T27452] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.047796][T27452] bridge_slave_0: entered allmulticast mode [ 477.056429][T27491] EXT4-fs (loop4): 1 truncate cleaned up [ 477.057777][T27452] bridge_slave_0: entered promiscuous mode [ 477.062880][T27491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.099272][T27452] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.106479][T27452] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.114112][T27452] bridge_slave_1: entered allmulticast mode [ 477.120703][T27452] bridge_slave_1: entered promiscuous mode [ 477.137071][ T2447] hsr_slave_0: left promiscuous mode [ 477.144303][ T2447] hsr_slave_1: left promiscuous mode [ 477.209875][T15429] smc: removing ib device syz! [ 477.241354][T27502] loop0: detected capacity change from 0 to 512 [ 477.253431][T27502] EXT4-fs (loop0): 1 truncate cleaned up [ 477.264581][T27502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.291365][T27452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.319655][T27452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.376023][T27452] team0: Port device team_slave_0 added [ 477.392690][T27452] team0: Port device team_slave_1 added [ 477.430590][T27452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.437595][T27452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.463639][T27452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.477170][T27452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.484284][T27452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.510315][T27452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.529057][ T2447] IPVS: stop unused estimator thread 0... [ 477.543187][T27452] hsr_slave_0: entered promiscuous mode [ 477.549512][T27452] hsr_slave_1: entered promiscuous mode [ 477.555730][T27452] debugfs: 'hsr0' already exists in 'hsr' [ 477.561555][T27452] Cannot create hsr debugfs directory [ 477.568673][T27513] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 477.815137][T27452] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 477.824156][T27452] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.832798][T27452] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 477.841487][T27452] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 477.876151][T23381] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.878731][T27452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.898546][T27452] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.908487][T15429] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.915616][T15429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.929982][T15429] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.937220][T15429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.014300][ T2447] Bluetooth: hci0: Frame reassembly failed (-84) [ 478.020956][T27540] loop4: detected capacity change from 0 to 512 [ 478.029058][T27540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 478.030081][T27452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.053200][T27540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.071055][T27540] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 478.084356][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 478.084374][ T29] audit: type=1400 audit(1767022474.904:56026): avc: denied { read } for pid=27539 comm="syz.4.7902" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 478.120432][ T29] audit: type=1400 audit(1767022474.904:56027): avc: denied { open } for pid=27539 comm="syz.4.7902" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 478.145054][ T29] audit: type=1400 audit(1767022474.904:56028): avc: denied { ioctl } for pid=27539 comm="syz.4.7902" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 478.172939][T22693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.191881][T27549] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 478.195096][ T29] audit: type=1326 audit(1767022475.014:56029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27553 comm="syz.0.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 478.248348][ T29] audit: type=1326 audit(1767022475.034:56030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27553 comm="syz.0.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 478.272153][ T29] audit: type=1326 audit(1767022475.034:56031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27553 comm="syz.0.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 478.295841][ T29] audit: type=1326 audit(1767022475.034:56032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27553 comm="syz.0.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 478.319489][ T29] audit: type=1326 audit(1767022475.044:56033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27553 comm="syz.0.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 478.343077][ T29] audit: type=1326 audit(1767022475.044:56034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27553 comm="syz.0.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 478.366916][ T29] audit: type=1326 audit(1767022475.044:56035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27553 comm="syz.0.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 478.430343][T27452] veth0_vlan: entered promiscuous mode [ 478.439111][T27452] veth1_vlan: entered promiscuous mode [ 478.466784][T27452] veth0_macvtap: entered promiscuous mode [ 478.477412][T27452] veth1_macvtap: entered promiscuous mode [ 478.483832][T27567] loop0: detected capacity change from 0 to 512 [ 478.501775][T27452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.502344][T27567] EXT4-fs (loop0): 1 truncate cleaned up [ 478.516708][T27567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.532100][T27452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.553089][T27570] netlink: 'syz.2.7909': attribute type 10 has an invalid length. [ 478.565805][T15425] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.574783][T15425] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.583761][T15425] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.594015][T15425] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.699656][T27580] netlink: 'syz.5.7878': attribute type 3 has an invalid length. [ 478.890043][T27597] random: crng reseeded on system resumption [ 478.958638][T27599] netlink: 'syz.5.7919': attribute type 10 has an invalid length. [ 478.974015][T27599] team0 (unregistering): Port device team_slave_0 removed [ 478.984556][T27599] team0 (unregistering): Port device team_slave_1 removed [ 