last executing test programs: 16.567856552s ago: executing program 4 (id=1020): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 16.224130973s ago: executing program 4 (id=1022): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 1) 16.116712762s ago: executing program 4 (id=1024): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x42042, 0x0) mq_timedsend(r0, &(0x7f0000001140)="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", 0x780, 0x8, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 15.292821715s ago: executing program 4 (id=1035): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@jqfmt_vfsv1}, {@lazytime}, {@bh}, {@dioread_nolock}, {@acl}, {@bsdgroups}, {@auto_da_alloc_val}]}, 0x3, 0x45b, &(0x7f0000000bc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xd6}}, './bus\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x500, 0x1000, 0x20000000, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}, {&(0x7f00000022c0)="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", 0x252}], 0x3}, 0x4) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r12 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r12, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 15.083289533s ago: executing program 4 (id=1038): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800850, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 14.806646298s ago: executing program 4 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r5, 0x10e, 0xb, &(0x7f0000001cc0)=""/4096, &(0x7f0000000440)=0x1000) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 14.806073158s ago: executing program 32 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r5, 0x10e, 0xb, &(0x7f0000001cc0)=""/4096, &(0x7f0000000440)=0x1000) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 9.097145854s ago: executing program 2 (id=1120): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 8.632509205s ago: executing program 2 (id=1122): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0x23) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, &(0x7f0000000740)="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", 0xff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000080), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r0}, &(0x7f0000000400), &(0x7f0000001740)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x4, 0xfffffffc, 0x40, @dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8, 0x700, 0x2, 0xc}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0x13, &(0x7f00000017c0)=@raw=[@jmp={0x5, 0x1, 0x3, 0x0, 0x3, 0x20, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x0, 0x5, 0x9, 0x1, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x4c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x50}], 0x0, 0xc, 0x68, &(0x7f0000001900)=""/104, 0x41100, 0x10, '\x00', r4, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40)={0x4, 0xb, 0x559, 0x7f}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80), 0x10, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0xfc, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c80)=ANY=[@ANYBLOB="24000000190015012bbd708f0b0f2d00021880040000c8000010000008000100ac1414001ad6e752296bb5"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000001880), 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r8}, 0x10) ioctl$USBDEVFS_BULK(r6, 0x5523, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x6}, {0xd}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) 7.922095568s ago: executing program 2 (id=1132): open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) unshare(0x480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fadvise64(r5, 0x36a9, 0x9, 0x4) 7.864869404s ago: executing program 2 (id=1133): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@jqfmt_vfsv1}, {@lazytime}, {@bh}, {@dioread_nolock}, {@acl}, {@bsdgroups}, {@auto_da_alloc_val}]}, 0x3, 0x45b, &(0x7f0000000bc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xd6}}, './bus\x00'}) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 7.719525276s ago: executing program 2 (id=1135): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000010400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$inet(0x2, 0x800, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e23, 0x4a3, @local, 0x4ef}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4624, 0x9, @empty, 0xfffffe01}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRES64=r1], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000f9ffffff850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa0}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r12, @ANYBLOB="01980000000000001c0012800b00010062726964676500000c00008005002a0001000000"], 0x3c}}, 0x0) sendto$packet(r9, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r12, 0x1, 0x4, 0x6, @local}, 0x14) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r4}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) 7.519297754s ago: executing program 2 (id=1137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x70}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="0100000101000000fcb685b90c005c00627269646765d13d1277aac657c504d9449bcd49dca48173cf4e097f254ed92c79476ef4a76db9bb5bece51a83715ca678399399ff0fa2540b511f3ae4a9361497536d240c526e60f4f651da6e0b5a7f8e6c04ba55cd7add1a68b78f423928d71d79cfbe8aad84cd43cc4e52e475ab21dcf27a37e6c5febc08291a02579587529ce5aec1d9663f17cb6ac4cb5afdbf11da"], 0x3c}}, 0x2000c815) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xc}, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x8000, 0x4}}}}]}, 0x78}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r9, &(0x7f00000012c0)=[{&(0x7f0000001640)=""/107, 0x6b}], 0x1) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) r10 = syz_io_uring_setup(0x7e2b, &(0x7f00000007c0)={0x0, 0xa325, 0x4, 0x0, 