last executing test programs: 1.533628546s ago: executing program 4 (id=4601): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00\a\a_x\xba\'M8#\xcc\x93t\x02he6\x1e\x00\x00') statfs(0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000740)={0x8, 0x0, {0x5afc, @usage=0x9, 0x0, 0x3, 0x1, 0xb, 0x7, 0x9, 0x8, @usage, 0xa, 0x8, [0x3, 0x9, 0xd, 0x0, 0x3, 0x8]}, {0x7, @usage=0x4585, 0x0, 0x2, 0x0, 0x8, 0x6, 0x6, 0xa, @struct={0xffffffff, 0x5}, 0x5, 0x400, [0x8, 0x5, 0xa5d, 0x6260, 0x9, 0x2]}, {0x3, @usage, 0x0, 0x2, 0x8, 0x7, 0x10, 0x2, 0x90, @usage=0x4, 0x1, 0x6, [0x5, 0xb08a, 0x8001, 0x69ae, 0x5d, 0x6]}, {0x4000000, 0x4d, 0x6}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000b40)={r3, 0xf, 0x1, [0xba68, 0x0, 0x3ff, 0x9, 0x9], [0x31a, 0x80000000, 0x8, 0x7, 0x7fff, 0x0, 0x1, 0x0, 0xd3, 0x100000000, 0x0, 0x3, 0x6c830, 0x3, 0x7fffffff, 0x100000001, 0x3, 0x8, 0x7, 0x1, 0x7fffffffffffffff, 0x9000000000000, 0x1, 0x52, 0x2, 0xed, 0x83, 0x1c00000000000, 0x10000, 0x7, 0x7f, 0x4, 0xffffffffffffffff, 0x8, 0xb8, 0x100000001, 0x7, 0x9, 0xd, 0x52f, 0xffffffffffffffff, 0x0, 0x0, 0x53ff, 0x5, 0x9, 0x3729, 0x7, 0x8, 0x6, 0x2, 0xb, 0x6, 0x5, 0x0, 0x9, 0x4, 0x7, 0x3, 0x6, 0x1, 0x7fffffff, 0x6, 0x2, 0x2, 0x5, 0x5, 0x4, 0x9, 0x5, 0x8000000000000000, 0x1, 0x2, 0x3ff, 0x7fffffff, 0x0, 0x7, 0x7fff, 0x98fa, 0x6, 0x7, 0x10, 0x6, 0x1, 0x6, 0x6, 0x87, 0x4, 0x99ea, 0x5, 0x3, 0x8, 0x0, 0x8001, 0xaab, 0x0, 0x3, 0x8, 0x100000001, 0x8, 0x9, 0x3, 0x2, 0x8, 0x2, 0x0, 0x1e1, 0x8, 0x99a, 0x44, 0x9, 0x10, 0xfff, 0x6, 0x0, 0x0, 0x6e2, 0x8001, 0x1, 0x3, 0x8]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 1.513587057s ago: executing program 3 (id=4603): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r9, 0x0, 0x481c) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r10}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r11, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) 1.391634698s ago: executing program 3 (id=4607): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) pread64(r0, &(0x7f00000000c0)=""/28, 0x1c, 0xffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x147042, 0x0) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957eff13d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0a"], 0x208}, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_usbip_server_init(0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 1.387347579s ago: executing program 2 (id=4608): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2, 0x0, 0xb24}, 0x18) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.350031449s ago: executing program 2 (id=4610): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x1008}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5}]}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = io_uring_setup(0x253f, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0xffffffff}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r5, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) close_range(r4, 0xffffffffffffffff, 0x0) 1.30201817s ago: executing program 4 (id=4612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x662074a3fad61851, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@jmp={0x5, 0x0, 0x6, 0x8, 0x7, 0xffffffffffffffe0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0xd731, 0xc3, &(0x7f0000000300)=""/195, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x6, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000480)=[{0x4, 0x4, 0x0, 0x4}, {0x3, 0x2, 0x9, 0x8}, {0x3, 0x5, 0x10, 0xa}, {0x3, 0x4, 0x8, 0x8}, {0x5, 0x4, 0x7, 0x9}, {0x2, 0x5, 0x7, 0x2}, {0x4, 0x5, 0x5}], 0x10, 0x2, @void, @value}, 0x94) fsync(r0) r1 = request_key(&(0x7f0000000680)='cifs.spnego\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000740)='\x00', 0xfffffffffffffffc) r2 = request_key(0x0, 0x0, &(0x7f0000000800)='\x00\x00\x00plP\x00\xc6D\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf0\xb08\x93\x01Q\xd0\'\xa7\xf8ltF\xdb\x0f\x91\"\xbb\xb8t\xc9^\xc0A\xcd', r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000780)='./file0\x00', 0x513080, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=r3, @ANYRESDEC=r4, @ANYBLOB="7f17c917b51c716bbc448562769d3bf3be32e65d5a2c2c96ad9923fc86d1070854f7", @ANYRESDEC=0x0, @ANYRESHEX=r2, @ANYRESHEX=r4, @ANYRESOCT=r5, @ANYRES16=r4, @ANYRESHEX=r0]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r9 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000079a0a031f29c3e4f0ecec48ff8cdf21edabfa3d02c02dc53b6a5ec60155d95f2927a2442364331952fbf4a30d19af893a0719da6ae39c5ffdbf5a1967fcc096e07a58fb4ab85b924feab9ed2b6b5351967fb13e52a692f003dd68c7360a8a9da90bb177ca87002aecb36c3c9437e2452f4bd89f264772488b72571f7a982c73905576b8a713ad8137a5f2ae0453a5d9bc3b38a83d3a355cccbfc51f4d75a5134f74cd6dcf74443590362d3"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r6, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000540)={[{@usrjquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x181fffc}}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@discard}, {@nobarrier}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4f1, &(0x7f0000000880)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x42000000) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRES8], 0x1, 0x11ef, &(0x7f0000003980)="$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") 1.29502154s ago: executing program 1 (id=4614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x1000000, [{0x4, 0xc}]}, 0xc, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.149939103s ago: executing program 0 (id=4615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ff0000000000050000fe00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000500000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000c0643c9d678ba7dd8e17000007020000f8ffffffb703000008000000b7040000000000008500000043003b9ed9df42c75cf76a1b8db1b519f616237970a59bd3958fb1bbab048192c161df6e9a1e9ad8f600d8fa377e69f6768c2ab7407254182585873ecc388cdc80f94813094869a21121b781753c48a719ac023b8a14242036ab62ba52d5265e8a71f504948d44b39c86eee6d53a6c8b05ff19e2d9253531c7db2f2f4d9b76d45042b796b23d6557ee9485e0d3279d13f601fc208338a763e5c1ee30b3a9d1e6282e00"/244], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x4}, 0x7}]}, &(0x7f00000002c0)=0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r6, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x57e, 0x7e}}}}}, 0x28}}, 0x4000001) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000a00)={0x9f8, r6, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x4dc, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_b, @initial, {0x8, 0x1}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x9, @default, 0x2, @void, @void, @val={0x3, 0x1, 0x4}, @val={0x4, 0x6, {0x57, 0x9, 0x3, 0x9}}, @val={0x6, 0x2, 0x3}, @val={0x5, 0xa3, {0x8, 0xc1, 0x8, "1ea5183a767a9573f24cd6c9eaf04ee49213c074308abdc0a9d28bda36db77710fc7e87c826e3f63fe058ce2fde0268801ce9d30bd7a2a2a85d9b2e87bd943542e37b98407fbd585232c338451464396c3b951781a59394bce9d31d6d8882cfd3a580c753a75f7a1e7674a4abb318aae79e3e79b1688cea36d4e52c958ef04a03d732bdabf75910197f432511841e38196b22c737b675285d5fb7590bdaa4b7f"}}, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x6, 0x2, 0x30, 0x7}}, [{0xdd, 0x89, "f58252a94f26caa4086ab61b51611b0b382bd7d4699786fac4fe1ed7f9c2c6c1600d2222c54b1891631887974920dfb2452ca4ae36d8796a2b629fff3058de3b6e32e2729c75a8faf44d7bac8996aeab0c268c8f9942362a177d2289767a905287f010caea05910b7fb9d78eaeb2ea39464405819f89f23d1656cb972f3b5a1d5933918c8b4b0d6741"}, {0xdd, 0x40, "1d321e3dc007cb3f51430376e31c6e2c8b2fc8e8f6dce5f2cf17c67b7dc6b18a48249accbb3cc206e50503eab4ffc9cd294e4680345ab182e3550289808154d4"}, {0xdd, 0xa1, "287723bad990897d819f7b1a3dc69e714fd216bab663f188bda36796f0a11c6dd8b9a0eea54820821d3173567dd82ba0a37ef1eb3d8096fbe3ad7169b5b9874a071245b485eb3546fcf7c5f01c9f4ae1f322c6813ec75982ab5d7fd5b5f2f5c737d8ad0b11b5102647cbdda32c438338c970dbcf51ac72b9109bf73afe12d75f116d0a96b34701a8ddf5d8a1cfbec93048ec8667df2e848e8f3a30fe4c94d9eab1"}, {0xdd, 0xd4, "f394c59e2248e299b434f3e185c042e52427b7c368b8acc9bde40504440da71724a04cbf3df2fe52be06a90c54183879da0739bf85e423806c321712c5c81d64e6c16d4883f5a7f03763fa0d16a6ff90f03e9e8a0ae68984ecf95cd297c778f1753b35ce1ce3b9cd23725d2eacb0a320f5319dfeb8f6971c01a510e82d815cc5349a4b8d9e46710a033ff4e6c5c7be402b1874fb4292c274ee710a7db8e5627281efac09774a00f73fb02e1708b25dc45c73ebc9ba984e1c4b0d94934c6a088ae917338cefe162082c1cea1cf291757a05b4c96a"}, {0xdd, 0xba, "8db64f45cf3bfd9caa0c760458c9902a8ad10d28615494c0b3e6d912a5b047abf4f230dad46974c45bd177b57e528d5907f80f5b9a4bbfe5b89d3eac56023bcf7ae3d413a626b265f01cfda021efcb58abfa15c2407277f01ab49a4846b48b6daadc55b554187ba4c8121d3d64d70307adf7e7c26a9ab6d8e74eec5279c73ccd359fe94d34535aab802f7930dca061b121b32754792ccb58057cc0499d10aef8eeeb55919aefb47ce372383413e2d464c3a7316df9df09674f94"}, {0xdd, 0x2e, "0a64f8fb5228d9c1a2018ac426311b5faf415c909d3db78bb21396e555d7f13689f99fd5239684568e2b6c3755e5"}, {0xdd, 0x8d, "35b28ce2e97ee4666325beeeda9ff12f567753aa4889c3d592801ac22637e69ce121dd65e1efe84e2ce8d92ba372e7053af9e043595730739a48469e1b1f0f9d7538c8943d12cdf630f503232af960dcd1620ef9edd79272f9cbf76dae65f421dfdffcbd660ddd160281b79d8eb7b1bde70557bdd175d4ae7d0ea362b542263b8c2d3d69a586fe419fe284f696"}, {0xdd, 0x26, "07015442d0d1732e308ecc7c138a75c1aad6826a93cbd2f59640d0a7e63d99954d2b6f05b92c"}]}}, @NL80211_ATTR_PROBE_RESP={0x3b6, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x38, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x2f, 0x3, "5447964d11ae35d323135df34854f0b53f0ca85fd1e4959baf2654d99282d85447cd292d8404e9176e02ff"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x27, 0x7f, [@erp={0x2a, 0x1, {0x0, 0x1}}, @chsw_timing={0x68, 0x4, {0x0, 0x2}}, @mic={0x8c, 0x18, {0xe34, "c0c698aca7f8", @long="14d2d921f98f79c6e050bec075773c72"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x8f, 0x7f, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x6, 0x9, @device_b, 0x5, 0x39b3, 0xd}}, @mesh_chsw={0x76, 0x6, {0xd, 0x10, 0x10, 0xffff}}, @random={0x8, 0x62, "0e6301b22a701f2a3ad652773ddd9d3a1435b1f3ae195e77a1b55360755d28f98432bd5e4bb55d989eb13ac42f2ece5da96f21438c86135f604404d2a125bac2243e2f4801e16aad02a7bdcd161b1b039ed8592f689c6fa1ba930f2355b3ee494a38"}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@ht={0x2d, 0x1a, {0x1, 0x1, 0x4, 0x0, {0x8, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x8, 0xd7}}, @channel_switch={0x25, 0x3, {0x1, 0x8c, 0x69}}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2e}]}]}, 0x9f8}, 0x1, 0x0, 0x0, 0x42885}, 0x8042) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000640)={0x40, {{0xa, 0x4e21, 0xe3, @local, 0x3}}}, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000006c0), 0x1, 0x509, &(0x7f0000001500)="$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") stat(&(0x7f0000000280)='./file2\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@filename='./file2\x00', r9, 0x0) shmdt(0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r10, 0x6, &(0x7f0000002000)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r10, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r10, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 1.009034195s ago: executing program 1 (id=4616): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x662074a3fad61851, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@jmp={0x5, 0x0, 0x6, 0x8, 0x7, 0xffffffffffffffe0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0xd731, 0xc3, &(0x7f0000000300)=""/195, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x6, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000480)=[{0x4, 0x4, 0x0, 0x4}, {0x3, 0x2, 0x9, 0x8}, {0x3, 0x5, 0x10, 0xa}, {0x3, 0x4, 0x8, 0x8}, {0x5, 0x4, 0x7, 0x9}, {0x2, 0x5, 0x7, 0x2}, {0x4, 0x5, 0x5}], 0x10, 0x2, @void, @value}, 0x94) fsync(r0) request_key(&(0x7f0000000680)='cifs.spnego\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000740)='\x00', 0xfffffffffffffffc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="5b1a03"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000"], 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r9, 0x0, 0x481c) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r10}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r11, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) 930.066086ms ago: executing program 4 (id=4618): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = io_uring_setup(0x177d, &(0x7f0000000480)={0x0, 0x3e80, 0x80, 0x0, 0x128}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0xf4ff, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x9, 0x7, 0xdd, 0x3, 0x7, 0x9}) 929.682636ms ago: executing program 4 (id=4619): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x800, 0x70bd2a, 0x25dfdbfb, {0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x481c) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r10}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r11, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) 884.811427ms ago: executing program 4 (id=4620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 884.229887ms ago: executing program 0 (id=4621): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2, 0x0, 0xb24}, 0x18) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 851.186527ms ago: executing program 4 (id=4622): r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) fsopen(0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0xfffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x9}]}}]}, 0xa4}}, 0x0) 803.062038ms ago: executing program 0 (id=4623): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x1) fsetxattr$security_selinux(r1, &(0x7f0000000380), &(0x7f00000003c0)='system_u:object_r:agp_device_t:s0\x00', 0x22, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 684.0857ms ago: executing program 3 (id=4624): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x1008}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = io_uring_setup(0x253f, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0xffffffff}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) close_range(r3, 0xffffffffffffffff, 0x0) 600.551361ms ago: executing program 1 (id=4625): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000ac0)=ANY=[@ANYRES16=0x0], 0x1, 0x27a, &(0x7f0000000540)="$eJzs3DFrE38cx/FP0/zbNKVNhr+CgvhFF12ONj4ACdKCGFBqI+ogXO1FQ85cyYVKRGw3FwcfR3F0E9Qn0MXN3a2L4FJQjCRNTdKmitr0onm/oHff5pdP8rvkEr53kNu6+fxBqRA6BbeqWMIUk9a1LaUbVctIax1r1mPqtK7zk5/en7p+6/aVbC43t2A2n128kDGz6dOvHz5+ceZtdfLGy+lX49pM39n6mPmweXzzxNbXxfvF0IqhlYOqubYUBFV3yfdsuRiWHLNrvueGnhXLoVfpGi/4wcpKzdzy8lRypeKFobnlmpW8mlUDq1Zq5t5zi2VzHMemksLP5DcWFtxs1LNA38Qbi0ol645Kmtg3nN+IYlIAACBanf2/Bq7/b3QtP+7/1+n//wD9/zBo9P/J1ue3G/0/AAAAAAAAAAAAAAAAAAAAAAB/g+16PVWv11O7692/cUkJSbv/Rz1P9Afv/3Dr+OFeQvKfruZX85I/0lg2ZAsqypenGaX0pbk/tOzU85dzczPWlNYbf62VX1vNj3bnZ5VSund+didv3fn/lOzMZ5TS/73zmZ75MZ0725F3lNK7uwrka7m5X7fzT2bNLl3N7clPNO8HAAAAAMC/wLHveh6/O85B4zv5Xzg/sOf4Oq6T8Wi3HQAAAACAYRHWHpVc3/cq0RSfWycLIp7GgBfHJP1W/GLHVV/bQ/F9txx28SwYlJduAIuEpEN9wAn1Y6oRfikBAAAA6It20x/1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF5HccGzA546dsSbCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAETuWwAAAP//AmwlzQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r4, r4, 0x0, 0x80000000) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x1ffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095", @ANYRES64=r1, @ANYRESHEX], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000480)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9126007159812e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket(0x1, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r9, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(r12, 0x0, 0xfffffe25) 600.022381ms ago: executing program 3 (id=4626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x1000000, [{0x4, 0xc}]}, 0xc, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 326.496715ms ago: executing program 2 (id=4627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x300, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) 238.546707ms ago: executing program 1 (id=4628): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x20000, 0x800000, 0x0, 0x1, 0x2, 0x5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/182, 0xb6}], 0x1}, 0xc45a}], 0x1, 0x10100, 0x0) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}}], 