479.276686][T27616] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 479.286570][T27616] SELinux: failed to load policy [ 479.318036][T22693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.490335][T27627] random: crng reseeded on system resumption [ 479.574638][T27638] netlink: 'syz.0.7933': attribute type 30 has an invalid length. [ 479.586676][T27640] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 479.596909][T27640] SELinux: failed to load policy [ 479.602090][T27638] loop0: detected capacity change from 0 to 128 [ 479.623354][T27642] FAULT_INJECTION: forcing a failure. [ 479.623354][T27642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.636508][T27642] CPU: 1 UID: 0 PID: 27642 Comm: syz.3.7939 Not tainted syzkaller #0 PREEMPT(voluntary) [ 479.636532][T27642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.636540][T27642] Call Trace: [ 479.636616][T27642] [ 479.636622][T27642] __dump_stack+0x1d/0x30 [ 479.636640][T27642] dump_stack_lvl+0x95/0xd0 [ 479.636685][T27642] dump_stack+0x15/0x1b [ 479.636698][T27642] should_fail_ex+0x265/0x280 [ 479.636720][T27642] should_fail+0xb/0x20 [ 479.636761][T27642] should_fail_usercopy+0x1a/0x20 [ 479.636784][T27642] _copy_to_user+0x20/0xa0 [ 479.636803][T27642] simple_read_from_buffer+0xb5/0x130 [ 479.636882][T27642] proc_fail_nth_read+0x10e/0x150 [ 479.636902][T27642] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.636921][T27642] vfs_read+0x1a8/0x770 [ 479.636933][T27642] ? __rcu_read_unlock+0x4f/0x70 [ 479.636978][T27642] ? __fget_files+0x184/0x1c0 [ 479.636994][T27642] ? mutex_lock+0x58/0x90 [ 479.637012][T27642] ksys_read+0xda/0x1a0 [ 479.637026][T27642] __x64_sys_read+0x40/0x50 [ 479.637038][T27642] x64_sys_call+0x2889/0x3000 [ 479.637062][T27642] do_syscall_64+0xca/0x2b0 [ 479.637087][T27642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.637161][T27642] RIP: 0033:0x7ff869bee15c [ 479.637173][T27642] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 479.637186][T27642] RSP: 002b:00007ff868657030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.637202][T27642] RAX: ffffffffffffffda RBX: 00007ff869e45fa0 RCX: 00007ff869bee15c [ 479.637261][T27642] RDX: 000000000000000f RSI: 00007ff8686570a0 RDI: 0000000000000004 [ 479.637269][T27642] RBP: 00007ff868657090 R08: 0000000000000000 R09: 0000000000000000 [ 479.637301][T27642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.637310][T27642] R13: 00007ff869e46038 R14: 00007ff869e45fa0 R15: 00007ffe97e73838 [ 479.637337][T27642] [ 480.050456][ T3669] Bluetooth: hci0: command 0x1003 tx timeout [ 480.050457][ T3714] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 480.064731][T27540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.420782][T27668] __nla_validate_parse: 25 callbacks suppressed [ 480.420799][T27668] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7949'. [ 480.466357][T27672] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 480.476178][T27672] SELinux: failed to load policy [ 480.509793][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7952'. [ 480.536201][T15422] Bluetooth: hci0: Frame reassembly failed (-84) [ 480.543073][T27683] loop0: detected capacity change from 0 to 512 [ 480.550499][T27683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 480.562095][T27683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.574987][T27683] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 480.756626][T27692] loop5: detected capacity change from 0 to 8192 [ 480.766514][T27692] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 480.773196][T27692] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 480.781012][T27692] vhci_hcd vhci_hcd.0: Device attached [ 480.789202][T27692] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 480.798127][T27692] FAT-fs (loop5): Filesystem has been set read-only [ 480.805429][T27692] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1046) [ 480.816978][T27697] vhci_hcd: connection closed [ 480.817283][T15422] vhci_hcd vhci_hcd.5: stop threads [ 480.827410][T15422] vhci_hcd vhci_hcd.5: release socket [ 480.832976][T15422] vhci_hcd vhci_hcd.5: disconnect device [ 481.381019][T27724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7968'. [ 481.412461][T27724] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.419834][T27724] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.447133][T27725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7968'. [ 481.447792][T27724] bridge_slave_0: left allmulticast mode [ 481.461833][T27724] bridge_slave_0: left promiscuous mode [ 481.467533][T27724] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.480166][T27724] bridge_slave_1: left allmulticast mode [ 481.486039][T27724] bridge_slave_1: left promiscuous mode [ 481.492209][T27724] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.502487][T27724] bond0: (slave bond_slave_0): Releasing backup interface [ 481.512279][T27724] bond0: (slave bond_slave_1): Releasing backup interface [ 481.524057][T27724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.532137][T27726] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 481.540520][T27724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.550031][T27724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.559083][T27724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.570133][T27724] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 481.590468][T27728] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7969'. [ 481.601518][T27728] validate_nla: 1 callbacks suppressed [ 481.601537][T27728] netlink: 'syz.4.7969': attribute type 3 has an invalid length. [ 481.622930][T27730] random: crng reseeded on system resumption [ 481.657879][T27736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7973'. [ 481.691509][T27734] blktrace: Concurrent blktraces are not allowed on loop10 [ 481.781063][T27742] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7974'. [ 481.801605][T27749] random: crng reseeded on system resumption [ 481.885664][T27758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7980'. [ 481.894740][T27758] netlink: 'syz.2.7980': attribute type 30 has an invalid length. [ 481.902651][T27758] netlink: 'syz.2.7980': attribute type 29 has an invalid length. [ 481.910509][T27758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7980'. [ 481.920663][T27758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7980'. [ 481.955254][T27757] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 482.058041][T27765] random: crng reseeded on system resumption [ 482.594871][T27789] SELinux: policydb string does not match my string SE Linux [ 482.603397][ T3669] Bluetooth: hci0: command 0x1003 tx timeout [ 482.603751][T27789] SELinux: failed to load policy [ 482.609566][ T3714] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 482.622347][T27683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.675933][T27800] random: crng reseeded on system resumption [ 482.747269][T27805] !yz!: rxe_newlink: already configured on team_slave_0 [ 482.837030][T27804] loop0: detected capacity change from 0 to 32768 [ 482.881008][T27804] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 482.886299][T27804] loop0: p1 start 460800 is beyond EOD, truncated [ 482.892935][T27804] loop0: p2 size 83886080 extends beyond EOD, truncated [ 482.901934][T27804] loop0: p5 start 460800 is beyond EOD, truncated [ 482.908381][T27804] loop0: p6 size 83886080 extends beyond EOD, truncated [ 483.002363][T27820] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 483.040438][ T2909] Bluetooth: hci0: Frame reassembly failed (-84) [ 483.041461][T27820] syz1: rxe_newlink: already configured on veth0_to_bond [ 483.078520][T27824] SELinux: policydb string does not match my string SE Linux [ 483.086374][T27824] SELinux: failed to load policy [ 483.191645][T27829] netlink: 'syz.0.8007': attribute type 30 has an invalid length. [ 483.199526][T27829] netlink: 'syz.0.8007': attribute type 29 has an invalid length. [ 483.223022][T27829] loop0: detected capacity change from 0 to 128 [ 483.233607][T27829] bio_check_eod: 80 callbacks suppressed [ 483.233624][T27829] syz.0.8007: attempt to access beyond end of device [ 483.233624][T27829] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 483.253547][T27829] syz.0.8007: attempt to access beyond end of device [ 483.253547][T27829] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 483.267438][T27829] buffer_io_error: 47 callbacks suppressed [ 483.267454][T27829] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 483.282586][T27829] syz.0.8007: attempt to access beyond end of device [ 483.282586][T27829] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 483.296445][T27829] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 483.305661][T27829] syz.0.8007: attempt to access beyond end of device [ 483.305661][T27829] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 483.320079][T27829] syz.0.8007: attempt to access beyond end of device [ 483.320079][T27829] loop0: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 483.334004][T27829] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 483.342699][T27829] syz.0.8007: attempt to access beyond end of device [ 483.342699][T27829] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 483.356507][T27829] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 483.365804][T27829] syz.0.8007: attempt to access beyond end of device [ 483.365804][T27829] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 483.379772][T27829] syz.0.8007: attempt to access beyond end of device [ 483.379772][T27829] loop0: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 483.393662][T27829] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 483.403529][T27829] syz.0.8007: attempt to access beyond end of device [ 483.403529][T27829] loop0: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 483.417435][T27829] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 483.426480][T27829] syz.0.8007: attempt to access beyond end of device [ 483.426480][T27829] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 483.440899][T27829] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 483.449506][T27829] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 483.460962][T27829] Buffer I/O error on dev loop0, logical block 87, lost async page write [ 483.469574][T27829] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 483.543295][T27832] random: crng reseeded on system resumption [ 483.631862][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 483.631880][ T29] audit: type=1400 audit(1767022480.454:56227): avc: denied { write } for pid=27836 comm="syz.4.8010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 483.658655][ T29] audit: type=1400 audit(1767022480.454:56228): avc: denied { nlmsg_read } for pid=27836 comm="syz.4.8010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 483.823903][T27856] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 483.845096][T27858] SELinux: policydb string does not match my string SE Linux [ 483.853145][T27858] SELinux: failed to load policy [ 484.057895][T27863] netlink: 'syz.5.8019': attribute type 10 has an invalid length. [ 484.085991][T27865] random: crng reseeded on system resumption [ 484.161366][T27874] loop5: detected capacity change from 0 to 128 [ 484.172919][T27874] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 484.186440][T27874] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 484.222770][ T29] audit: type=1400 audit(1767022481.044:56229): avc: denied { read } for pid=27873 comm="syz.5.8024" path="/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 484.305523][T27452] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 484.315471][ T29] audit: type=1400 audit(1767022481.094:56230): avc: denied { setattr } for pid=27873 comm="syz.5.8024" path="/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 484.360326][ T29] audit: type=1400 audit(1767022481.104:56231): avc: denied { ioctl } for pid=27873 comm="syz.5.8024" path="/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop5" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 484.489023][T27884] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 484.515195][T27886] SELinux: policydb string SE L does not match my string SE Linux [ 484.535300][T27886] SELinux: failed to load policy [ 484.564697][ T29] audit: type=1326 audit(1767022481.384:56232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27891 comm="syz.4.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3cdf749 code=0x7ffc0000 [ 484.592287][ T29] audit: type=1326 audit(1767022481.384:56233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27891 comm="syz.4.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3cdf749 code=0x7ffc0000 [ 484.616034][ T29] audit: type=1326 audit(1767022481.414:56234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27891 comm="syz.4.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de3cdf749 code=0x7ffc0000 [ 484.639795][ T29] audit: type=1326 audit(1767022481.414:56235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27891 comm="syz.4.