0x114}, &(0x7f0000000840), &(0x7f0000000880)) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000008c0)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000780)={0x4, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/191, 0xbf}, {&(0x7f0000000580)=""/21, 0x15}, {&(0x7f00000006c0)=""/53, 0x35}], &(0x7f0000000740)=[0x5, 0x8000]}, 0x20) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="78010000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fbdbdf250900000008000300010000000800030003000000050005000400000008000300060000001c00068008000300ac14140e050002000000000008000600100000000500050003000000050005000f00000008000200050000000c000680060001000a00000004000680"], 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x24840) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000, 0x0) ioctl$TUNSETIFINDEX(r11, 0x400454da, &(0x7f0000000500)=r6) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 7.518915794s ago: executing program 33 (id=1137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x70}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="0100000101000000fcb685b90c005c00627269646765d13d1277aac657c504d9449bcd49dca48173cf4e097f254ed92c79476ef4a76db9bb5bece51a83715ca678399399ff0fa2540b511f3ae4a9361497536d240c526e60f4f651da6e0b5a7f8e6c04ba55cd7add1a68b78f423928d71d79cfbe8aad84cd43cc4e52e475ab21dcf27a37e6c5febc08291a02579587529ce5aec1d9663f17cb6ac4cb5afdbf11da"], 0x3c}}, 0x2000c815) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xc}, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x8000, 0x4}}}}]}, 0x78}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r9, &(0x7f00000012c0)=[{&(0x7f0000001640)=""/107, 0x6b}], 0x1) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) r10 = syz_io_uring_setup(0x7e2b, &(0x7f00000007c0)={0x0, 0xa325, 0x4, 0x0, 0x114}, &(0x7f0000000840), &(0x7f0000000880)) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000008c0)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000780)={0x4, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/191, 0xbf}, {&(0x7f0000000580)=""/21, 0x15}, {&(0x7f00000006c0)=""/53, 0x35}], &(0x7f0000000740)=[0x5, 0x8000]}, 0x20) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="78010000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fbdbdf250900000008000300010000000800030003000000050005000400000008000300060000001c00068008000300ac14140e050002000000000008000600100000000500050003000000050005000f00000008000200050000000c000680060001000a00000004000680"], 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x24840) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000, 0x0) ioctl$TUNSETIFINDEX(r11, 0x400454da, &(0x7f0000000500)=r6) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 5.031537514s ago: executing program 1 (id=1170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x34, r5, 0x300, 0x70bd27, 0x0, {{0x67}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x6048004) tkill(r2, 0x7) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r7 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.624021538s ago: executing program 1 (id=1196): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x42042, 0x0) mq_timedsend(r0, &(0x7f0000001140)="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", 0x7e0, 0x8, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.80881752s ago: executing program 3 (id=1213): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xbb}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)={0x6000, 0x0, 0x1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x21a1, &(0x7f0000010400)={0x0, 0x4910, 0x1, 0x1001, 0x52}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1.80704314s ago: executing program 5 (id=1214): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) socket(0x2a, 0x3, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 1.790885732s ago: executing program 5 (id=1215): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.773369213s ago: executing program 3 (id=1216): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r0, 0x0, 0x0, 0x80800) 1.770034273s ago: executing program 1 (id=1217): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0x23) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, &(0x7f0000000740)="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", 0xff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000080), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r0}, &(0x7f0000000400), &(0x7f0000001740)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x4, 0xfffffffc, 0x40, @dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8, 0x700, 0x2, 0xc}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0x13, &(0x7f00000017c0)=@raw=[@jmp={0x5, 0x1, 0x3, 0x0, 0x3, 0x20, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x0, 0x5, 0x9, 0x1, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x4c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x50}], 0x0, 0xc, 0x68, &(0x7f0000001900)=""/104, 0x41100, 0x10, '\x00', r4, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40)={0x4, 0xb, 0x559, 0x7f}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80), 0x10, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0xfc, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c80)=ANY=[@ANYBLOB="24000000190015012bbd708f0b0f2d00021880040000c8000010000008000100ac1414001ad6e752296bb5"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000001880), 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r8}, 0x10) ioctl$USBDEVFS_BULK(r6, 0x5523, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x6}, {0xd}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) 1.758705554s ago: executing program 5 (id=1218): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_UQji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x9) fchown(r4, 0x0, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r8, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) accept4(r8, &(0x7f0000000740)=@phonet, 0x0, 