0x1, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eeb1948bf42bc7fc2cb274849c9524154fa24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a8684853abf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000400000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f500000010000000000944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a808000000000000000562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844892f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b57"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='scsi_dispatch_cmd_start\x00', r1, 0x0, 0x9}, 0x18) r2 = openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) sendfile(r2, r2, 0x0, 0x8) shutdown(r0, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/pm_freeze_timeout', 0x141a82, 0x100) flock(r0, 0x4) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(r5, 0x0, 0xd2) fchown(r4, 0xee01, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a80)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r8, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) ftruncate(r7, 0x2000009) socket$nl_route(0x10, 0x3, 0x0) 227.343437ms ago: executing program 0 (id=4629): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 190.774037ms ago: executing program 2 (id=4630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=@newtaction={0x74, 0x12, 0xbf68af9d17701201, 0x0, 0x25dfdbfd, {0x7}, [{0x4}, {0x5c, 0x1, [@m_xt={0x58, 0x1, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x4, 'mangle\x00', 0x3, 0x7fff}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x700, 0x10, 0x6, 0x2, {{0x7, 0x4, 0x3, 0x9, 0x1c, 0x68, 0x0, 0xf, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@lsrr={0x83, 0x7, 0xdd, [@empty]}]}}}}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x107) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0xba01}, 0x810) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r12}, &(0x7f00000006c0), &(0x7f0000000700)=r11}, 0x20) recvmsg(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/82, 0x52}], 0x1, &(0x7f0000000a80)=""/138, 0x8a}, 0x40000040) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x8264, 0x0) r13 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r14) sendmsg$IEEE802154_LLSEC_SETPARAMS(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r15, 0x5, 0x0, 0x0, {0x22}}, 0x14}}, 0x4000000) ioctl$FIDEDUPERANGE(r13, 0xc0189436, &(0x7f00000004c0)={0xffffffffffffffff, 0xbdf6, 0x6, 0x0, 0x0, [{{r2}, 0x6}, {{r13}, 0x1}, {{r2}, 0x8}, {{r13}, 0x4}, {{r1}, 0x100}, {{r2}, 0xdc6}]}) sendmsg$BATADV_CMD_SET_HARDIF(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0900000015000000f23b695ceab3bbec026b", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x8098}, 0x8804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) read(r0, &(0x7f0000001300)=""/4096, 0x1000) 185.624197ms ago: executing program 3 (id=4631): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x800, 0x70bd2a, 0x25dfdbfb, {0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x481c) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r10}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r11, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) 156.673768ms ago: executing program 1 (id=4632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 37.34113ms ago: executing program 2 (id=4633): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) 37.05515ms ago: executing program 0 (id=4634): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 36.82863ms ago: executing program 3 (id=4635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 0s ago: executing program 1 (id=4636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x662074a3fad61851, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@jmp={0x5, 0x0, 0x6, 0x8, 0x7, 0xffffffffffffffe0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0xd731, 0xc3, &(0x7f0000000300)=""/195, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x6, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000480)=[{0x4, 0x4, 0x0, 0x4}, {0x3, 0x2, 0x9, 0x8}, {0x3, 0x5, 0x10, 0xa}, {0x3, 0x4, 0x8, 0x8}, {0x5, 0x4, 0x7, 0x9}, {0x2, 0x5, 0x7, 0x2}, {0x4, 0x5, 0x5}], 0x10, 0x2, @void, @value}, 0x94) fsync(r0) request_key(&(0x7f0000000680)='cifs.spnego\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000740)='\x00', 0xfffffffffffffffc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="5b1a03"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000"], 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n p4 [ 184.281160][T14373] loop3: p4 size 8388608 extends beyond EOD, truncated [ 184.324137][T14383] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 184.330695][T14383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 184.338374][T14383] vhci_hcd vhci_hcd.0: Device attached [ 184.351090][T14385] vhci_hcd: connection closed [ 184.351318][ T4065] vhci_hcd: stop threads [ 184.360460][ T4065] vhci_hcd: release socket [ 184.364892][ T4065] vhci_hcd: disconnect device [ 184.489770][T14403] loop3: detected capacity change from 0 to 512 [ 184.497677][T14401] veth0_macvtap: entered promiscuous mode [ 184.505168][T14401] team0: Device macvtap0 failed to register rx_handler [ 184.524236][T14403] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.537006][T14403] EXT4-fs (loop3): 1 truncate cleaned up [ 184.543020][T14403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.567286][T14401] veth0_macvtap: left promiscuous mode [ 184.614260][T14403] 9pnet: Could not find request transport: fd0x0000000000000006 [ 184.629500][T14409] netlink: 'syz.1.3631': attribute type 3 has an invalid length. [ 184.640639][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.674475][T14413] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3632'. [ 184.739241][T14419] loop4: detected capacity change from 0 to 2048 [ 184.749685][T14423] loop7: detected capacity change from 0 to 16384 [ 184.770498][T14419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.790899][T14419] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 184.797462][T14419] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 184.805006][T14419] vhci_hcd vhci_hcd.0: Device attached [ 184.853767][T14430] vhci_hcd: connection closed [ 184.853957][ T4065] vhci_hcd: stop threads [ 184.863009][ T4065] vhci_hcd: release socket [ 184.863915][T14435] veth0_macvtap: entered promiscuous mode [ 184.867467][ T4065] vhci_hcd: disconnect device [ 184.895266][T14435] team0: Device macvtap0 failed to register rx_handler [ 184.904430][T14438] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 184.913032][T14435] veth0_macvtap: left promiscuous mode [ 184.942213][T14442] 9pnet: Could not find request transport: fd0x0000000000000005 [ 184.950021][T14433] loop7: detected capacity change from 16384 to 16383 [ 184.984773][T14446] veth0_macvtap: entered promiscuous mode [ 184.985910][T14433] loop7: unable to read partition table [ 184.997166][T14433] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 185.000735][T14446] team0: Device macvtap0 failed to register rx_handler [ 185.067144][T14446] veth0_macvtap: left promiscuous mode [ 185.211447][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 185.294598][T14477] netlink: 'syz.2.3657': attribute type 3 has an invalid length. [ 185.366769][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.439518][T14498] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 185.514243][T14508] netlink: 'syz.1.3672': attribute type 3 has an invalid length. [ 185.579678][T14514] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 185.586261][T14514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 185.593814][T14514] vhci_hcd vhci_hcd.0: Device attached [ 185.609051][T14517] vhci_hcd: connection closed [ 185.609224][ T4024] vhci_hcd: stop threads [ 185.618467][ T4024] vhci_hcd: release socket [ 185.620463][T14522] pimreg: entered allmulticast mode [ 185.622879][ T4024] vhci_hcd: disconnect device [ 185.629227][T14522] pimreg: left allmulticast mode [ 185.852230][T14546] veth0_macvtap: entered promiscuous mode [ 185.859186][T14546] team0: Device macvtap0 failed to register rx_handler [ 185.866980][T14546] veth0_macvtap: left promiscuous mode [ 185.916178][T14553] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.961901][T14557] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3695'. [ 185.964271][T14558] netlink: 'syz.2.3693': attribute type 10 has an invalid length. [ 185.999207][T14558] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 186.040854][T14558] team0: Failed to send options change via netlink (err -105) [ 186.048460][T14558] team0: Port device geneve1 added [ 186.070231][T14553] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.103840][T14568] loop3: detected capacity change from 0 to 2048 [ 186.122190][T14553] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.139297][T14572] loop4: detected capacity change from 0 to 2048 [ 186.163729][T14576] veth0_macvtap: entered promiscuous mode [ 186.168023][T14568] loop3: p1 < > p4 [ 186.174851][T14576] team0: Device macvtap0 failed to register rx_handler [ 186.175015][T14568] loop3: p4 size 8388608 extends beyond EOD, truncated [ 186.188989][T14576] veth0_macvtap: left promiscuous mode [ 186.194930][T14572] loop4: p1 < > p4 [ 186.199524][T14572] loop4: p4 size 8388608 extends beyond EOD, truncated [ 186.212012][T14553] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.264133][T14583] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.281646][T14553] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.293773][T14553] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.306052][T14553] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.318235][T14553] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.402039][T14591] loop4: detected capacity change from 0 to 2048 [ 186.446222][T14591] loop4: p1 < > p4 [ 186.450895][T14591] loop4: p4 size 8388608 extends beyond EOD, truncated [ 186.485475][T14601] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 186.492040][T14601] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.499524][T14601] vhci_hcd vhci_hcd.0: Device attached [ 186.506156][T14603] vhci_hcd: connection closed [ 186.506299][ T4065] vhci_hcd: stop threads [ 186.515277][ T4065] vhci_hcd: release socket [ 186.519876][ T4065] vhci_hcd: disconnect device [ 186.580556][T14611] loop4: detected capacity change from 0 to 2048 [ 186.642431][T14611] loop4: p1 < > p4 [ 186.656214][T14611] loop4: p4 size 8388608 extends beyond EOD, truncated [ 186.874474][T14624] veth0_macvtap: entered promiscuous mode [ 186.883433][T14624] team0: Device macvtap0 failed to register rx_handler [ 186.910215][T14624] veth0_macvtap: left promiscuous mode [ 186.975247][T14629] __nla_validate_parse: 3 callbacks suppressed [ 186.975268][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3724'. [ 186.996150][T14633] netlink: 'syz.3.3725': attribute type 3 has an invalid length. [ 187.083593][T14641] veth0_macvtap: entered promiscuous mode [ 187.097940][T14639] loop3: detected capacity change from 0 to 2048 [ 187.105415][T14641] team0: Device macvtap0 failed to register rx_handler [ 187.116319][T14641] veth0_macvtap: left promiscuous mode [ 187.128495][T14645] pimreg: entered allmulticast mode [ 187.136329][T14639] loop3: p1 < > p4 [ 187.140979][T14645] pimreg: left allmulticast mode [ 187.141031][T14639] loop3: p4 size 8388608 extends beyond EOD, truncated [ 187.222518][T14653] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 187.249603][T14649] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 187.256225][T14649] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 187.263765][T14649] vhci_hcd vhci_hcd.0: Device attached [ 187.274425][T14656] vhci_hcd: connection closed [ 187.281991][ T3902] vhci_hcd: stop threads [ 187.291102][ T3902] vhci_hcd: release socket [ 187.295601][ T3902] vhci_hcd: disconnect device [ 187.334156][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3737'. [ 187.466445][T14680] pimreg: entered allmulticast mode [ 187.472927][T14680] pimreg: left allmulticast mode [ 187.563222][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3750'. [ 187.599847][T14694] netlink: 'syz.0.3751': attribute type 3 has an invalid length. [ 187.646605][T14700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3754'. [ 187.718957][ T29] kauditd_printk_skb: 1043 callbacks suppressed [ 187.718972][ T29] audit: type=1326 audit(1744218495.220:14271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.2.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e05fd169 code=0x7ffc0000 [ 187.748912][ T29] audit: type=1326 audit(1744218495.220:14272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.2.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e05fd169 code=0x7ffc0000 [ 187.781384][ T29] audit: type=1326 audit(1744218495.270:14273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.2.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4e05fd169 code=0x7ffc0000 [ 187.805039][ T29] audit: type=1326 audit(1744218495.270:14274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.2.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e05fd169 code=0x7ffc0000 [ 187.828735][ T29] audit: type=1326 audit(1744218495.270:14275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.2.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e05fd169 code=0x7ffc0000 [ 187.852335][ T29] audit: type=1326 audit(1744218495.280:14276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.2.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4e05fd169 code=0x7ffc0000 [ 187.873852][T14710] veth0_macvtap: entered promiscuous mode [ 187.876243][ T29] audit: type=1326 audit(1744218495.280:14277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.2.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e05fd169 code=0x7ffc0000 [ 187.900369][T14710] team0: Device macvtap0 failed to register rx_handler [ 187.905495][ T29] audit: type=1326 audit(1744218495.280:14278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.2.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e05fd169 code=0x7ffc0000 [ 187.960594][ T29] audit: type=1326 audit(1744218495.460:14279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.2.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4e05fd169 code=0x7ffc0000 [ 187.984291][ T29] audit: type=1326 audit(1744218495.460:14280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.2.3758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e05fd169 code=0x7ffc0000 [ 188.014407][T14710] veth0_macvtap: left promiscuous mode [ 188.039785][T14722] netlink: 'syz.1.3762': attribute type 3 has an invalid length. [ 188.065996][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3763'. [ 188.090038][T14731] netlink: 'syz.1.3765': attribute type 3 has an invalid length. [ 188.124089][T14734] loop3: detected capacity change from 0 to 2048 [ 188.134725][T14727] 9pnet_fd: Insufficient options for proto=fd [ 188.173380][T14736] loop4: detected capacity change from 0 to 2048 [ 188.173668][T14741] loop7: detected capacity change from 0 to 16384 [ 188.196117][T14734] loop3: p1 < > p4 [ 188.202397][T14734] loop3: p4 size 8388608 extends beyond EOD, truncated [ 188.228377][T14736] loop4: p1 < > p4 [ 188.233435][T14736] loop4: p4 size 8388608 extends beyond EOD, truncated [ 188.293069][T14749] loop3: detected capacity change from 0 to 2048 [ 188.303524][T14746] veth0_macvtap: entered promiscuous mode [ 188.320920][T14746] team0: Device macvtap0 failed to register rx_handler [ 188.359883][T14749] loop3: p1 < > p4 [ 188.364031][T14746] veth0_macvtap: left promiscuous mode [ 188.369930][T14749] loop3: p4 size 8388608 extends beyond EOD, truncated [ 188.395916][T14747] loop7: detected capacity change from 16384 to 16383 [ 188.419797][T14741] blk_print_req_error: 42 callbacks suppressed [ 188.419817][T14741] I/O error, dev loop7, sector 8192 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 188.422162][T14747] I/O error, dev loop7, sector 3840 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 188.445894][T14747] buffer_io_error: 2146 callbacks suppressed [ 188.445907][T14747] Buffer I/O error on dev loop7, logical block 480, lost async page write [ 188.460577][T14747] Buffer I/O error on dev loop7, logical block 481, lost async page write [ 188.469121][T14747] Buffer I/O error on dev loop7, logical block 482, lost async page write [ 188.471777][T14760] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 188.477718][T14747] Buffer I/O error on dev loop7, logical block 483, lost async page write [ 188.486799][T14741] I/O error, dev loop7, sector 8448 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 0 [ 188.494334][T14747] Buffer