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3cdf749 code=0x7ffc0000 [ 484.663789][ T29] audit: type=1326 audit(1767022481.414:56236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27891 comm="syz.4.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de3cdf749 code=0x7ffc0000 [ 484.895398][T27906] loop4: detected capacity change from 0 to 32768 [ 484.918522][T27910] loop5: detected capacity change from 0 to 512 [ 484.931382][T27910] EXT4-fs (loop5): 1 truncate cleaned up [ 484.939435][T27910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.952233][T27906] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 484.958854][T27906] loop4: p1 start 460800 is beyond EOD, truncated [ 484.965358][T27906] loop4: p2 size 83886080 extends beyond EOD, truncated [ 484.976265][T27906] loop4: p5 start 460800 is beyond EOD, truncated [ 484.982901][T27906] loop4: p6 size 83886080 extends beyond EOD, truncated [ 485.080486][ T3714] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 485.086933][ T3669] Bluetooth: hci0: command 0x1003 tx timeout [ 485.112124][T27923] netlink: 'syz.3.8042': attribute type 3 has an invalid length. [ 485.173265][T27927] netlink: 'syz.4.8044': attribute type 10 has an invalid length. [ 485.252589][T27945] block device autoloading is deprecated and will be removed. [ 485.281253][T27949] netlink: 'syz.4.8050': attribute type 30 has an invalid length. [ 485.289249][T27949] netlink: 'syz.4.8050': attribute type 29 has an invalid length. [ 485.303160][T27949] loop4: detected capacity change from 0 to 128 [ 485.578742][T27983] loop0: detected capacity change from 0 to 128 [ 485.758097][T27452] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.084299][T27997] loop5: detected capacity change from 0 to 8192 [ 486.093699][T27997] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 486.102563][T27997] FAT-fs (loop5): Filesystem has been set read-only [ 486.109641][T27997] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1046) [ 486.150077][T28001] random: crng reseeded on system resumption [ 486.203502][T28005] __nla_validate_parse: 21 callbacks suppressed [ 486.203522][T28005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8078'. [ 486.221944][T28005] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 486.254312][T28005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8078'. [ 486.266153][T28005] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 486.363651][T28022] SELinux: policydb string SE Linu does not match my string SE Linux [ 486.369601][T28023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8081'. [ 486.372020][T28022] SELinux: failed to load policy [ 486.380905][T28023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8081'. [ 486.398370][T28023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8081'. [ 486.415928][T28023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8081'. [ 486.500147][T28033] random: crng reseeded on system resumption [ 486.531918][T28037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8090'. [ 486.580102][T28042] loop0: detected capacity change from 0 to 2048 [ 486.587172][T28042] EXT4-fs: Ignoring removed nobh option [ 486.605035][T28042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.623873][T28042] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.661911][T28042] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 486.717801][T28055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8092'. [ 486.839722][T28045] loop4: detected capacity change from 0 to 32768 [ 486.855545][T22693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.867273][T28059] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 486.878037][T28061] loop0: detected capacity change from 0 to 128 [ 486.901111][T28045] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 486.906491][T28045] loop4: p1 start 460800 is beyond EOD, truncated [ 486.913034][T28045] loop4: p2 size 83886080 extends beyond EOD, truncated [ 486.921652][T28045] loop4: p5 start 460800 is beyond EOD, truncated [ 486.928248][T28045] loop4: p6 size 83886080 extends beyond EOD, truncated [ 487.076612][T28074] validate_nla: 4 callbacks suppressed [ 487.076626][T28074] netlink: 'syz.4.8102': attribute type 10 has an invalid length. [ 487.146455][T28081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8105'. [ 487.155972][T28081] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 487.177593][T28081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8105'. [ 487.209243][T28081] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 487.468281][T28099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 487.515385][T28099] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 487.778099][T28131] loop0: detected capacity change from 0 to 2048 [ 487.842616][T28131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.861649][T15425] Bluetooth: hci0: Frame reassembly failed (-84) [ 487.873727][T28135] loop5: detected capacity change from 0 to 512 [ 487.898814][T28135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.959878][T28135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.991645][T22693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.029217][T28135] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 488.189209][T22041] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 488.205300][T22041] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 488.343500][T28161] random: crng reseeded on system resumption [ 488.563791][T28199] random: crng reseeded on system resumption [ 488.636506][T28197] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 488.643146][T28197] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 488.651001][T28197] vhci_hcd vhci_hcd.0: Device attached [ 488.659850][T28202] vhci_hcd: connection closed [ 488.659981][T15425] vhci_hcd vhci_hcd.3: stop threads [ 488.670202][T15425] vhci_hcd vhci_hcd.3: release socket [ 488.675630][T15425] vhci_hcd vhci_hcd.3: disconnect device [ 488.744447][T28212] netlink: 'syz.4.8150': attribute type 30 has an invalid length. [ 488.830951][T28217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 488.870709][T28217] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 488.930767][T28225] netlink: 'syz.4.8155': attribute type 30 has an invalid length. [ 488.996576][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 488.996594][ T29] audit: type=1326 audit(1767022485.814:56653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.0.