I/O error on dev loop7, logical block 484, lost async page write [ 188.512833][T14747] Buffer I/O error on dev loop7, logical block 485, lost async page write [ 188.521388][T14747] Buffer I/O error on dev loop7, logical block 486, lost async page write [ 188.529951][T14747] Buffer I/O error on dev loop7, logical block 487, lost async page write [ 188.538580][T14747] Buffer I/O error on dev loop7, logical block 488, lost async page write [ 188.547239][T14747] Buffer I/O error on dev loop7, logical block 489, lost async page write [ 188.559549][T14747] I/O error, dev loop7, sector 4864 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 188.570598][T14741] I/O error, dev loop7, sector 8192 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.599775][T14747] I/O error, dev loop7, sector 5888 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 188.613353][T14747] I/O error, dev loop7, sector 6912 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 188.632396][T14747] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.646387][T14766] netlink: 'syz.3.3780': attribute type 3 has an invalid length. [ 188.650705][T14747] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.663361][T14747] loop7: unable to read partition table [ 188.669457][T14747] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 188.702751][T14740] I/O error, dev loop7, sector 7936 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0 [ 188.762254][T14774] pimreg: entered allmulticast mode [ 188.788177][T14774] pimreg: left allmulticast mode [ 188.854654][T14784] loop3: detected capacity change from 0 to 1024 [ 188.864284][T14787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3792'. [ 188.864515][T14784] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 188.884328][T14784] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 188.916927][T14784] JBD2: no valid journal superblock found [ 188.922714][T14784] EXT4-fs (loop3): Could not load journal inode [ 188.939424][T14793] pimreg: entered allmulticast mode [ 188.949522][T14793] pimreg: left allmulticast mode [ 188.973693][T14799] netlink: 'syz.2.3796': attribute type 3 has an invalid length. [ 189.116245][T14813] netlink: 'syz.4.3802': attribute type 3 has an invalid length. [ 189.180575][T14821] loop4: detected capacity change from 0 to 128 [ 189.187249][T14822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3805'. [ 189.202398][T14821] EXT4-fs: Ignoring removed nobh option [ 189.241149][T14821] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.263654][T14821] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.304442][T14821] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.333238][T14834] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 189.339821][T14834] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 189.347427][T14834] vhci_hcd vhci_hcd.0: Device attached [ 189.378675][T14841] netlink: 'syz.4.3804': attribute type 10 has an invalid length. [ 189.386577][T14841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3804'. [ 189.405863][T14838] vhci_hcd: connection closed [ 189.406134][ T3902] vhci_hcd: stop threads [ 189.415341][ T3902] vhci_hcd: release socket [ 189.419842][ T3902] vhci_hcd: disconnect device [ 189.460456][T14841] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 189.475870][T14841] team0: Failed to send options change via netlink (err -105) [ 189.483393][T14841] team0: Port device geneve1 added [ 189.521837][T14821] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.583267][T14821] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.599553][T14850] netlink: 'syz.2.3816': attribute type 3 has an invalid length. [ 189.621840][T14852] pimreg: entered allmulticast mode [ 189.633604][ T7687] kernel write not supported for file /492/attr/exec (pid: 7687 comm: kworker/0:8) [ 189.649373][T14821] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.671046][T14852] pimreg: left allmulticast mode [ 189.688663][T14859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3821'. [ 189.723963][T14821] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.753419][T14821] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.788822][T14821] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.810305][T14870] loop7: detected capacity change from 0 to 16384 [ 189.818045][T14821] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.832784][T14872] loop3: detected capacity change from 0 to 2048 [ 189.877519][T12451] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.897173][T14872] loop3: p1 < > p4 [ 189.907528][T14872] loop3: p4 size 8388608 extends beyond EOD, truncated [ 189.944422][T14875] loop4: detected capacity change from 0 to 2048 [ 189.965414][T14877] pimreg: entered allmulticast mode [ 189.972797][T14877] pimreg: left allmulticast mode [ 189.978417][T14875] loop4: p1 < > p4 [ 189.982718][T14875] loop4: p4 size 8388608 extends beyond EOD, truncated [ 189.995799][T14873] loop7: detected capacity change from 16384 to 16383 [ 190.023327][T14873] loop7: unable to read partition table [ 190.029479][T14873] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 190.069776][T14882] loop3: detected capacity change from 0 to 512 [ 190.076809][T14882] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 190.094474][T14882] EXT4-fs (loop3): 1 truncate cleaned up [ 190.106492][T14882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.133604][T14887] loop7: detected capacity change from 0 to 16384 [ 190.156560][ T7691] kernel write not supported for file /347/attr/exec (pid: 7691 comm: kworker/0:10) [ 190.199106][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.250010][T14894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 190.255911][T14891] loop7: detected capacity change from 16384 to 16383 [ 190.278232][T14891] loop7: unable to read partition table [ 190.291817][T14891] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 190.363989][T14905] netlink: 'syz.1.3840': attribute type 3 has an invalid length. [ 190.409627][T14909] pimreg: entered allmulticast mode [ 190.416869][T14909] pimreg: left allmulticast mode [ 190.462531][T14911] loop3: detected capacity change from 0 to 2048 [ 190.486475][T14914] loop7: detected capacity change from 0 to 16384 [ 190.520035][ T2969] kernel write not supported for file /328/attr/exec (pid: 2969 comm: kworker/1:2) [ 190.528448][T14911] loop3: p1 < > p4 [ 190.535077][T14911] loop3: p4 size 8388608 extends beyond EOD, truncated [ 190.675974][T14919] loop7: detected capacity change from 16384 to 16383 [ 190.683092][T14929] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.743317][T14919] loop7: unable to read partition table [ 190.759185][T14919] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 190.778946][T14937] netlink: 'syz.0.3853': attribute type 3 has an invalid length. [ 190.810085][T14939] pimreg: entered allmulticast mode [ 190.816962][T14939] pimreg: left allmulticast mode [ 190.829635][T14942] loop7: detected capacity change from 0 to 16384 [ 190.869208][T14946] loop3: detected capacity change from 0 to 512 [ 190.877950][T14946] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 190.896819][T14946] EXT4-fs (loop3): 1 truncate cleaned up [ 190.922256][T14946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.974023][ T3517] kernel write not supported for file /363/attr/exec (pid: 3517 comm: kworker/1:6) [ 190.996332][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.005903][T14948] loop7: detected capacity change from 16384 to 16383 [ 191.048523][T14961] loop4: detected capacity change from 0 to 2048 [ 191.079203][T14961] loop4: p1 < > p4 [ 191.090230][T14961] loop4: p4 size 8388608 extends beyond EOD, truncated [ 191.127666][T14948] loop7: unable to read partition table [ 191.144087][T14948] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 191.276752][T14981] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 191.283312][T14981] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 191.291093][T14981] vhci_hcd vhci_hcd.0: Device attached [ 191.306395][T14988] vhci_hcd: connection closed [ 191.314596][ T4065] vhci_hcd: stop threads [ 191.323694][ T4065] vhci_hcd: release socket [ 191.328205][ T4065] vhci_hcd: disconnect device [ 191.331493][T14991] veth0_macvtap: entered promiscuous mode [ 191.370417][T14998] loop4: detected capacity change from 0 to 1024 [ 191.377956][T14998] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 191.388960][T14998] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 191.401633][T14991] team0: Device macvtap0 failed to register rx_handler [ 191.409540][T14991] veth0_macvtap: left promiscuous mode [ 191.418452][T14997] veth0_macvtap: entered promiscuous mode [ 191.428875][T14997] team0: Device macvtap0 failed to register rx_handler [ 191.441997][T14998] JBD2: no valid journal superblock found [ 191.447844][T14998] EXT4-fs (loop4): Could not load journal inode [ 191.456183][T14997] veth0_macvtap: left promiscuous mode [ 191.488866][T15008] loop7: detected capacity change from 0 to 16384 [ 191.507410][T15011] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.625981][T15015] loop7: detected capacity change from 16384 to 16383 [ 191.646836][T15015] loop7: unable to read partition table [ 191.652611][T15015] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 191.860358][T15037] veth0_macvtap: entered promiscuous mode [ 191.870704][T15037] team0: Device macvtap0 failed to register rx_handler [ 191.879809][T15037] veth0_macvtap: left promiscuous mode [ 191.944701][ T7691] kernel write not supported for file /373/attr/exec (pid: 7691 comm: kworker/0:10) [ 192.079085][T15051] loop3: detected capacity change from 0 to 2048 [ 192.126144][T15051] loop3: p1 < > p4 [ 192.132419][T15051] loop3: p4 size 8388608 extends beyond EOD, truncated [ 192.164293][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3903'. [ 192.196732][T15062] loop7: detected capacity change from 0 to 16384 [ 192.256672][T15070] loop4: detected capacity change from 0 to 512 [ 192.292010][T15070] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 192.324448][T15070] EXT4-fs (loop4): 1 truncate cleaned up [ 192.332404][T15070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.355947][T15073] loop7: detected capacity change from 16384 to 16383 [ 192.358507][ T2969] kernel write not supported for file /246/attr/exec (pid: 2969 comm: kworker/1:2) [ 192.390344][T15073] loop7: unable to read partition table [ 192.408004][T15073] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 192.430149][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.453245][T15082] xfrm0 speed is unknown, defaulting to 1000 [ 192.474651][T15089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3913'. [ 192.533141][T15093] loop4: detected capacity change from 0 to 2048 [ 192.540588][T15092] netlink: 'syz.3.3918': attribute type 3 has an invalid length. [ 192.586356][T15093] loop4: p1 < > p4 [ 192.590946][T15093] loop4: p4 size 8388608 extends beyond EOD, truncated [ 192.679360][T15110] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 192.711160][T15110] loop4: detected capacity change from 0 to 164 [ 192.720252][T15110] syz.4.3925: attempt to access beyond end of device [ 192.720252][T15110] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 192.734569][T15110] syz.4.3925: attempt to access beyond end of device [ 192.734569][T15110] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 192.748802][ T3517] kernel write not supported for file /393/attr/exec (pid: 3517 comm: kworker/1:6) [ 192.783740][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 192.783760][ T29] audit: type=1326 audit(1744218500.270:14847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cb67d169 code=0x7ffc0000 [ 192.813730][ T29] audit: type=1326 audit(1744218500.270:14848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cb67d169 code=0x7ffc0000 [ 192.837326][ T29] audit: type=1326 audit(1744218500.270:14849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0cb67d169 code=0x7ffc0000 [ 192.861031][ T29] audit: type=1326 audit(1744218500.270:14850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cb67d169 code=0x7ffc0000 [ 192.884759][ T29] audit: type=1326 audit(1744218500.270:14851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cb67d169 code=0x7ffc0000 [ 192.908561][ T29] audit: type=1326 audit(1744218500.270:14852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0cb67d169 code=0x7ffc0000 [ 192.932161][ T29] audit: type=1326 audit(1744218500.270:14853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cb67d169 code=0x7ffc0000 [ 192.955779][ T29] audit: type=1326 audit(1744218500.270:14854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cb67d169 code=0x7ffc0000 [ 192.979471][ T29] audit: type=1326 audit(1744218500.280:14855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0cb67d169 code=0x7ffc0000 [ 193.003180][ T29] audit: type=1326 audit(1744218500.280:14856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cb67d169 code=0x7ffc0000 [ 193.057450][T15122] loop7: detected capacity change from 0 to 16384 [ 193.215810][T15127] loop7: detected capacity change from 16384 to 16383 [ 193.223064][T15132] netlink: 'syz.1.3935': attribute type 3 has an invalid length. [ 193.234853][T15127] loop7: unable to read partition table [ 193.240621][T15127] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 193.304843][T15138] veth0_macvtap: entered promiscuous mode [ 193.315563][T15138] team0: Device macvtap0 failed to register rx_handler [ 193.325822][T15138] veth0_macvtap: left promiscuous mode [ 193.331373][T15136] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 193.337907][T15136] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.345417][T15136] vhci_hcd vhci_hcd.0: Device attached [ 193.365378][T15140] vhci_hcd: connection closed [ 193.365494][ T4065] vhci_hcd: stop threads [ 193.374613][ T4065] vhci_hcd: release socket [ 193.379104][ T4065] vhci_hcd: disconnect device [ 193.386774][ T7691] kernel write not supported for file /519/attr/exec (pid: 7691 comm: kworker/0:10) [ 193.411994][T15151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3942'. [ 193.425882][T15153] FAULT_INJECTION: forcing a failure. [ 193.425882][T15153] name failslab, interval 1, probability 0, space 0, times 0 [ 193.438568][T15153] CPU: 0 UID: 0 PID: 15153 Comm: syz.2.3943 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 193.438600][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.438618][T15153] Call Trace: [ 193.438626][T15153] [ 193.438636][T15153] dump_stack_lvl+0xf6/0x150 [ 193.438665][T15153] dump_stack+0x15/0x1a [ 193.438686][T15153] should_fail_ex+0x261/0x270 [ 193.438800][T15153] should_failslab+0x8f/0xb0 [ 193.438838][T15153] kmem_cache_alloc_noprof+0x59/0x340 [ 193.438865][T15153] ? getname_flags+0x81/0x3b0 [ 193.438891][T15153] getname_flags+0x81/0x3b0 [ 193.438978][T15153] do_sys_openat2+0x65/0x110 [ 193.439007][T15153] __x64_sys_openat+0xf8/0x120 [ 193.439044][T15153] x64_sys_call+0x1ac/0x2e10 [ 193.439155][T15153] do_syscall_64+0xc9/0x1c0 [ 193.439185][T15153] ? clear_bhb_loop+0x25/0x80 [ 193.439263][T15153] ? clear_bhb_loop+0x25/0x80 [ 193.439286][T15153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.439310][T15153] RIP: 0033:0x7fb4e05fd169 [ 193.439324][T15153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.439343][T15153] RSP: 002b:00007fb4dec5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.439432][T15153] RAX: ffffffffffffffda RBX: 00007fb4e0815fa0 RCX: 00007fb4e05fd169 [ 193.439444][T15153] RDX: 0000000000004080 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 193.439509][T15153] RBP: 00007fb4dec5f090 R08: 0000000000000000 R09: 0000000000000000 [ 193.439522][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.439533][T15153] R13: 0000000000000000 R14: 00007fb4e0815fa0 R15: 00007fff24d32b08 [ 193.439552][T15153] [ 193.680776][T15164] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.745125][T15170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=15170 comm=syz.3.3950 [ 193.817099][T15174] xfrm0 speed is unknown, defaulting to 1000 [ 194.069137][T15202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15202 comm=syz.0.3964 [ 194.081838][T15202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15202 comm=syz.0.3964 [ 194.297945][T15216] loop7: detected capacity change from 0 to 16384 [ 194.347136][T15220] macsec0: entered promiscuous mode [ 194.352511][T15220] macsec0: entered allmulticast mode [ 194.357950][T15220] veth1_macvtap: entered allmulticast mode [ 194.365651][T15220] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15220 comm=syz.1.3971 [ 194.378359][T15220] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15220 comm=syz.1.3971 [ 194.419455][T15223] veth0_macvtap: entered promiscuous mode [ 194.426928][T15223] team0: Device macvtap0 failed to register rx_handler [ 194.434242][T15223] veth0_macvtap: left promiscuous mode [ 194.539106][T15221] loop7: detected capacity change from 16384 to 16383 [ 194.551520][T15221] blk_print_req_error: 66 callbacks suppressed [ 194.551543][T15221] I/O error, dev loop7, sector 9664 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 194.567871][T15221] buffer_io_error: 3289 callbacks suppressed [ 194.567885][T15221] Buffer I/O error on dev loop7, logical block 1208, lost async page write [ 194.582549][T15221] Buffer I/O error on dev loop7, logical block 1209, lost async page write [ 194.591311][T15221] Buffer I/O error on dev loop7, logical block 1210, lost async page write [ 194.600031][T15221] Buffer I/O error on dev loop7, logical block 1211, lost async page write [ 194.608719][T15221] Buffer I/O error on dev loop7, logical block 1212, lost async page write [ 194.617475][T15221] Buffer I/O error on dev loop7, logical block 1213, lost async page write [ 194.626159][T15221] Buffer I/O error on dev loop7, logical block 1214, lost async page write [ 194.634849][T15221] Buffer I/O error on dev loop7, logical block 1215, lost async page write [ 194.643566][T15221] Buffer I/O error on dev loop7, logical block 1216, lost async page write [ 194.652400][T15221] Buffer I/O error on dev loop7, logical block 1217, lost async page write [ 194.661290][T15234] loop4: detected capacity change from 0 to 2048 [ 194.678782][T15221] I/O error, dev loop7, sector 10688 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 194.692304][T15221] I/O error, dev loop7, sector 11712 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 194.710043][T15221] I/O error, dev loop7, sector 12736 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 194.722312][T15234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.724047][T15221] I/O error, dev loop7, sector 13760 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 194.747830][T15221] I/O error, dev loop7, sector 14784 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 194.760746][T15221] I/O error, dev loop7, sector 15808 op 0x1:(WRITE) flags 0x800 phys_seg 72 prio class 0 [ 194.773842][T15234] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 194.780390][T15234] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.787976][T15234] vhci_hcd vhci_hcd.0: Device attached [ 194.788455][T15221] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.802775][T15221] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.812085][T15221] loop7: unable to read partition table [ 194.818128][T15221] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 194.821529][T15251] vhci_hcd: connection closed [ 194.845877][ T3643] vhci_hcd: stop threads [ 194.854954][ T3643] vhci_hcd: release socket [ 194.859455][ T3643] vhci_hcd: disconnect device [ 194.881560][T15256] loop3: detected capacity change from 0 to 2048 [ 194.946594][T15256] loop3: p1 < > p4 [ 194.951092][T15256] loop3: p4 size 8388608 extends beyond EOD, truncated [ 195.043394][T15274] FAULT_INJECTION: forcing a failure. [ 195.043394][T15274] name failslab, interval 1, probability 0, space 0, times 0 [ 195.056171][T15274] CPU: 1 UID: 0 PID: 15274 Comm: syz.1.3988 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 195.056204][T15274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.056218][T15274] Call Trace: [ 195.056225][T15274] [ 195.056236][T15274] dump_stack_lvl+0xf6/0x150 [ 195.056265][T15274] dump_stack+0x15/0x1a [ 195.056325][T15274] should_fail_ex+0x261/0x270 [ 195.056393][T15274] should_failslab+0x8f/0xb0 [ 195.056431][T15274] kmem_cache_alloc_noprof+0x59/0x340 [ 195.056511][T15274] ? __anon_vma_prepare+0xcf/0x310 [ 195.056544][T15274] __anon_vma_prepare+0xcf/0x310 [ 195.056578][T15274] ? handle_mm_fault+0x1e8d/0x2e80 [ 195.056654][T15274] handle_mm_fault+0x1e95/0x2e80 [ 195.056694][T15274] ? mas_walk+0x204/0x320 [ 195.056726][T15274] ? __rcu_read_unlock+0x4e/0x70 [ 195.056767][T15274] exc_page_fault+0x3b9/0x6a0 [ 195.056826][T15274] ? do_syscall_64+0xd6/0x1c0 [ 195.056864][T15274] asm_exc_page_fault+0x26/0x30 [ 195.056889][T15274] RIP: 0033:0x7ff0cb53fbe3 [ 195.056907][T15274] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 195.056930][T15274] RSP: 002b:00007ff0c9ca44a0 EFLAGS: 00010206 [ 195.056947][T15274] RAX: 0000000000000000 RBX: 00007ff0c9ca4540 RCX: 00007ff0c1885000 [ 195.056974][T15274] RDX: 00007ff0c9ca46e0 RSI: 000000000000002f RDI: 00007ff0c9ca45e0 [ 195.056986][T15274] RBP: 000000000000013b R08: 0000000000000008 R09: 00000000000000d4 [ 195.057001][T15274] R10: 00000000000000d6 R11: 00007ff0c9ca4540 R12: 00007ff0c9ca4540 [ 195.057016][T15274] R13: 00007ff0cb7193e0 R14: 00000000000000eb R15: 00007ff0c9ca45e0 [ 195.057038][T15274] [ 195.057063][T15274] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 195.443373][T15279] netlink: 'syz.3.3992': attribute type 3 has an invalid length. [ 195.553045][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.778867][T15283] loop3: detected capacity change from 0 to 2048 [ 195.813218][T15285] loop7: detected capacity change from 0 to 16384 [ 195.828354][T15283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.885089][T15283] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 195.902126][T15289] veth0_macvtap: entered promiscuous mode [ 195.919053][T15283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3995'. [ 195.939143][T15289] team0: Device macvtap0 failed to register rx_handler [ 195.977101][T15289] veth0_macvtap: left promiscuous mode [ 196.038493][T15295] loop4: detected capacity change from 0 to 2048 [ 196.066292][T15291] loop7: detected capacity change from 16384 to 16383 [ 196.094825][T15291] I/O error, dev loop7, sector 5376 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 196.116438][T15295] loop4: p1 < > p4 [ 196.120943][T15295] loop4: p4 size 8388608 extends beyond EOD, truncated [ 196.151255][T15291] loop7: unable to read partition table [ 196.164543][T15300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3998'. [ 196.187820][T15291] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 196.468886][T15315] loop4: detected capacity change from 0 to 2048 [ 196.524332][T15315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.548792][T15323] loop7: detected capacity change from 0 to 16384 [ 196.567277][T15315] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 196.573871][T15315] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 196.581393][T15315] vhci_hcd vhci_hcd.0: Device attached [ 196.665371][T15324] vhci_hcd: connection closed [ 196.665628][ T3643] vhci_hcd: stop threads [ 196.674823][ T3643] vhci_hcd: release socket [ 196.679303][ T3643] vhci_hcd: disconnect device [ 196.696495][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4008'. [ 196.811890][ T7687] kernel write not supported for file /579/attr/exec (pid: 7687 comm: kworker/0:8) [ 196.888649][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.902199][T15341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4011'. [ 196.925830][T15326] loop7: detected capacity change from 16384 to 16383 [ 197.036386][T15350] loop3: detected capacity change from 0 to 2048 [ 197.051595][T15326] loop7: unable to read partition table [ 197.057477][T15326] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 197.096344][T15355] netlink: 'syz.2.4017': attribute type 3 has an invalid length. [ 197.116709][T15350] loop3: p1 < > p4 [ 197.126712][T15350] loop3: p4 size 8388608 extends beyond EOD, truncated [ 197.195287][T15359] netlink: 'syz.0.4018': attribute type 3 has an invalid length. [ 197.207619][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.233392][ T7687] kernel write not supported for file /592/attr/exec (pid: 7687 comm: kworker/0:8) [ 197.271528][T15366] loop4: detected capacity change from 0 to 2048 [ 197.299304][T15372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.337936][T15366] loop4: p1 < > p4 [ 197.342501][T15366] loop4: p4 size 8388608 extends beyond EOD, truncated [ 197.347167][T15376] veth0_macvtap: entered promiscuous mode [ 197.362926][T15376] team0: Device macvtap0 failed to register rx_handler [ 197.370267][T15376] veth0_macvtap: left promiscuous mode [ 197.427624][T15379] loop7: detected capacity change from 0 to 16384 [ 197.473289][T15348] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 197.479958][T15348] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 197.488295][T15348] vhci_hcd vhci_hcd.0: Device attached [ 197.502110][T15383] vhci_hcd: connection closed [ 197.503518][ T3643] vhci_hcd: stop threads [ 197.512626][ T3643] vhci_hcd: release socket [ 197.517308][ T3643] vhci_hcd: disconnect device [ 197.615821][T15388] loop7: detected capacity change from 16384 to 16383 [ 197.656187][T15391] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 197.662752][T15391] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 197.663701][T15388] loop7: unable to read partition table [ 197.670208][T15391] vhci_hcd vhci_hcd.0: Device attached [ 197.682041][T15388] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 197.696011][T15392] vhci_hcd: connection closed [ 197.696307][ T3643] vhci_hcd: stop threads [ 197.705306][ T3643] vhci_hcd: release socket [ 197.709783][ T3643] vhci_hcd: disconnect device [ 197.753970][T15397] loop4: detected capacity change from 0 to 2048 [ 197.787016][ T3379] kernel write not supported for file /609/attr/exec (pid: 3379 comm: kworker/1:3) [ 197.813230][ T29] kauditd_printk_skb: 735 callbacks suppressed [ 197.813249][ T29] audit: type=1400 audit(1744218505.310:15592): avc: denied { getopt } for pid=15402 comm="syz.2.4036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.829446][T15397] loop4: p1 < > p4 [ 197.839389][ T29] audit: type=1400 audit(1744218505.320:15593): avc: denied { setopt } for pid=15402 comm="syz.2.4036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.846044][T15403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4036'. [ 197.862732][ T29] audit: type=1400 audit(1744218505.320:15594): avc: denied { write } for pid=15402 comm="syz.2.4036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.877464][T15397] loop4: p4 size 8388608 extends beyond EOD, [ 197.891225][ T29] audit: type=1400 audit(1744218505.320:15595): avc: denied { create } for pid=15402 comm="syz.2.4036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 197.917835][T15397] truncated [ 197.956312][T15407] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4038'. [ 197.965343][ T29] audit: type=1400 audit(1744218505.340:15596): avc: denied { write } for pid=15402 comm="syz.2.4036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 198.015572][T15407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4038'. [ 198.027228][ T29] audit: type=1326 audit(1744218505.500:15597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15410 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 198.050953][ T29] audit: type=1326 audit(1744218505.500:15598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15410 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 198.074591][ T29] audit: type=1326 audit(1744218505.500:15599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15410 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 198.098419][ T29] audit: type=1326 audit(1744218505.500:15600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15410 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 198.122043][ T29] audit: type=1326 audit(1744218505.500:15601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15410 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 198.230848][T15423] loop3: detected capacity change from 0 to 2048 [ 198.244211][T15420] veth0_macvtap: entered promiscuous mode [ 198.252486][T15420] team0: Device macvtap0 failed to register rx_handler [ 198.259910][T15420] veth0_macvtap: left promiscuous mode [ 198.297038][T15423] loop3: p1 < > p4 [ 198.301969][T15423] loop3: p4 size 8388608 extends beyond EOD, truncated [ 198.367155][T15434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4049'. [ 198.484264][T15446] loop3: detected capacity change from 0 to 2048 [ 198.527868][T15446] loop3: p1 < > p4 [ 198.536624][T15453] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 198.540982][T15451] netlink: 'syz.4.4058': attribute type 3 has an invalid length. [ 198.543225][T15453] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 198.543261][T15453] vhci_hcd vhci_hcd.0: Device attached [ 198.564774][T15446] loop3: p4 size 8388608 extends beyond EOD, truncated [ 198.587529][T15456] vhci_hcd: connection closed [ 198.595856][T15455] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 198.607159][T15455] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 198.614681][T15455] vhci_hcd vhci_hcd.0: Device attached [ 198.615551][ T4024] vhci_hcd: stop threads [ 198.624686][ T4024] vhci_hcd: release socket [ 198.629226][ T4024] vhci_hcd: disconnect device [ 198.634428][T15460] vhci_hcd: connection closed [ 198.635405][ T4024] vhci_hcd: stop threads [ 198.644571][ T4024] vhci_hcd: release socket [ 198.649033][ T4024] vhci_hcd: disconnect device [ 198.670666][T15465] loop3: detected capacity change from 0 to 1024 [ 198.677884][T15465] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 198.679276][T15467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4064'. [ 198.688821][T15465] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 198.708873][T15465] JBD2: no valid journal superblock found [ 198.714654][T15465] EXT4-fs (loop3): Could not load journal inode [ 198.772051][T15474] loop4: detected capacity change from 0 to 512 [ 198.787212][T15476] loop3: detected capacity change from 0 to 2048 [ 198.794905][T15474] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 198.810056][T15474] EXT4-fs (loop4): mount failed [ 198.826723][T15476] loop3: p1 < > p4 [ 198.833311][T15476] loop3: p4 size 8388608 extends beyond EOD, truncated [ 198.891940][T15485] netlink: 'syz.4.4071': attribute type 3 has an invalid length. [ 198.909744][T15487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4072'. [ 198.988561][T15495] loop3: detected capacity change from 0 to 2048 [ 199.026231][T15495] loop3: p1 < > p4 [ 199.030750][T15495] loop3: p4 size 8388608 extends beyond EOD, truncated [ 199.085968][T15499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4077'. [ 199.135275][T15508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4080'. [ 199.159621][T15506] loop3: detected capacity change from 0 to 2048 [ 199.176924][T15511] pimreg: entered allmulticast mode [ 199.191081][T15511] pimreg: left allmulticast mode [ 199.206480][T15506] loop3: p1 < > p4 [ 199.211838][T15506] loop3: p4 size 8388608 extends beyond EOD, truncated [ 199.214904][T15517] netlink: 'syz.2.4085': attribute type 3 has an invalid length. [ 199.327309][ T3517] kernel write not supported for file /486/attr/exec (pid: 3517 comm: kworker/1:6) [ 199.338429][T15535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4092'. [ 199.355344][T15533] veth0_macvtap: entered promiscuous mode [ 199.361653][T15529] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 199.363033][T15533] team0: Device macvtap0 failed to register rx_handler [ 199.368181][T15529] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 199.368307][T15529] vhci_hcd vhci_hcd.0: Device attached [ 199.388165][T15533] veth0_macvtap: left promiscuous mode [ 199.393980][T15537] vhci_hcd: connection closed [ 199.394238][ T3902] vhci_hcd: stop threads [ 199.403266][ T3902] vhci_hcd: release socket [ 199.407791][ T3902] vhci_hcd: disconnect device [ 199.422722][T15541] netlink: 'syz.1.4095': attribute type 3 has an invalid length. [ 199.434586][T15543] loop3: detected capacity change from 0 to 512 [ 199.441542][T15543] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 199.466710][T15543] EXT4-fs (loop3): 1 truncate cleaned up [ 199.472927][T15543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.489675][ T3379] kernel write not supported for file /466/attr/exec (pid: 3379 comm: kworker/1:3) [ 199.540268][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.571328][T15552] netlink: 