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 489.027148][ T29] audit: type=1326 audit(1767022485.814:56654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.0.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 489.051315][ T29] audit: type=1326 audit(1767022485.814:56655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.0.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 489.075209][ T29] audit: type=1326 audit(1767022485.814:56656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.0.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 489.098995][ T29] audit: type=1326 audit(1767022485.814:56657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.0.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 489.122605][ T29] audit: type=1326 audit(1767022485.814:56658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.0.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 489.146349][ T29] audit: type=1326 audit(1767022485.814:56659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.0.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 489.170138][ T29] audit: type=1326 audit(1767022485.814:56660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.0.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 489.177584][T28235] netlink: 'syz.0.8159': attribute type 10 has an invalid length. [ 489.194789][ T29] audit: type=1326 audit(1767022485.814:56661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.0.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d695f749 code=0x7ffc0000 [ 489.226271][ T29] audit: type=1326 audit(1767022485.814:56662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.0.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5d695df90 code=0x7ffc0000 [ 489.298351][T28250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 489.325181][T28250] syz1: rxe_newlink: already configured on veth0_to_bond [ 489.399114][T28254] netlink: 'syz.3.8166': attribute type 10 has an invalid length. [ 489.413877][T28257] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 489.425210][T28259] netlink: 'syz.3.8168': attribute type 30 has an invalid length. [ 489.513610][T28266] netlink: 'syz.3.8171': attribute type 10 has an invalid length. [ 489.672657][T28272] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 489.679342][T28272] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 489.687067][T28272] vhci_hcd vhci_hcd.0: Device attached [ 489.697698][T28274] vhci_hcd: connection closed [ 489.697846][ T2909] vhci_hcd vhci_hcd.2: stop threads [ 489.708140][ T2909] vhci_hcd vhci_hcd.2: release socket [ 489.708168][ T2909] vhci_hcd vhci_hcd.2: disconnect device [ 489.840279][T28289] netlink: 'syz.3.8180': attribute type 30 has an invalid length. [ 489.880413][ T3669] Bluetooth: hci0: command 0x1003 tx timeout [ 489.883443][ T3714] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 489.894942][T28135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.953464][T28305] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 489.974134][T22041] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 489.982132][T22041] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 489.995553][T28305] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 490.307099][T15429] Bluetooth: hci0: Frame reassembly failed (-84) [ 490.310211][T28324] loop5: detected capacity change from 0 to 512 [ 490.320757][T28324] /dev/loop5: Can't open blockdev [ 490.324165][T28326] netlink: 'syz.0.8194': attribute type 30 has an invalid length. [ 490.515663][T28333] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 491.480643][T28356] netlink: 'syz.2.8206': attribute type 30 has an invalid length. [ 491.586688][T28362] __nla_validate_parse: 12 callbacks suppressed [ 491.586706][T28362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8208'. [ 491.602149][T28362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8208'. [ 491.633523][T28362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8208'. [ 491.642700][T28362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8208'. [ 491.661945][T28362] loop0: detected capacity change from 0 to 128 [ 491.680970][T28362] bio_check_eod: 50 callbacks suppressed [ 491.680990][T28362] syz.0.8208: attempt to access beyond end of device [ 491.680990][T28362] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 491.700665][T28362] syz.0.8208: attempt to access beyond end of device [ 491.700665][T28362] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 491.714452][T28362] buffer_io_error: 28 callbacks suppressed [ 491.714469][T28362] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 491.731238][T28362] syz.0.8208: attempt to access beyond end of device [ 491.731238][T28362] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 491.745078][T28362] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 491.754824][T28362] syz.0.8208: attempt to access beyond end of device [ 491.754824][T28362] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 491.768812][T28362] syz.0.8208: attempt to access beyond end of device [ 491.768812][T28362] loop0: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 491.782704][T28362] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 491.791308][T28362] syz.0.8208: attempt to access beyond end of device [ 491.791308][T28362] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 491.805128][T28362] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 491.811034][T28372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8213'. [ 491.814341][T28362] syz.0.8208: attempt to access beyond end of device [ 491.814341][T28362] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 491.838260][T28362] syz.0.8208: attempt to access beyond end of device [ 491.838260][T28362] loop0: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 491.852148][T28362] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 491.860810][T28362] syz.0.8208: attempt to access beyond end of device [ 491.860810][T28362] loop0: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 491.874529][T28362] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 491.883678][T28362] syz.0.8208: attempt to access beyond end of device [ 491.883678][T28362] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 491.896953][T28381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8215'. [ 491.898280][T28362] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 491.915271][T28362] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 491.925812][T28362] Buffer I/O error on dev loop0, logical block 87, lost async page write [ 491.937185][T28362] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 