'syz.1.4100': attribute type 3 has an invalid length. [ 199.585048][T15553] FAULT_INJECTION: forcing a failure. [ 199.585048][T15553] name failslab, interval 1, probability 0, space 0, times 0 [ 199.598027][T15553] CPU: 1 UID: 0 PID: 15553 Comm: syz.3.4099 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 199.598066][T15553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.598151][T15553] Call Trace: [ 199.598158][T15553] [ 199.598228][T15553] dump_stack_lvl+0xf6/0x150 [ 199.598257][T15553] dump_stack+0x15/0x1a [ 199.598279][T15553] should_fail_ex+0x261/0x270 [ 199.598317][T15553] should_failslab+0x8f/0xb0 [ 199.598355][T15553] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 199.598409][T15553] ? __alloc_skb+0x10d/0x320 [ 199.598445][T15553] __alloc_skb+0x10d/0x320 [ 199.598470][T15553] ? audit_log_start+0x37f/0x6e0 [ 199.598500][T15553] audit_log_start+0x39a/0x6e0 [ 199.598524][T15553] ? audit_log_end+0x1d0/0x1e0 [ 199.598573][T15553] audit_seccomp+0x4b/0x130 [ 199.598638][T15553] __seccomp_filter+0x694/0x10e0 [ 199.598676][T15553] ? __perf_event_task_sched_out+0x13c/0xf00 [ 199.598704][T15553] ? _raw_spin_unlock+0x26/0x50 [ 199.598734][T15553] __secure_computing+0x7e/0x160 [ 199.598827][T15553] syscall_trace_enter+0xcf/0x1f0 [ 199.598859][T15553] do_syscall_64+0xaa/0x1c0 [ 199.598890][T15553] ? clear_bhb_loop+0x25/0x80 [ 199.598951][T15553] ? clear_bhb_loop+0x25/0x80 [ 199.598974][T15553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.598996][T15553] RIP: 0033:0x7f9a875dbb7c [ 199.599015][T15553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 199.599038][T15553] RSP: 002b:00007f9a85c3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.599101][T15553] RAX: ffffffffffffffda RBX: 00007f9a877f5fa0 RCX: 00007f9a875dbb7c [ 199.599118][T15553] RDX: 000000000000000f RSI: 00007f9a85c3f0a0 RDI: 0000000000000006 [ 199.599132][T15553] RBP: 00007f9a85c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 199.599147][T15553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.599162][T15553] R13: 0000000000000000 R14: 00007f9a877f5fa0 R15: 00007ffe344634f8 [ 199.599186][T15553] [ 199.832642][T15561] pimreg: entered allmulticast mode [ 199.838994][T15561] pimreg: left allmulticast mode [ 199.871466][T15565] veth0_macvtap: entered promiscuous mode [ 199.882299][T15565] team0: Device macvtap0 failed to register rx_handler [ 199.890844][T15565] veth0_macvtap: left promiscuous mode [ 199.920357][T15568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4107'. [ 199.995127][T15580] netlink: 'syz.3.4112': attribute type 3 has an invalid length. [ 200.033274][T15582] netlink: 'syz.4.4113': attribute type 3 has an invalid length. [ 200.067124][T15585] pimreg: entered allmulticast mode [ 200.073316][T15585] pimreg: left allmulticast mode [ 200.084164][T15586] loop4: detected capacity change from 0 to 2048 [ 200.114544][T15590] pimreg: entered allmulticast mode [ 200.120566][T15590] pimreg: left allmulticast mode [ 200.126826][T15586] loop4: p1 < > p4 [ 200.133671][T15586] loop4: p4 size 8388608 extends beyond EOD, truncated [ 200.163144][T15594] veth0_macvtap: entered promiscuous mode [ 200.170447][T15594] team0: Device macvtap0 failed to register rx_handler [ 200.180657][T15594] veth0_macvtap: left promiscuous mode [ 200.242952][T15603] loop4: detected capacity change from 0 to 1024 [ 200.250965][T15603] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 200.262047][T15603] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 200.276234][T15603] JBD2: no valid journal superblock found [ 200.281993][T15603] EXT4-fs (loop4): Could not load journal inode [ 200.429081][T15618] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 200.435689][T15618] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.443185][T15618] vhci_hcd vhci_hcd.0: Device attached [ 200.454541][T15619] vhci_hcd: connection closed [ 200.454693][ T4024] vhci_hcd: stop threads [ 200.463716][ T4024] vhci_hcd: release socket [ 200.468200][ T4024] vhci_hcd: disconnect device [ 200.568611][T15625] pimreg: entered allmulticast mode [ 200.631331][T15627] pimreg: left allmulticast mode [ 200.709273][T15632] veth0_macvtap: entered promiscuous mode [ 200.731647][T15632] team0: Device macvtap0 failed to register rx_handler [ 200.740234][T15632] veth0_macvtap: left promiscuous mode [ 200.789272][T15641] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 200.807275][T15643] validate_nla: 2 callbacks suppressed [ 200.807294][T15643] netlink: 'syz.0.4139': attribute type 3 has an invalid length. [ 200.948983][T15649] loop7: detected capacity change from 0 to 16384 [ 201.010661][T15652] pimreg: entered allmulticast mode [ 201.024964][T15654] loop3: detected capacity change from 0 to 1024 [ 201.025758][T15652] pimreg: left allmulticast mode [ 201.048264][T15654] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 201.059339][T15654] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 201.078484][T15654] JBD2: no valid journal superblock found [ 201.084264][T15654] EXT4-fs (loop3): Could not load journal inode [ 201.146107][T15655] loop7: detected capacity change from 16384 to 16383 [ 201.167807][T15649] blk_print_req_error: 32 callbacks suppressed [ 201.167824][T15649] I/O error, dev loop7, sector 8192 op 0x0:(READ) flags 0x80700 phys_seg 11 prio class 0 [ 201.169123][T15655] I/O error, dev loop7, sector 4864 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 201.177135][T15649] I/O error, dev loop7, sector 8448 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 0 [ 201.183899][T15655] buffer_io_error: 3400 callbacks suppressed [ 201.183918][T15655] Buffer I/O error on dev loop7, logical block 608, lost async page write [ 201.218436][T15655] Buffer I/O error on dev loop7, logical block 609, lost async page write [ 201.227057][T15655] Buffer I/O error on dev loop7, logical block 610, lost async page write [ 201.227964][T15649] I/O error, dev loop7, sector 8192 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.235576][T15655] Buffer I/O error on dev loop7, logical block 611, lost async page write [ 201.235601][T15655] Buffer I/O error on dev loop7, logical block 612, lost async page write [ 201.235622][T15655] Buffer I/O error on dev loop7, logical block 613, lost async page write [ 201.245040][T15649] Buffer I/O error on dev loop7, logical block 1024, async page read [ 201.279044][T15655] Buffer I/O error on dev loop7, logical block 614, lost async page write [ 201.287688][T15655] Buffer I/O error on dev loop7, logical block 615, lost async page write [ 201.296410][T15655] Buffer I/O error on dev loop7, logical block 616, lost async page write [ 201.432383][T15655] I/O error, dev loop7, sector 5888 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 201.433503][T15668] veth0_macvtap: entered promiscuous mode [ 201.446086][T15655] I/O error, dev loop7, sector 6912 op 0x1:(WRITE) flags 0x800 phys_seg 96 prio class 0 [ 201.461830][T15668] team0: Device macvtap0 failed to register rx_handler [ 201.469576][T15668] veth0_macvtap: left promiscuous mode [ 201.549448][T15655] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.558802][T15655] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.568128][T15655] loop7: unable to read partition table [ 201.601147][T15673] netlink: 'syz.4.4150': attribute type 3 has an invalid length. [ 201.605862][T15655] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 201.682625][T15648] I/O error, dev loop7, sector 7680 op 0x1:(WRITE) flags 0x800 phys_seg 64 prio class 0 [ 201.704117][T15678] loop4: detected capacity change from 0 to 2048 [ 201.734738][T15682] loop3: detected capacity change from 0 to 1024 [ 201.751108][T15682] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 201.753103][T15678] loop4: p1 < > p4 [ 201.762105][T15682] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 201.768794][T15682] JBD2: no valid journal superblock found [ 201.781613][T15682] EXT4-fs (loop3): Could not load journal inode [ 201.793265][T15680] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 201.799823][T15680] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 201.807311][T15680] vhci_hcd vhci_hcd.0: Device attached [ 201.816369][T15678] loop4: p4 size 8388608 extends beyond EOD, truncated [ 201.824759][T15685] vhci_hcd: connection closed [ 201.825388][ T3902] vhci_hcd: stop threads [ 201.834430][ T3902] vhci_hcd: release socket [ 201.838988][ T3902] vhci_hcd: disconnect device [ 201.885238][T15671] team0 (unregistering): Port device team_slave_0 removed [ 201.914577][T15671] team0 (unregistering): Port device team_slave_1 removed [ 201.925181][T15671] team0 (unregistering): Port device geneve1 removed [ 201.961757][T15698] loop7: detected capacity change from 0 to 16384 [ 201.979100][T15700] netlink: 'syz.0.4161': attribute type 3 has an invalid length. [ 202.111414][T15711] loop4: detected capacity change from 0 to 1024 [ 202.127353][T15711] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 202.138331][T15711] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 202.172854][T15711] JBD2: no valid journal superblock found [ 202.178713][T15711] EXT4-fs (loop4): Could not load journal inode [ 202.235846][T15707] loop7: detected capacity change from 16384 to 16383 [ 202.272116][T15698] I/O error, dev loop7, sector 13576 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 202.349564][T15707] loop7: unable to read partition table [ 202.355265][T15707] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 202.393533][T15735] veth0_macvtap: entered promiscuous mode [ 202.404767][T15735] team0: Device macvtap0 failed to register rx_handler [ 202.412013][T15735] veth0_macvtap: left promiscuous mode [ 202.472191][T15743] vhci_hcd: default hub control req: 800b v0000 i0000 l0 [ 202.534019][T15754] FAULT_INJECTION: forcing a failure. [ 202.534019][T15754] name failslab, interval 1, probability 0, space 0, times 0 [ 202.546800][T15754] CPU: 0 UID: 0 PID: 15754 Comm: syz.3.4184 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 202.546830][T15754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.546846][T15754] Call Trace: [ 202.546854][T15754] [ 202.546864][T15754] dump_stack_lvl+0xf6/0x150 [ 202.546893][T15754] dump_stack+0x15/0x1a [ 202.546922][T15754] should_fail_ex+0x261/0x270 [ 202.546956][T15754] should_failslab+0x8f/0xb0 [ 202.546993][T15754] kmem_cache_alloc_noprof+0x59/0x340 [ 202.547039][T15754] ? audit_log_start+0x37f/0x6e0 [ 202.547064][T15754] audit_log_start+0x37f/0x6e0 [ 202.547087][T15754] ? kstrtouint+0x7b/0xc0 [ 202.547127][T15754] audit_seccomp+0x4b/0x130 [ 202.547152][T15754] __seccomp_filter+0x694/0x10e0 [ 202.547225][T15754] ? vfs_write+0x669/0x950 [ 202.547258][T15754] ? putname+0xe1/0x100 [ 202.547287][T15754] __secure_computing+0x7e/0x160 [ 202.547322][T15754] syscall_trace_enter+0xcf/0x1f0 [ 202.547430][T15754] ? fpregs_assert_state_consistent+0x83/0xa0 [ 202.547518][T15754] do_syscall_64+0xaa/0x1c0 [ 202.547605][T15754] ? clear_bhb_loop+0x25/0x80 [ 202.547632][T15754] ? clear_bhb_loop+0x25/0x80 [ 202.547733][T15754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.547757][T15754] RIP: 0033:0x7f9a875dd169 [ 202.547775][T15754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.547793][T15754] RSP: 002b:00007f9a85c3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000073 [ 202.547813][T15754] RAX: ffffffffffffffda RBX: 00007f9a877f5fa0 RCX: 00007f9a875dd169 [ 202.547828][T15754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.547842][T15754] RBP: 00007f9a85c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 202.547856][T15754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.547887][T15754] R13: 0000000000000000 R14: 00007f9a877f5fa0 R15: 00007ffe344634f8 [ 202.547916][T15754] [ 202.759802][T15760] loop7: detected capacity change from 0 to 16384 [ 202.767500][T15755] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 202.774062][T15755] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 202.781544][T15755] vhci_hcd vhci_hcd.0: Device attached [ 202.795719][T15756] vhci_hcd: connection closed [ 202.795988][ T4020] vhci_hcd: stop threads [ 202.805073][ T4020] vhci_hcd: release socket [ 202.810006][ T4020] vhci_hcd: disconnect device [ 202.819789][T15762] loop3: detected capacity change from 0 to 2048 [ 202.856767][T15762] loop3: p1 < > p4 [ 202.861170][T15762] loop3: p4 size 8388608 extends beyond EOD, truncated [ 202.877693][T15763] loop7: detected capacity change from 16384 to 16383 [ 202.899330][T15763] loop7: unable to read partition table [ 202.905073][T15763] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 202.929304][T15766] loop3: detected capacity change from 0 to 1024 [ 202.940079][T15766] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 202.951139][T15766] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 202.967028][T15766] JBD2: no valid journal superblock found [ 202.972818][T15766] EXT4-fs (loop3): Could not load journal inode [ 202.985179][ T29] kauditd_printk_skb: 1021 callbacks suppressed [ 202.985196][ T29] audit: type=1326 audit(1744218510.480:16618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 203.032654][ T29] audit: type=1326 audit(1744218510.520:16619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 203.056362][ T29] audit: type=1326 audit(1744218510.520:16620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 203.079994][ T29] audit: type=1326 audit(1744218510.520:16621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 203.103760][ T29] audit: type=1326 audit(1744218510.520:16622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 203.127396][ T29] audit: type=1326 audit(1744218510.520:16623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 203.151105][ T29] audit: type=1326 audit(1744218510.520:16624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 203.174514][ T29] audit: type=1326 audit(1744218510.520:16625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 203.198130][ T29] audit: type=1326 audit(1744218510.520:16626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 203.221943][ T29] audit: type=1326 audit(1744218510.520:16627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.4.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 203.233416][T15775] loop7: detected capacity change from 0 to 16384 [ 203.272646][T15772] veth0_macvtap: entered promiscuous mode [ 203.279924][T15772] team0: Device macvtap0 failed to register rx_handler [ 203.292466][T15772] veth0_macvtap: left promiscuous mode [ 203.368334][T15781] loop4: detected capacity change from 0 to 1024 [ 203.387809][T15781] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 203.398956][T15781] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 203.414139][T15781] JBD2: no valid journal superblock found [ 203.419997][T15781] EXT4-fs (loop4): Could not load journal inode [ 203.455797][T15793] pimreg: entered allmulticast mode [ 203.461785][T15793] pimreg: left allmulticast mode [ 203.483325][T15786] loop7: detected capacity change from 16384 to 16383 [ 203.554321][T15786] loop7: unable to read partition table [ 203.570594][T15786] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 203.594249][T15806] loop3: detected capacity change from 0 to 1024 [ 203.612105][T15806] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 203.623106][T15806] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 203.642589][T15806] JBD2: no valid journal superblock found [ 203.648422][T15806] EXT4-fs (loop3): Could not load journal inode [ 203.709893][T15813] netlink: 'syz.0.4207': attribute type 3 has an invalid length. [ 203.788636][T15820] FAULT_INJECTION: forcing a failure. [ 203.788636][T15820] name failslab, interval 1, probability 0, space 0, times 0 [ 203.801327][T15820] CPU: 1 UID: 0 PID: 15820 Comm: syz.0.4210 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 203.801389][T15820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.801405][T15820] Call Trace: [ 203.801411][T15820] [ 203.801420][T15820] dump_stack_lvl+0xf6/0x150 [ 203.801473][T15820] dump_stack+0x15/0x1a [ 203.801493][T15820] should_fail_ex+0x261/0x270 [ 203.801553][T15820] should_failslab+0x8f/0xb0 [ 203.801592][T15820] __kmalloc_node_noprof+0xaf/0x420 [ 203.801688][T15820] ? crypto_create_tfm_node+0x59/0x240 [ 203.801719][T15820] crypto_create_tfm_node+0x59/0x240 [ 203.801750][T15820] crypto_init_lskcipher_ops_sg+0x3f/0xa0 [ 203.801865][T15820] crypto_skcipher_init_tfm+0xb8/0x120 [ 203.801895][T15820] crypto_create_tfm_node+0xef/0x240 [ 203.801923][T15820] crypto_alloc_tfm_node+0xd1/0x290 [ 203.801954][T15820] crypto_alloc_sync_skcipher+0x39/0xa0 [ 203.801982][T15820] set_secret+0xef/0x240 [ 203.802049][T15820] ceph_key_preparse+0x171/0x220 [ 203.802079][T15820] __key_create_or_update+0x2ad/0x780 [ 203.802151][T15820] key_create_or_update+0x42/0x60 [ 203.802253][T15820] __se_sys_add_key+0x2a1/0x330 [ 203.802284][T15820] __x64_sys_add_key+0x67/0x80 [ 203.802314][T15820] x64_sys_call+0x1f10/0x2e10 [ 203.802341][T15820] do_syscall_64+0xc9/0x1c0 [ 203.802377][T15820] ? clear_bhb_loop+0x25/0x80 [ 203.802422][T15820] ? clear_bhb_loop+0x25/0x80 [ 203.802450][T15820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.802476][T15820] RIP: 0033:0x7f2d415bd169 [ 203.802496][T15820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.802572][T15820] RSP: 002b:00007f2d3fc27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 203.802593][T15820] RAX: ffffffffffffffda RBX: 00007f2d417d5fa0 RCX: 00007f2d415bd169 [ 203.802608][T15820] RDX: 0000200000000bc0 RSI: 0000000000000000 RDI: 0000200000000040 [ 203.802623][T15820] RBP: 00007f2d3fc27090 R08: 000000000ce2b3e9 R09: 0000000000000000 [ 203.802638][T15820] R10: 000000000000012d R11: 0000000000000246 R12: 0000000000000001 [ 203.802733][T15820] R13: 0000000000000000 R14: 00007f2d417d5fa0 R15: 00007ffdd2aab8d8 [ 203.802756][T15820] [ 204.081136][T15822] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 204.362733][T15837] loop7: detected capacity change from 0 to 16384 [ 204.416603][T15840] loop4: detected capacity change from 0 to 512 [ 204.423503][T15840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.506876][T15840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.542884][T15840] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.554848][T15852] __nla_validate_parse: 1 callbacks suppressed [ 204.554867][T15852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4218'. [ 204.575000][T15843] loop7: detected capacity change from 16384 to 16383 [ 204.590171][T15854] netlink: 'syz.1.4220': attribute type 3 has an invalid length. [ 204.609475][ T3379] IPVS: starting estimator thread 0... [ 204.709777][T15855] IPVS: using max 2304 ests per chain, 115200 per kthread [ 204.741598][T15843] loop7: unable to read partition table [ 204.747422][T15843] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 205.132768][T15868] loop3: detected capacity change from 0 to 1024 [ 205.210677][T15868] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.221630][T15868] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 205.285553][T15873] loop7: detected capacity change from 0 to 16384 [ 205.309859][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.319277][T15868] JBD2: no valid journal superblock found [ 205.325048][T15868] EXT4-fs (loop3): Could not load journal inode [ 205.486060][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4230'. [ 205.615958][T15878] loop7: detected capacity change from 16384 to 16383 [ 205.652174][T15888] loop3: detected capacity change from 0 to 2048 [ 205.698674][T15888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.723428][T15878] loop7: unable to read partition table [ 205.735497][T15890] netlink: 'syz.4.4232': attribute type 3 has an invalid length. [ 205.781146][T15878] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 205.865453][T15888] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 205.872014][T15888] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 205.879491][T15888] vhci_hcd vhci_hcd.0: Device attached [ 205.901122][T15900] loop4: detected capacity change from 0 to 1024 [ 205.939720][T15897] vhci_hcd: connection closed [ 205.940091][ T3902] vhci_hcd: stop threads [ 205.949145][ T3902] vhci_hcd: release socket [ 205.953575][ T3902] vhci_hcd: disconnect device [ 205.964715][T15904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4236'. [ 205.984280][T15900] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.995312][T15900] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 206.098735][T15900] JBD2: no valid journal superblock found [ 206.104523][T15900] EXT4-fs (loop4): Could not load journal inode [ 206.120708][T15917] netlink: 'syz.0.4237': attribute type 3 has an invalid length. [ 206.200192][T15919] loop4: detected capacity change from 0 to 2048 [ 206.214233][T15921] netlink: 'syz.1.4243': attribute type 3 has an invalid length. [ 206.254477][T15927] loop7: detected capacity change from 0 to 16384 [ 206.268677][T15919] loop4: p1 < > p4 [ 206.278033][T15919] loop4: p4 size 8388608 extends beyond EOD, truncated [ 206.370335][T15935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4249'. [ 206.508277][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.605747][T15933] loop7: detected capacity change from 16384 to 16383 [ 206.661574][T15946] loop4: detected capacity change from 0 to 1024 [ 206.707393][T15948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4254'. [ 206.888145][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4256'. [ 207.029624][T15946] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 207.040723][T15946] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 207.339180][T15946] JBD2: no valid journal superblock found [ 207.345052][T15946] EXT4-fs (loop4): Could not load journal inode [ 207.433548][T15963] pimreg: entered allmulticast mode [ 207.444623][T15963] pimreg: left allmulticast mode [ 207.603769][T15971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4263'. [ 207.614445][T15969] netlink: 'syz.3.4262': attribute type 3 has an invalid length. [ 207.675886][T15967] blk_print_req_error: 51 callbacks suppressed [ 207.675909][T15967] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 207.746159][T15967] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 207.776411][T15967] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.785908][T15967] buffer_io_error: 3057 callbacks suppressed [ 207.785922][T15967] Buffer I/O error on dev loop7, logical block 2048, async page read [ 207.824856][T15979] xfrm0 speed is unknown, defaulting to 1000 [ 207.841551][T15983] loop3: detected capacity change from 0 to 1024 [ 207.861795][T15981] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 207.868393][T15981] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 207.876057][T15981] vhci_hcd vhci_hcd.0: Device attached [ 207.885870][T15983] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 207.896832][T15983] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 207.919624][T15967] I/O error, dev loop7, sector 2049 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.929128][T15967] Buffer I/O error on dev loop7, logical block 2049, async page read [ 207.948374][T15983] JBD2: no valid journal superblock found [ 207.954223][T15983] EXT4-fs (loop3): Could not load journal inode [ 207.970767][T15967] I/O error, dev loop7, sector 2050 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.980254][T15967] Buffer I/O error on dev loop7, logical block 2050, async page read [ 208.015838][T15984] vhci_hcd: connection closed [ 208.017267][ T29] kauditd_printk_skb: 701 callbacks suppressed [ 208.017284][ T29] audit: type=1326 audit(1744218515.520:17329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15982 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 208.051883][ T29] audit: type=1326 audit(1744218515.520:17330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15982 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 208.075652][ T2969] vhci_hcd: vhci_device speed not set [ 208.095916][T15967] I/O error, dev loop7, sector 2051 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.105103][ T29] audit: type=1326 audit(1744218515.580:17331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15982 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 208.105347][T15967] Buffer I/O error on dev loop7, logical block 2051, async page read [ 208.128962][ T29] audit: type=1326 audit(1744218515.590:17332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15982 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 208.160601][ T3643] vhci_hcd: stop threads [ 208.160615][ T3643] vhci_hcd: release socket [ 208.160631][ T3643] vhci_hcd: disconnect device [ 208.175483][ T29] audit: type=1326 audit(1744218515.590:17333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15982 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 208.175956][T15967] I/O error, dev loop7, sector 2052 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.199204][ T29] audit: type=1326 audit(1744218515.590:17334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15982 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 208.199241][ T29] audit: type=1326 audit(1744218515.590:17335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15982 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 208.208663][T15967] Buffer I/O error on dev loop7, logical block 2052, async page read [ 208.208732][ T2969] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 208.232224][ T29] audit: type=1326 audit(1744218515.590:17336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15982 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 208.261095][ T2969] usb 5-1: enqueue for inactive port 0 [ 208.263888][ T29] audit: type=1326 audit(1744218515.590:17337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15982 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 208.271448][ T2969] usb 5-1: enqueue for inactive port 0 [ 208.294947][ T29] audit: type=1326 audit(1744218515.590:17338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15982 comm="syz.3.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 208.304718][ T2969] usb 5-1: enqueue for inactive port 0 [ 208.335778][T15967] I/O error, dev loop7, sector 2053 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.368378][T15967] Buffer I/O error on dev loop7, logical block 2053, async page read [ 208.392344][T15967] I/O error, dev loop7, sector 2054 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.401814][T15967] Buffer I/O error on dev loop7, logical block 2054, async page read [ 208.432066][T15967] I/O error, dev loop7, sector 2055 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.441630][T15967] Buffer I/O error on dev loop7, logical block 2055, async page read [ 208.469610][ T2969] vhci_hcd: vhci_device speed not set [ 208.528141][T15966] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 208.536572][T15966] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 208.757414][T16010] netlink: 'syz.2.4276': attribute type 3 has an invalid length. [ 208.786632][T16008] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 208.963824][T16018] loop3: detected capacity change from 0 to 2048 [ 209.026394][T16018] loop3: p1 < > p4 [ 209.038560][T16018] loop3: p4 size 8388608 extends beyond EOD, truncated [ 209.185111][T16037] veth0_macvtap: entered promiscuous mode [ 209.196483][T16037] team0: Device macvtap0 failed to register rx_handler [ 209.204844][T16031] loop7: detected capacity change from 0 to 16384 [ 209.239378][T16037] veth0_macvtap: left promiscuous mode [ 209.298133][T16035] netlink: 'syz.2.4290': attribute type 3 has an invalid length. [ 209.306242][T16039] veth0_macvtap: entered promiscuous mode [ 209.313463][T16039] team0: Device macvtap0 failed to register rx_handler [ 209.336446][T16039] veth0_macvtap: left promiscuous mode [ 209.425993][T16042] loop7: detected capacity change from 16384 to 16383 [ 209.715100][T16080] veth0_macvtap: entered promiscuous mode [ 209.743627][T16080] team0: Device macvtap0 failed to register rx_handler [ 209.767303][T16080] veth0_macvtap: left promiscuous mode [ 209.775896][T16078] netlink: 'syz.2.4303': attribute type 3 has an invalid length. [ 209.843143][T16090] loop4: detected capacity change from 0 to 2048 [ 209.906865][T16090] loop4: p1 < > p4 [ 209.914558][T16090] loop4: p4 size 8388608 extends beyond EOD, truncated [ 210.013402][T16104] loop4: detected capacity change from 0 to 2048 [ 210.098764][T16104] loop4: p1 < > p4 [ 210.103158][T16104] loop4: p4 size 8388608 extends beyond EOD, truncated [ 210.216471][T16112] netlink: 'syz.4.4319': attribute type 3 has an invalid length. [ 210.358162][T16126] loop4: detected capacity change from 0 to 2048 [ 210.393226][T16126] loop4: p1 < > p4 [ 210.406339][T16126] loop4: p4 size 8388608 extends beyond EOD, truncated [ 210.420699][T16128] loop7: detected capacity change from 0 to 16384 [ 210.533369][T16142] loop4: detected capacity change from 0 to 2048 [ 210.540713][T16146] netlink: 'syz.0.4332': attribute type 3 has an invalid length. [ 210.555013][T16139] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 210.561601][T16139] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 210.569166][T16139] vhci_hcd vhci_hcd.0: Device attached [ 210.586946][T16147] vhci_hcd: connection closed [ 210.587293][ T4020] vhci_hcd: stop threads [ 210.596348][ T4020] vhci_hcd: release socket [ 210.600887][ T4020] vhci_hcd: disconnect device [ 210.615989][T16145] loop7: detected capacity change from 16384 to 16383 [ 210.623231][T16142] loop4: p1 < > p4 [ 210.627997][T16142] loop4: p4 size 8388608 extends beyond EOD, truncated [ 210.680177][T16145] loop7: unable to read partition table [ 210.695555][T16145] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 210.785213][T16159] loop4: detected capacity change from 0 to 2048 [ 210.830308][T16159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.885338][T16159] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 210.891962][T16159] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 210.899488][T16159] vhci_hcd vhci_hcd.0: Device attached [ 210.930887][T16169] vhci_hcd: connection closed [ 210.931178][ T3902] vhci_hcd: stop threads [ 210.940276][ T3902] vhci_hcd: release socket [ 210.944739][ T3902] vhci_hcd: disconnect device [ 211.086307][T16173] loop7: detected capacity change from 0 to 16384 [ 211.364632][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4347'. [ 211.376816][T16190] netlink: 'syz.2.4348': attribute type 3 has an invalid length. [ 211.418793][T16194] team0 (unregistering): Port device team_slave_0 removed [ 211.428786][T16194] team0 (unregistering): Port device team_slave_1 removed [ 211.448210][T16196] loop3: detected capacity change from 0 to 2048 [ 211.457863][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.476596][T16196] loop3: p1 < > p4 [ 211.494855][T16196] loop3: p4 size 8388608 extends beyond EOD, [ 211.494864][T16198] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 211.501056][T16196] truncated [ 211.507497][T16198] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.507609][T16198] vhci_hcd vhci_hcd.0: Device attached [ 211.539660][T16201] vhci_hcd: connection closed [ 211.540990][ T3643] vhci_hcd: stop threads [ 211.550074][ T3643] vhci_hcd: release socket [ 211.554505][ T3643] vhci_hcd: disconnect device [ 211.563838][T16207] loop7: detected capacity change from 0 to 16384 [ 211.795875][T16210] loop7: detected capacity change from 16384 to 16383 [ 212.001595][T16219] netlink: 'syz.3.4358': attribute type 3 has an invalid length. [ 212.030630][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4361'. [ 212.062716][T16230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4363'. [ 212.113400][T16235] loop3: detected capacity change from 0 to 2048 [ 212.163591][T16235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.208037][T16235] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 212.214612][T16235] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 212.222134][T16235] vhci_hcd vhci_hcd.0: Device attached [ 212.237752][T16243] vhci_hcd: connection closed [ 212.238050][ T3643] vhci_hcd: stop threads [ 212.247111][ T3643] vhci_hcd: release socket [ 212.251612][ T3643] vhci_hcd: disconnect device [ 212.260299][T16248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4368'. [ 212.349874][T16257] netlink: 'syz.4.4372': attribute type 3 has an invalid length. [ 212.375933][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4373'. [ 212.432907][T16268] loop4: detected capacity change from 0 to 2048 [ 212.451753][T16268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.517442][T16268] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 212.524028][T16268] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 212.531546][T16268] vhci_hcd vhci_hcd.0: Device attached [ 212.549391][T16273] vhci_hcd: connection closed [ 