492.019211][T28396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8220'. [ 492.032030][T28396] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 492.074796][T28398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8221'. [ 492.202906][T28411] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8225'. [ 492.360530][ T3669] Bluetooth: hci0: command 0x1003 tx timeout [ 492.360501][ T3714] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 492.382252][T28419] loop5: detected capacity change from 0 to 128 [ 492.389133][T28419] /dev/loop5: Can't open blockdev [ 492.514676][T28425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8231'. [ 492.520726][ T5385] page_pool_release_retry() stalled pool shutdown: id 133, 1 inflight 61 sec [ 492.897490][T28441] validate_nla: 2 callbacks suppressed [ 492.897511][T28441] netlink: 'syz.0.8235': attribute type 30 has an invalid length. [ 492.911066][T28441] netlink: 'syz.0.8235': attribute type 29 has an invalid length. [ 492.940433][T28441] loop0: detected capacity change from 0 to 128 [ 493.016586][T28447] SET target dimension over the limit! [ 493.139306][T28450] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 493.307454][T28464] netlink: 'syz.5.8242': attribute type 30 has an invalid length. [ 493.315506][T28464] netlink: 'syz.5.8242': attribute type 29 has an invalid length. [ 493.334809][T28464] loop5: detected capacity change from 0 to 128 [ 493.513179][T22041] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 493.521760][T22041] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 493.588608][T28487] loop0: detected capacity change from 0 to 128 [ 494.261377][T28498] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 494.287298][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 494.287317][ T29] audit: type=1326 audit(1767022491.104:56905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28499 comm="syz.2.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 494.317487][ T29] audit: type=1326 audit(1767022491.114:56906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28499 comm="syz.2.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 494.341397][ T29] audit: type=1326 audit(1767022491.114:56907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28499 comm="syz.2.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 494.365038][ T29] audit: type=1326 audit(1767022491.114:56908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28499 comm="syz.2.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 494.388686][ T29] audit: type=1326 audit(1767022491.114:56909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28499 comm="syz.2.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 494.412461][ T29] audit: type=1326 audit(1767022491.114:56910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28499 comm="syz.2.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 494.436008][ T29] audit: type=1326 audit(1767022491.114:56911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28499 comm="syz.2.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 494.460093][ T29] audit: type=1326 audit(1767022491.114:56912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28499 comm="syz.2.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 494.483874][ T29] audit: type=1326 audit(1767022491.114:56913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28499 comm="syz.2.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 494.507658][ T29] audit: type=1326 audit(1767022491.114:56914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28499 comm="syz.2.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 494.555707][T28507] netlink: 'syz.4.8262': attribute type 10 has an invalid length. [ 494.635552][T28521] netlink: 'syz.0.8267': attribute type 3 has an invalid length. [ 494.681714][T28529] netlink: 'syz.4.8266': attribute type 30 has an invalid length. [ 494.689776][T28529] netlink: 'syz.4.8266': attribute type 29 has an invalid length. [ 494.700382][T28529] loop4: detected capacity change from 0 to 128 [ 494.722876][T28532] block device autoloading is deprecated and will be removed. [ 494.798193][T28537] loop0: detected capacity change from 0 to 512 [ 494.812248][T28537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.825034][T28537] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.835624][T28537] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.335316][T28544] netlink: 'syz.2.8271': attribute type 30 has an invalid length. [ 495.915476][T28552] loop4: detected capacity change from 0 to 128 [ 495.969012][T28562] random: crng reseeded on system resumption [ 496.012004][T28571] loop0: detected capacity change from 0 to 512 [ 496.020226][T28571] EXT4-fs (loop0): 1 truncate cleaned up [ 496.026523][T28571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.085291][T28569] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 496.203393][T28582] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 496.226002][T28584] netlink: 'syz.2.8286': attribute type 30 has an invalid length. [ 496.427140][T28605] loop5: detected capacity change from 0 to 128 [ 496.473901][T28611] Cannot find add_set index 0 as target [ 496.900470][T22693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.050695][T28630] __nla_validate_parse: 27 callbacks suppressed [ 497.050715][T28630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8304'. [ 497.108507][T28634] loop4: detected capacity change from 0 to 128 [ 497.167229][T28636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8307'. [ 497.281114][T28641] Cannot find add_set index 0 as target [ 497.404909][T28659] random: crng reseeded on system resumption [ 497.444003][T28661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8318'. [ 497.494544][T28676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8323'. [ 497.503995][T28676] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 497.524123][T28676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8323'. [ 497.533855][ T5385] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 497.541960][ T5385] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 497.553586][T28676] syz1: rxe_newlink: already configured on veth0_to_bond [ 497.832821][T28694] loop0: detected capacity change from 0 to 32768 [ 497.870811][T28694] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 497.876179][T28694] loop0: p1 start 460800 is beyond EOD, truncated [ 497.882624][T28694] loop0: p2 size 83886080 extends beyond EOD, truncated [ 497.890960][T28694] loop0: p5 start 460800 is beyond EOD, truncated [ 497.897377][T28694] loop0: p6 size 83886080 extends beyond EOD, truncated [ 497.962246][T28696] random: crng reseeded on system resumption [ 498.043083][T28703] Cannot find add_set index 0 as target [ 498.105425][T28714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8337'. [ 498.128065][T28717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8339'. [ 498.137828][T28717] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 498.195830][T28717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8339'. [ 498.411384][T28720] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 498.528350][T28732] validate_nla: 3 callbacks suppressed [ 498.528367][T28732] netlink: 'syz.5.8341': attribute type 10 has an invalid length. [ 498.591923][T28735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8342'. [ 498.699845][T28741] Cannot find add_set index 0 as target [ 498.786320][T28737] loop5: detected capacity change from 0 to 8192 [ 498.811223][T28737] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 498.820242][T28737] FAT-fs (loop5): Filesystem has been set read-only [ 498.840608][T28737] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1046) [ 498.865174][T28750] netlink: 'syz.4.8350': attribute type 30 has an invalid length. [ 498.995997][T28769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8355'. [ 499.028660][T28775] Cannot find add_set index 0 as target [ 499.341408][T28795] netlink: 'syz.0.8366': attribute type 30 has an invalid length. [ 499.503521][T28800] loop0: detected capacity change from 0 to 512 [ 499.522352][T28800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.535206][T28800] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.546262][T28800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.726866][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 499.726887][ T29] audit: type=1326 audit(1767022496.544:57310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28806 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 499.767596][ T29] audit: type=1326 audit(1767022496.544:57311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28806 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 499.791600][ T29] audit: type=1326 audit(1767022496.544:57312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28806 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 499.816040][ T29] audit: type=1326 audit(1767022496.544:57313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28806 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 499.827407][T28811] random: crng reseeded on system resumption [ 499.839691][ T29] audit: type=1326 audit(1767022496.544:57314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28806 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 499.869531][ T29] audit: type=1326 audit(1767022496.544:57315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28806 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 499.893328][ T29] audit: type=1326 audit(1767022496.544:57316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28806 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 499.917290][ T29] audit: type=1326 audit(1767022496.544:57317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28806 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 499.940992][ T29] audit: type=1326 audit(1767022496.544:57318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28806 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e980f749 code=0x7ffc0000 [ 499.964938][ T29] audit: type=1326 audit(1767022496.544:57319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28806 comm="syz.2.8369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb9e980de97 code=0x7ffc0000 [ 500.032261][T28821] IPv6: NLM_F_CREATE should be specified when creating new route [ 500.130981][T28821] lo speed is unknown, defaulting to 1000 [ 500.165017][T28823] !yz!: rxe_newlink: already configured on team_slave_0 [ 500.216186][T28831] netlink: 'syz.4.8378': attribute type 30 has an invalid length. [ 500.229842][T28832] SET target dimension over the limit! [ 500.393621][T28847] loop4: detected capacity change from 0 to 8192 [ 500.403633][T28847] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 500.410308][T28847] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 500.418294][T28847] vhci_hcd vhci_hcd.0: Device attached [ 500.432644][T28847] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 500.441633][T28847] FAT-fs (loop4): Filesystem has been set read-only [ 500.460109][T28847] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 1046) [ 500.472845][T28851] vhci_hcd: connection closed [ 500.476475][ T2862] vhci_hcd vhci_hcd.4: stop threads [ 500.486625][ T2862] vhci_hcd vhci_hcd.4: release socket [ 500.492094][ T2862] vhci_hcd vhci_hcd.4: disconnect device [ 500.679090][T28862] random: crng reseeded on system resumption [ 500.735432][T28867] FAULT_INJECTION: forcing a failure. [ 500.735432][T28867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.748660][T28867] CPU: 0 UID: 0 PID: 28867 Comm: syz.2.8390 Not tainted syzkaller #0 PREEMPT(voluntary) [ 500.748681][T28867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 500.748689][T28867] Call Trace: [ 500.748695][T28867] [ 500.748700][T28867] __dump_stack+0x1d/0x30 [ 500.748719][T28867] dump_stack_lvl+0x95/0xd0 [ 500.748807][T28867] dump_stack+0x15/0x1b [ 500.748827][T28867] should_fail_ex+0x265/0x280 [ 500.748854][T28867] should_fail+0xb/0x20 [ 500.748877][T28867] should_fail_usercopy+0x1a/0x20 [ 500.748901][T28867] _copy_from_user+0x1c/0xb0 [ 500.748994][T28867] do_replace+0x8a/0x320 [ 500.749051][T28867] do_ebt_set_ctl+0x12e/0xac0 [ 500.749161][T28867] ? _parse_integer_limit+0x170/0x190 [ 500.749175][T28867] ? __rcu_read_unlock+0x4f/0x70 [ 500.749200][T28867] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 500.749286][T28867] ? ip4_datagram_release_cb+0x351/0x380 [ 500.749302][T28867] ? _raw_spin_unlock_bh+0x36/0x40 [ 500.749317][T28867] ? release_sock+0x116/0x150 [ 500.749338][T28867] ? sockopt_release_sock+0x42/0x50 [ 500.749360][T28867] nf_setsockopt+0x199/0x1b0 [ 500.749376][T28867] ip_setsockopt+0x102/0x110 [ 500.749543][T28867] udp_setsockopt+0x99/0xb0 [ 500.749563][T28867] sock_common_setsockopt+0x69/0x80 [ 500.749586][T28867] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 500.749610][T28867] __sys_setsockopt+0x184/0x200 [ 500.749707][T28867] __x64_sys_setsockopt+0x64/0x80 [ 500.749725][T28867] x64_sys_call+0x21d5/0x3000 [ 500.749754][T28867] do_syscall_64+0xca/0x2b0 [ 500.749783][T28867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.749824][T28867] RIP: 0033:0x7fb9e980f749 [ 500.749836][T28867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.749849][T28867] RSP: 002b:00007fb9e8277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 500.749923][T28867] RAX: ffffffffffffffda RBX: 00007fb9e9a65fa0 RCX: 00007fb9e980f749 [ 500.749938][T28867] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000006 [ 500.749953][T28867] RBP: 00007fb9e8277090 R08: 00000000000003c0 R09: 0000000000000000 [ 500.749968][T28867] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.749981][T28867] R13: 00007fb9e9a66038 R14: 00007fb9e9a65fa0 R15: 00007ffc4b5cb4a8 [ 500.749994][T28867] [ 501.026240][T28875] netlink: 'syz.2.8394': attribute type 30 has an invalid length. [ 501.071545][T28876] loop5: detected capacity change from 0 to 512 [ 501.083981][T28876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.097764][T28876] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.108695][T28876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.176767][T28887] netlink: 'syz.3.8395': attribute type 30 has an invalid length. [ 501.184687][T28887] netlink: 'syz.3.8395': attribute type 29 has an invalid length. [ 501.339166][T28892] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 501.381632][T28899] random: crng reseeded on system resumption [ 501.417376][T28901] FAULT_INJECTION: forcing a failure. [ 501.417376][T28901] name failslab, interval 1, probability 0, space 0, times 0 [ 501.430181][T28901] CPU: 1 UID: 0 PID: 28901 Comm: syz.2.8401 Not tainted syzkaller #0 PREEMPT(voluntary) [ 501.430211][T28901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 501.430223][T28901] Call Trace: [ 501.430229][T28901] [ 501.430237][T28901] __dump_stack+0x1d/0x30 [ 501.430294][T28901] dump_stack_lvl+0x95/0xd0 [ 501.430315][T28901] dump_stack+0x15/0x1b [ 501.430333][T28901] should_fail_ex+0x265/0x280 [ 501.430365][T28901] should_failslab+0x8c/0xb0 [ 501.430436][T28901] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 501.430458][T28901] ? __alloc_skb+0x2ff/0x4b0 [ 501.430481][T28901] __alloc_skb+0x2ff/0x4b0 [ 501.430530][T28901] ? __alloc_skb+0x228/0x4b0 [ 501.430552][T28901] netlink_alloc_large_skb+0xbf/0xf0 [ 501.430653][T28901] netlink_sendmsg+0x3cf/0x6b0 [ 501.430692][T28901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.430721][T28901] __sock_sendmsg+0x145/0x180 [ 501.430780][T28901] ____sys_sendmsg+0x31e/0x4a0 [ 501.430808][T28901] ___sys_sendmsg+0x17b/0x1d0 [ 501.430915][T28901] __x64_sys_sendmsg+0xd4/0x160 [ 501.430944][T28901] x64_sys_call+0x17ba/0x3000 [ 501.430967][T28901] do_syscall_64+0xca/0x2b0 [ 501.431066][T28901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.431086][T28901] RIP: 0033:0x7fb9e980f749 [ 501.431101][T28901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.431119][T28901] RSP: 002b:00007fb9e8277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.431223][T28901] RAX: ffffffffffffffda RBX: 00007fb9e9a65fa0 RCX: 00007fb9e980f749 [ 501.431281][T28901] RDX: 0000000020048850 RSI: 0000200000006040 RDI: 0000000000000007 [ 501.431294][T28901] RBP: 00007fb9e8277090 R08: 0000000000000000 R09: 0000000000000000 [ 501.431305][T28901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.431317][T28901] R13: 00007fb9e9a66038 R14: 00007fb9e9a65fa0 R15: 00007ffc4b5cb4a8 [ 501.431335][T28901] [ 501.676971][T28905] netlink: 'syz.4.8403': attribute type 1 has an invalid length. [ 501.731638][T28907] loop4: detected capacity change from 0 to 128 [ 501.743388][T28907] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 501.757511][T28907] ext4 filesystem being mounted at /491/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 501.883913][T23381] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 501.886916][T28913] loop5: detected capacity change from 0 to 512 [ 501.901846][T23381] ================================================================== [ 501.903989][T28913] EXT4-fs (loop5): 1 truncate cleaned up [ 501.910059][T23381] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 501.923492][T23381] [ 501.925829][T23381] read-write to 0xffff888237d27550 of 8 bytes by task 28913 on cpu 1: [ 501.927838][T28913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.933998][T23381] find_get_block_common+0x498/0x8e0 [ 501.934033][T23381] bdev_getblk+0x4d/0x3f0 [ 501.934057][T23381] ext4_sb_breadahead_unmovable+0x45/0x180 [ 501.961635][T23381] __ext4_get_inode_loc+0x709/0x930 [ 501.966955][T23381] __ext4_iget+0x2ea/0x2350 [ 501.971487][T23381] ext4_fill_super+0x291d/0x37a0 [ 501.976451][T23381] get_tree_bdev_flags+0x291/0x300 [ 501.981590][T23381] get_tree_bdev+0x1f/0x30 [ 501.986008][T23381] ext4_get_tree+0x1c/0x30 [ 501.990507][T23381] vfs_get_tree+0x57/0x1d0 [ 501.994940][T23381] do_new_mount+0x24d/0x6a0 [ 501.999474][T23381] path_mount+0x4ab/0xb80 [ 502.003915][T23381] __se_sys_mount+0x28c/0x2e0 [ 502.008802][T23381] __x64_sys_mount+0x67/0x80 [ 502.013496][T23381] x64_sys_call+0x2cca/0x3000 [ 502.018193][T23381] do_syscall_64+0xca/0x2b0 [ 502.022737][T23381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.028746][T23381] [ 502.031088][T23381] read to 0xffff888237d27550 of 8 bytes by task 23381 on cpu 0: [ 502.038855][T23381] has_bh_in_lru+0x35/0x1f0 [ 502.043392][T23381] smp_call_function_many_cond+0x2a9/0xc40 [ 502.049215][T23381] on_each_cpu_cond_mask+0x3c/0x80 [ 502.054515][T23381] invalidate_bh_lrus+0x2a/0x30 [ 502.059372][T23381] blkdev_flush_mapping+0x9a/0x1a0 [ 502.064484][T23381] bdev_release+0x2bf/0x3d0 [ 502.068991][T23381] blkdev_release+0x15/0x20 [ 502.073507][T23381] __fput+0x29b/0x650 [ 502.077489][T23381] ____fput+0x1c/0x30 [ 502.081499][T23381] task_work_run+0x131/0x1a0 [ 502.086092][T23381] exit_to_user_mode_loop+0x1fe/0x740 [ 502.091456][T23381] do_syscall_64+0x1e1/0x2b0 [ 502.096047][T23381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.101948][T23381] [ 502.104268][T23381] value changed: 0x0000000000000000 -> 0xffff88810067ad68 [ 502.111377][T23381] [ 502.113724][T23381] Reported by Kernel Concurrency Sanitizer on: [ 502.119897][T23381] CPU: 0 UID: 0 PID: 23381 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 502.129956][T23381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 502.140282][T23381] ================================================================== [ 502.164434][T28926] netlink: 'syz.4.8408': attribute type 30 has an invalid length. [ 502.719497][T27452] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.