212.549497][ T4065] vhci_hcd: stop threads [ 212.558551][ T4065] vhci_hcd: release socket [ 212.562979][ T4065] vhci_hcd: disconnect device [ 212.751236][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.792090][T16283] loop3: detected capacity change from 0 to 128 [ 212.931097][T16291] netlink: 'syz.3.4385': attribute type 3 has an invalid length. [ 212.970783][T16293] pimreg: entered allmulticast mode [ 212.988632][T16293] pimreg: left allmulticast mode [ 213.022793][T16299] netlink: 'syz.2.4389': attribute type 3 has an invalid length. [ 213.073535][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.089447][T16303] netlink: 'syz.3.4392': attribute type 3 has an invalid length. [ 213.101990][T16305] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 213.108549][T16305] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 213.116067][T16305] vhci_hcd vhci_hcd.0: Device attached [ 213.144863][T16306] vhci_hcd: connection closed [ 213.145015][ T4065] vhci_hcd: stop threads [ 213.154113][ T4065] vhci_hcd: release socket [ 213.158579][ T4065] vhci_hcd: disconnect device [ 213.170755][T16311] loop4: detected capacity change from 0 to 2048 [ 213.208483][T16315] netlink: 'syz.0.4396': attribute type 3 has an invalid length. [ 213.216437][T16311] loop4: p1 < > p4 [ 213.220849][T16311] loop4: p4 size 8388608 extends beyond EOD, truncated [ 213.262907][ T29] kauditd_printk_skb: 836 callbacks suppressed [ 213.262925][ T29] audit: type=1326 audit(1744218520.760:18175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 213.293482][ T29] audit: type=1326 audit(1744218520.760:18176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 213.317107][ T29] audit: type=1326 audit(1744218520.760:18177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 213.340878][ T29] audit: type=1326 audit(1744218520.760:18178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 213.364562][ T29] audit: type=1326 audit(1744218520.760:18179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 213.388228][ T29] audit: type=1326 audit(1744218520.770:18180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 213.411930][ T29] audit: type=1326 audit(1744218520.770:18181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 213.435615][ T29] audit: type=1326 audit(1744218520.770:18182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 213.459253][ T29] audit: type=1326 audit(1744218520.770:18183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 213.482983][ T29] audit: type=1326 audit(1744218520.770:18184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.4.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f55ed169 code=0x7ffc0000 [ 213.536977][T16327] loop7: detected capacity change from 0 to 16384 [ 213.663862][T16331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.828521][T16334] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 213.835082][T16334] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 213.842540][T16334] vhci_hcd vhci_hcd.0: Device attached [ 213.951547][T16335] vhci_hcd: connection closed [ 213.951921][ T4065] vhci_hcd: stop threads [ 213.960966][ T4065] vhci_hcd: release socket [ 213.965443][ T4065] vhci_hcd: disconnect device [ 214.564015][T16345] netlink: 'syz.4.4404': attribute type 3 has an invalid length. [ 214.715884][T16329] loop7: detected capacity change from 16384 to 16383 [ 214.755155][T16354] netlink: 'syz.4.4408': attribute type 3 has an invalid length. [ 214.960647][T16357] loop4: detected capacity change from 0 to 512 [ 214.968244][T16357] EXT4-fs: Ignoring removed i_version option [ 214.974285][T16357] EXT4-fs: Ignoring removed nobh option [ 215.003694][T16357] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 215.008180][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4406'. [ 215.051477][T16363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4412'. [ 215.129378][T16357] EXT4-fs (loop4): 1 truncate cleaned up [ 215.137355][T16357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.205819][T16369] pimreg: entered allmulticast mode [ 215.211975][T16369] pimreg: left allmulticast mode [ 215.292323][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.308966][T16374] veth0_macvtap: entered promiscuous mode [ 215.316041][T16374] team0: Device macvtap0 failed to register rx_handler [ 215.323125][T16374] veth0_macvtap: left promiscuous mode [ 215.393475][T16382] xfrm0 speed is unknown, defaulting to 1000 [ 215.430123][T16385] netlink: 'syz.1.4420': attribute type 3 has an invalid length. [ 215.687985][T16394] blk_print_req_error: 974 callbacks suppressed [ 215.688007][T16394] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 0 [ 215.709924][T16399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4424'. [ 215.720781][T16394] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 25 prio class 0 [ 215.746217][T16394] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.755657][T16394] buffer_io_error: 6295 callbacks suppressed [ 215.761759][T16394] Buffer I/O error on dev loop7, logical block 4096, async page read [ 215.809941][T16394] I/O error, dev loop7, sector 4097 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.819459][T16394] Buffer I/O error on dev loop7, logical block 4097, async page read [ 215.851394][T16394] I/O error, dev loop7, sector 4098 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.860873][T16394] Buffer I/O error on dev loop7, logical block 4098, async page read [ 215.870780][T16394] I/O error, dev loop7, sector 4099 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.880268][T16394] Buffer I/O error on dev loop7, logical block 4099, async page read [ 215.889430][T16394] I/O error, dev loop7, sector 4100 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.898941][T16394] Buffer I/O error on dev loop7, logical block 4100, async page read [ 215.959425][T16394] I/O error, dev loop7, sector 4101 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.968936][T16394] Buffer I/O error on dev loop7, logical block 4101, async page read [ 215.988528][T16394] I/O error, dev loop7, sector 4102 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.998112][T16394] Buffer I/O error on dev loop7, logical block 4102, async page read [ 216.006345][T16394] I/O error, dev loop7, sector 4103 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.015868][T16394] Buffer I/O error on dev loop7, logical block 4103, async page read [ 216.038066][T16393] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 216.046614][T16393] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 216.103986][T16427] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.112806][T16429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4436'. [ 216.301425][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4439'. [ 216.401711][T16442] pimreg: entered allmulticast mode [ 216.433211][T16442] pimreg: left allmulticast mode [ 216.468054][T16449] loop4: detected capacity change from 0 to 1024 [ 216.470449][T16447] loop3: detected capacity change from 0 to 2048 [ 216.481414][T16449] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.492631][T16449] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 216.503996][T16449] JBD2: no valid journal superblock found [ 216.509874][T16449] EXT4-fs (loop4): Could not load journal inode [ 216.543183][T16449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.551516][T16447] loop3: p1 < > p4 [ 216.566168][T16447] loop3: p4 size 8388608 extends beyond EOD, truncated [ 216.629144][T16453] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 216.658175][T16459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4448'. [ 216.709506][T16465] loop3: detected capacity change from 0 to 1024 [ 216.716944][T16465] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.728103][T16465] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 216.739770][T16465] JBD2: no valid journal superblock found [ 216.745519][T16465] EXT4-fs (loop3): Could not load journal inode [ 216.790565][T16473] loop3: detected capacity change from 0 to 1024 [ 216.798407][T16473] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.809672][T16473] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 216.827965][T16473] JBD2: no valid journal superblock found [ 216.833764][T16473] EXT4-fs (loop3): Could not load journal inode [ 217.188384][T16487] loop3: detected capacity change from 0 to 2048 [ 217.195546][T16489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4459'. [ 217.216436][T16487] loop3: p1 < > p4 [ 217.221059][T16487] loop3: p4 size 8388608 extends beyond EOD, truncated [ 217.308923][T16496] loop3: detected capacity change from 0 to 1024 [ 217.331263][T16496] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 217.342316][T16496] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 217.353951][T16496] JBD2: no valid journal superblock found [ 217.359870][T16496] EXT4-fs (loop3): Could not load journal inode [ 217.386592][T16498] loop4: detected capacity change from 0 to 512 [ 217.399185][T16498] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 217.412760][T16498] EXT4-fs (loop4): orphan cleanup on readonly fs [ 217.452531][T16511] loop3: detected capacity change from 0 to 1024 [ 217.461683][T16498] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.4463: Failed to acquire dquot type 1 [ 217.496716][T16498] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4463: bg 0: block 40: padding at end of block bitmap is not set [ 217.503502][T16518] pimreg: entered allmulticast mode [ 217.511224][T16511] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 217.518294][T16518] pimreg: left allmulticast mode [ 217.527460][T16511] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 217.553103][T16520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4471'. [ 217.564037][T16498] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 217.573669][T16498] EXT4-fs (loop4): 1 truncate cleaned up [ 217.584852][T16511] JBD2: no valid journal superblock found [ 217.590688][T16511] EXT4-fs (loop3): Could not load journal inode [ 217.601946][T16498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.634946][T16498] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.4463: corrupted xattr block 31: invalid header [ 217.677776][T16498] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 217.687254][T16529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4475'. [ 217.694970][T16531] loop3: detected capacity change from 0 to 1024 [ 217.704976][T16532] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.4463: corrupted xattr block 31: invalid header [ 217.704935][T16498] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #16: comm syz.4.4463: corrupted xattr block 31: invalid header [ 217.738231][T16498] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 217.748069][T16498] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.4463: bad symlink. [ 217.758286][T16531] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 217.760098][T16532] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 217.769375][T16531] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 217.790689][T16532] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.4463: bad symlink. [ 217.805757][T16531] JBD2: no valid journal superblock found [ 217.811522][T16531] EXT4-fs (loop3): Could not load journal inode [ 217.869773][T16527] validate_nla: 1 callbacks suppressed [ 217.869798][T16527] netlink: 'syz.2.4474': attribute type 21 has an invalid length. [ 217.889380][T16527] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4474'. [ 217.915185][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.944385][T16542] syz.0.4479 (16542) used greatest stack depth: 8976 bytes left [ 218.055487][T16552] loop4: detected capacity change from 0 to 1024 [ 218.073950][T16552] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 218.084931][T16552] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 218.100528][T16554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4485'. [ 218.111170][T16552] JBD2: no valid journal superblock found [ 218.117003][T16552] EXT4-fs (loop4): Could not load journal inode [ 218.166324][T16552] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 218.238733][T16566] loop3: detected capacity change from 0 to 2048 [ 218.287404][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 218.287423][ T29] audit: type=1400 audit(1744218525.790:18816): avc: denied { mount } for pid=16571 comm="syz.0.4492" name="/" dev="hugetlbfs" ino=46607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 218.318082][T16566] loop3: p1 < > p4 [ 218.322460][T16566] loop3: p4 size 8388608 extends beyond EOD, truncated [ 218.339708][T16575] loop7: detected capacity change from 0 to 16384 [ 218.433897][T16582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4496'. [ 218.535896][T16578] loop7: detected capacity change from 16384 to 16383 [ 218.561804][T16587] loop3: detected capacity change from 0 to 1024 [ 218.569264][T16587] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 218.580239][T16587] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 218.598008][T16578] loop7: unable to read partition table [ 218.598784][T16587] JBD2: no valid journal superblock found [ 218.603829][T16578] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 218.609548][T16587] EXT4-fs (loop3): Could not load journal inode [ 218.650937][ T29] audit: type=1326 audit(1744218526.150:18817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.3.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 218.675208][ T29] audit: type=1326 audit(1744218526.150:18818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.3.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 218.699001][ T29] audit: type=1326 audit(1744218526.150:18819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.3.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 218.722960][ T29] audit: type=1326 audit(1744218526.150:18820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.3.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 218.722989][ T29] audit: type=1326 audit(1744218526.150:18821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.3.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 218.723014][ T29] audit: type=1326 audit(1744218526.150:18822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.3.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 218.793798][ T29] audit: type=1326 audit(1744218526.150:18823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.3.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 218.817846][ T29] audit: type=1326 audit(1744218526.150:18824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.3.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 218.842585][ T29] audit: type=1326 audit(1744218526.150:18825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.3.4497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 219.048796][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4499'. [ 219.083729][T16599] loop7: detected capacity change from 0 to 16384 [ 219.241408][T16610] netlink: 'syz.0.4506': attribute type 3 has an invalid length. [ 219.267473][T16606] loop7: detected capacity change from 16384 to 16383 [ 219.332376][T16619] pimreg: entered allmulticast mode [ 219.349026][T16619] pimreg: left allmulticast mode [ 219.360755][T16606] loop7: unable to read partition table [ 219.368307][T16606] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 219.468927][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4511'. [ 219.554619][T16638] loop4: detected capacity change from 0 to 2048 [ 219.576562][T16638] loop4: p1 < > p4 [ 219.586273][T16638] loop4: p4 size 8388608 extends beyond EOD, truncated [ 219.702444][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4516'. [ 219.767909][T16642] netlink: 'syz.4.4518': attribute type 3 has an invalid length. [ 219.806737][T16644] loop7: detected capacity change from 0 to 16384 [ 219.820551][T16646] veth0_macvtap: entered promiscuous mode [ 219.828346][T16646] team0: Device macvtap0 failed to register rx_handler [ 219.846603][T16646] veth0_macvtap: left promiscuous mode [ 219.975784][T16652] loop7: detected capacity change from 16384 to 16383 [ 220.015097][T16652] loop7: unable to read partition table [ 220.021341][T16652] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 220.075342][T16665] loop4: detected capacity change from 0 to 2048 [ 220.106458][T16665] loop4: p1 < > p4 [ 220.122788][T16665] loop4: p4 size 8388608 extends beyond EOD, truncated [ 220.221899][T16669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.272405][T16675] pimreg: entered allmulticast mode [ 220.278042][T16673] netlink: 'syz.3.4530': attribute type 3 has an invalid length. [ 220.285908][T16675] pimreg: left allmulticast mode [ 220.361425][T16680] loop3: detected capacity change from 0 to 1024 [ 220.429156][T16696] loop3: detected capacity change from 0 to 2048 [ 220.440622][T16690] loop4: detected capacity change from 0 to 8192 [ 220.450276][T16690] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 220.476441][T16696] loop3: p1 < > p4 [ 220.489469][T16696] loop3: p4 size 8388608 extends beyond EOD, truncated [ 220.563752][T16705] netlink: 'syz.3.4543': attribute type 3 has an invalid length. [ 220.625398][T16711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.692118][T16716] pimreg: entered allmulticast mode [ 220.698469][T16716] pimreg: left allmulticast mode [ 220.890539][T16733] netlink: 'syz.3.4554': attribute type 3 has an invalid length. [ 220.936665][T16742] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.975971][T16746] pimreg: entered allmulticast mode [ 220.985547][T16748] 9pnet_fd: Insufficient options for proto=fd [ 220.992952][T16746] pimreg: left allmulticast mode [ 221.179495][T16772] loop3: detected capacity change from 0 to 1024 [ 221.194970][T16772] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 221.205983][T16772] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 221.217433][T16772] JBD2: no valid journal superblock found [ 221.223211][T16772] EXT4-fs (loop3): Could not load journal inode [ 221.263064][T16778] pimreg: entered allmulticast mode [ 221.273328][T16782] FAULT_INJECTION: forcing a failure. [ 221.273328][T16782] name failslab, interval 1, probability 0, space 0, times 0 [ 221.286110][T16782] CPU: 1 UID: 0 PID: 16782 Comm: syz.2.4574 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 221.286144][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.286159][T16782] Call Trace: [ 221.286166][T16782] [ 221.286174][T16782] dump_stack_lvl+0xf6/0x150 [ 221.286203][T16782] dump_stack+0x15/0x1a [ 221.286267][T16782] should_fail_ex+0x261/0x270 [ 221.286299][T16782] should_failslab+0x8f/0xb0 [ 221.286337][T16782] __kmalloc_cache_noprof+0x55/0x320 [ 221.286365][T16782] ? copy_cgroup_ns+0x167/0x370 [ 221.286395][T16782] copy_cgroup_ns+0x167/0x370 [ 221.286422][T16782] create_new_namespaces+0x1d8/0x430 [ 221.286490][T16782] unshare_nsproxy_namespaces+0xe6/0x120 [ 221.286516][T16782] ksys_unshare+0x3d3/0x700 [ 221.286620][T16782] __x64_sys_unshare+0x1f/0x30 [ 221.286651][T16782] x64_sys_call+0x2c93/0x2e10 [ 221.286674][T16782] do_syscall_64+0xc9/0x1c0 [ 221.286712][T16778] pimreg: left allmulticast mode [ 221.286774][T16782] ? clear_bhb_loop+0x25/0x80 [ 221.286802][T16782] ? clear_bhb_loop+0x25/0x80 [ 221.286828][T16782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.286857][T16782] RIP: 0033:0x7fb4e05fd169 [ 221.286879][T16782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.286913][T16782] RSP: 002b:00007fb4dec5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 221.286937][T16782] RAX: ffffffffffffffda RBX: 00007fb4e0815fa0 RCX: 00007fb4e05fd169 [ 221.286955][T16782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 221.287034][T16782] RBP: 00007fb4dec5f090 R08: 0000000000000000 R09: 0000000000000000 [ 221.287049][T16782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.287065][T16782] R13: 0000000000000000 R14: 00007fb4e0815fa0 R15: 00007fff24d32b08 [ 221.287090][T16782] [ 221.525488][T16799] loop4: detected capacity change from 0 to 2048 [ 221.611349][T16799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.626921][T16804] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 221.633484][T16804] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 221.641029][T16804] vhci_hcd vhci_hcd.0: Device attached [ 221.649275][T16815] vhci_hcd: connection closed [ 221.652507][ T4065] vhci_hcd: stop threads [ 221.661532][ T4065] vhci_hcd: release socket [ 221.665994][ T4065] vhci_hcd: disconnect device [ 221.683394][T16823] loop7: detected capacity change from 0 to 16384 [ 221.698408][T16826] __nla_validate_parse: 10 callbacks suppressed [ 221.698428][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4591'. [ 221.712473][T16799] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 221.720168][T16799] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 221.727719][T16799] vhci_hcd vhci_hcd.0: Device attached [ 221.734121][T16830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4592'. [ 221.742757][T16827] vhci_hcd: connection closed [ 221.746745][ T3902] vhci_hcd: stop threads [ 221.755839][ T3902] vhci_hcd: release socket [ 221.760270][ T3902] vhci_hcd: disconnect device [ 221.786229][T16832] FAULT_INJECTION: forcing a failure. [ 221.786229][T16832] name failslab, interval 1, probability 0, space 0, times 0 [ 221.798941][T16832] CPU: 1 UID: 0 PID: 16832 Comm: syz.2.4592 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 221.798973][T16832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.798986][T16832] Call Trace: [ 221.798991][T16832] [ 221.798999][T16832] dump_stack_lvl+0xf6/0x150 [ 221.799024][T16832] dump_stack+0x15/0x1a [ 221.799040][T16832] should_fail_ex+0x261/0x270 [ 221.799147][T16832] should_failslab+0x8f/0xb0 [ 221.799184][T16832] __kmalloc_cache_noprof+0x55/0x320 [ 221.799212][T16832] ? copy_cgroup_ns+0x167/0x370 [ 221.799303][T16832] copy_cgroup_ns+0x167/0x370 [ 221.799331][T16832] create_new_namespaces+0x1d8/0x430 [ 221.799427][T16832] unshare_nsproxy_namespaces+0xe6/0x120 [ 221.799461][T16832] ksys_unshare+0x3d3/0x700 [ 221.799498][T16832] __x64_sys_unshare+0x1f/0x30 [ 221.799533][T16832] x64_sys_call+0x2c93/0x2e10 [ 221.799635][T16832] do_syscall_64+0xc9/0x1c0 [ 221.799665][T16832] ? clear_bhb_loop+0x25/0x80 [ 221.799710][T16832] ? clear_bhb_loop+0x25/0x80 [ 221.799736][T16832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.799757][T16832] RIP: 0033:0x7fb4e05fd169 [ 221.799817][T16832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.799836][T16832] RSP: 002b:00007fb4dec3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 221.799854][T16832] RAX: ffffffffffffffda RBX: 00007fb4e0816080 RCX: 00007fb4e05fd169 [ 221.799868][T16832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 221.799975][T16832] RBP: 00007fb4dec3e090 R08: 0000000000000000 R09: 0000000000000000 [ 221.799990][T16832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.800084][T16832] R13: 0000000000000000 R14: 00007fb4e0816080 R15: 00007fff24d32b08 [ 221.800105][T16832] [ 221.819286][T16824] syzkaller0: entered promiscuous mode [ 221.993958][T16824] syzkaller0: entered allmulticast mode [ 222.020836][T16824] loop3: detected capacity change from 0 to 256 [ 222.035353][T16824] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 222.056751][T16824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4589'. [ 222.065805][T16831] loop7: detected capacity change from 16384 to 16383 [ 222.073878][T16831] blk_print_req_error: 836 callbacks suppressed [ 222.073912][T16831] I/O error, dev loop7, sector 7168 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 222.090300][T16831] buffer_io_error: 5798 callbacks suppressed [ 222.090419][T16831] Buffer I/O error on dev loop7, logical block 896, lost async page write [ 222.105280][T16831] Buffer I/O error on dev loop7, logical block 897, lost async page write [ 222.113896][T16831] Buffer I/O error on dev loop7, logical block 898, lost async page write [ 222.122493][T16831] Buffer I/O error on dev loop7, logical block 899, lost async page write [ 222.131128][T16831] Buffer I/O error on dev loop7, logical block 900, lost async page write [ 222.139721][T16831] Buffer I/O error on dev loop7, logical block 901, lost async page write [ 222.148304][T16831] Buffer I/O error on dev loop7, logical block 902, lost async page write [ 222.156892][T16831] Buffer I/O error on dev loop7, logical block 903, lost async page write [ 222.165470][T16831] Buffer I/O error on dev loop7, logical block 904, lost async page write [ 222.174066][T16831] Buffer I/O error on dev loop7, logical block 905, lost async page write [ 222.185896][T16831] I/O error, dev loop7, sector 8192 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 222.209127][T16831] I/O error, dev loop7, sector 9216 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 222.242262][T16831] I/O error, dev loop7, sector 10240 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 222.247111][T16849] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 222.253853][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4594'. [ 222.278118][T16831] I/O error, dev loop7, sector 11264 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 222.293838][T16831] I/O error, dev loop7, sector 12288 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 222.316108][T16831] I/O error, dev loop7, sector 13312 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 222.331355][T16831] I/O error, dev loop7, sector 14336 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 222.334289][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.345156][T16831] I/O error, dev loop7, sector 15360 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 222.381641][T16831] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 222.391352][T16831] loop7: unable to read partition table [ 222.397972][T16831] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 222.503069][T16864] hsr0: entered promiscuous mode [ 222.535466][T16866] veth0_macvtap: entered promiscuous mode [ 222.546681][T16866] team0: Device macvtap0 failed to register rx_handler [ 222.554971][T16866] veth0_macvtap: left promiscuous mode [ 222.622894][T16880] loop3: detected capacity change from 0 to 2048 [ 222.640007][T16880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.697180][T16880] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 222.703755][T16880] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 222.711253][T16880] vhci_hcd vhci_hcd.0: Device attached [ 222.719759][T16893] loop7: detected capacity change from 0 to 16384 [ 222.762252][T16898] xfrm0 speed is unknown, defaulting to 1000 [ 222.788403][T16894] vhci_hcd: connection closed [ 222.792476][ T4065] vhci_hcd: stop threads [ 222.801513][ T4065] vhci_hcd: release socket [ 222.805993][ T4065] vhci_hcd: disconnect device [ 222.925828][T16899] loop7: detected capacity change from 16384 to 16383 [ 222.955335][T16899] loop7: unable to read partition table [ 222.964153][T16899] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 223.012734][T16909] loop7: detected capacity change from 0 to 16384 [ 223.051344][T16917] veth0_macvtap: entered promiscuous mode [ 223.059867][T16917] team0: Device macvtap0 failed to register rx_handler [ 223.067426][T16917] veth0_macvtap: left promiscuous mode [ 223.185814][T16920] loop7: detected capacity change from 16384 to 16383 [ 223.238054][T16920] loop7: unable to read partition table [ 223.243749][T16920] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 223.303972][T12185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.341282][ T29] kauditd_printk_skb: 532 callbacks suppressed [ 223.341300][ T29] audit: type=1326 audit(1744218530.840:19358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 223.386938][ T29] audit: type=1326 audit(1744218530.870:19359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 223.410538][ T29] audit: type=1326 audit(1744218530.870:19360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 223.434227][ T29] audit: type=1326 audit(1744218530.870:19361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 223.457756][ T29] audit: type=1326 audit(1744218530.870:19362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 223.481491][ T29] audit: type=1326 audit(1744218530.870:19363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 223.505093][ T29] audit: type=1326 audit(1744218530.870:19364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 223.528747][ T29] audit: type=1326 audit(1744218530.870:19365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 223.552399][ T29] audit: type=1326 audit(1744218530.870:19366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 223.576113][ T29] audit: type=1326 audit(1744218530.870:19367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16934 comm="syz.3.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9a875dd169 code=0x7ffc0000 [ 223.812114][T16949] ipvlan2: entered promiscuous mode [ 223.821513][T16949] bridge0: port 3(ipvlan2) entered blocking state [ 223.828042][T16949] bridge0: port 3(ipvlan2) entered disabled state [ 223.835259][T16949] ipvlan2: entered allmulticast mode [ 223.840684][T16949] bridge0: entered allmulticast mode [ 223.846708][T16949] ipvlan2: left allmulticast mode [ 223.851820][T16949] bridge0: left allmulticast mode [ 223.870896][T16951] pimreg: entered allmulticast mode [ 223.886912][T16954] veth0_macvtap: entered promiscuous mode [ 223.894192][T16954] team0: Device macvtap0 failed to register rx_handler [ 223.913684][T16954] veth0_macvtap: left promiscuous mode [ 223.924209][T16951] pimreg: left allmulticast mode [ 223.956029][T16960] pimreg: entered allmulticast mode [ 223.962175][T16960] pimreg: left allmulticast mode [ 223.977503][T16962] pimreg: entered allmulticast mode [ 223.995006][T16962] pimreg: left allmulticast mode [ 223.995126][T16964] ================================================================== [ 224.008111][T16964] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 224.014766][T16964] [ 224.017138][T16964] write to 0xffffffff86873100 of 8 bytes by task 16962 on cpu 1: [ 224.024863][T16964] data_alloc+0x290/0x2c0 [ 224.029203][T16964] prb_reserve+0x86a/0xb80 [ 224.033627][T16964] vprintk_store+0x552/0x860 [ 224.038226][T16964] vprintk_emit+0x1a0/0x6c0 [ 224.042738][T16964] vprintk_default+0x26/0x30 [ 224.047339][T16964] vprintk+0x1d/0x30 [ 224.051252][T16964] _printk+0x7f/0xb0 [ 224.055155][T16964] __netdev_printk+0x2d1/0x3e0 [ 224.059937][T16964] netdev_info+0x9e/0xd0 [ 224.064211][T16964] netif_set_allmulti+0x15f/0x250 [ 224.069266][T16964] dev_set_allmulti+0xd4/0x190 [ 224.074044][T16964] vif_delete+0x2a7/0x450 [ 224.078478][T16964] mroute_clean_tables+0x12c/0x620 [ 224.083597][T16964] ip_mroute_setsockopt+0x860/0x950 [ 224.088804][T16964] do_ip_setsockopt+0xd06/0x22a0 [ 224.093761][T16964] ip_setsockopt+0x63/0x100 [ 224.098286][T16964] raw_setsockopt+0x10f/0x170 [ 224.102971][T16964] sock_common_setsockopt+0x64/0x80 [ 224.108174][T16964] __sys_setsockopt+0x187/0x200 [ 224.113037][T16964] __x64_sys_setsockopt+0x66/0x80 [ 224.118085][T16964] x64_sys_call+0x2a09/0x2e10 [ 224.122775][T16964] do_syscall_64+0xc9/0x1c0 [ 224.127298][T16964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.133206][T16964] [ 224.135529][T16964] read to 0xffffffff86873100 of 8 bytes by task 16964 on cpu 0: [ 224.143162][T16964] prb_reserve+0x239/0xb80 [ 224.147591][T16964] vprintk_store+0x552/0x860 [ 224.152194][T16964] vprintk_emit+0x1a0/0x6c0 [ 224.156709][T16964] vprintk_default+0x26/0x30 [ 224.161339][T16964] vprintk+0x1d/0x30 [ 224.165254][T16964] _printk+0x7f/0xb0 [ 224.169158][T16964] set_capacity_and_notify+0x155/0x200 [ 224.174639][T16964] loop_set_size+0x2e/0x70 [ 224.179077][T16964] loop_configure+0x89c/0xa30 [ 224.183792][T16964] lo_ioctl+0x5fa/0x1570 [ 224.188047][T16964] blkdev_ioctl+0x35b/0x450 [ 224.192658][T16964] __se_sys_ioctl+0xc9/0x140 [ 224.197261][T16964] __x64_sys_ioctl+0x43/0x50 [ 224.201862][T16964] x64_sys_call+0x168d/0x2e10 [ 224.206550][T16964] do_syscall_64+0xc9/0x1c0 [ 224.211077][T16964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.216980][T16964] [ 224.219304][T16964] value changed: 0xfffffffffffdc1e0 -> 0x0000000000074708 [ 224.226416][T16964] [ 224.228738][T16964] Reported by Kernel Concurrency Sanitizer on: [ 224.234895][T16964] CPU: 0 UID: 0 PID: 16964 Comm: syz.1.4636 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 224.247433][T16964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.257498][T16964] ================================================================== [ 223.994985][T16964] loop7: detected capacity change from 0 to 16384 [ 224.465776][T16964] loop7: detected capacity change from 16384 to 16383 [ 224.492543][T16964] loop7: unable to read partition table [ 224.498327][T16964] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5)