0x800) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0x10, 0xffff}, {0x2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x1}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x4, 0x3, 0x8, 0x1, 0x6, 0x6}}, {0x4}}]}]}, 0x64}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000000)={r3, r2}) 1.754853395s ago: executing program 3 (id=1219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mincore(&(0x7f0000bfd000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/145) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) epoll_create1(0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="c627e4f27bb352d95f5fc6c54b5dbe4a000d322d4617e5e7e26c130cfb3f338ff371ae7aadc2b3e203f3744587827f68546400241046de8578f15c053f0762d18484a346e70963d3fdc048585cfec062f28c5272e5b3b731a8468e8d6321b8b56a50dfeff9e46cf63b47a19d8163f4954fffe439c6c4539d5901b4cd6123020063b5e6ebd83967a6156c10e877b1c4577906b29ec7c4b3e6759cf99c6abf9ccb8d501a42f24ac053b100"/180, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000005000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) unshare(0x64000600) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4000, @empty}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000017, 0x4, 0xfffe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='fsi_master_gpio_cmd_rel_addr\x00', r5, 0x0, 0x4}, 0x18) 1.389018137s ago: executing program 6 (id=1220): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.388636677s ago: executing program 5 (id=1221): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000016, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.190471775s ago: executing program 0 (id=1223): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000004c0), 0xc, &(0x7f00000003c0)={&(0x7f0000001040)=@deltaction={0xd0, 0x31, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x3fff, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x996}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4028089}, 0x20068884) 1.118219091s ago: executing program 5 (id=1224): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000f80)=ANY=[@ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001080)=ANY=[@ANYBLOB="296947e867935e94fb6fed7103962ae02366e61e24931c65a1095eaebff8561e5089ceb5ea7ad60e1e85281c548bdea1de0968eb61f60145a7226809fe3db6baa52f55dd2f4fb20a6bad2ff4e71ce54050896c50dfba30027854512436945d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="40cf", 0x2}], 0x1, 0x0, 0x0, 0x11000000}, 0x20008801) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000001280)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYRES8], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={&(0x7f0000001000)='host1x_syncpt_load_min\x00', r3, 0x0, 0x1ffffffffffffc}, 0x18) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000002c0)={0x0, 0x8, 0x7}) ppoll(&(0x7f00000000c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_read_part_table(0x5e5, &(0x7f0000000000)="$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") 1.052747757s ago: executing program 0 (id=1225): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 863.330664ms ago: executing program 1 (id=1226): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) socket(0x2a, 0x3, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 825.552457ms ago: executing program 3 (id=1227): r0 = syz_io_uring_setup(0x21a1, &(0x7f0000010400)={0x0, 0x4910, 0x1, 0x1001, 0x52}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 785.744461ms ago: executing program 1 (id=1228): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x42042, 0x0) mq_timedsend(r0, &(0x7f0000001140)="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", 0x7f0, 0x8, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 559.955501ms ago: executing program 3 (id=1229): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 475.506068ms ago: executing program 6 (id=1230): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000004c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) tgkill(0x0, 0x0, 0xf) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r7) 474.624598ms ago: executing program 3 (id=1231): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0x23) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, &(0x7f0000000740)="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", 0xff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000080), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r0}, &(0x7f0000000400), &(0x7f0000001740)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x4, 0xfffffffc, 0x40, @dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8, 0x700, 0x2, 0xc}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0x13, &(0x7f00000017c0)=@raw=[@jmp={0x5, 0x1, 0x3, 0x0, 0x3, 0x20, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x0, 0x5, 0x9, 0x1, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x4c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x50}], 0x0, 0xc, 0x68, &(0x7f0000001900)=""/104, 0x41100, 0x10, '\x00', r4, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40)={0x4, 0xb, 0x559, 0x7f}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80), 0x10, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0xfc, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c80)=ANY=[@ANYBLOB="24000000190015012bbd708f0b0f2d00021880040000c8000010000008000100ac1414001ad6e752296bb5"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r8, &(0x7f0000001880), 0x10) bind$can_raw(r8, &(0x7f0000000080)={0x1d, r9}, 0x10) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001b80)={0xf8, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x89, 0x5b}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x90, 0xbe, "37a44964db56580f52f1b2667ae12d37de6df552bd11e44c3954d69837c67eba57a49e470372b6946cb2e54c2f172fcc759d0385c0838fce5355ae11428444b4f508f8990d9fec69c9126cab029a48c5013b402e342c9b94b83f6cd10fad3b4ff0172cf7441a7e435a892798582ca2b19b5bbdbc3a6f22ce0de1fcd3cf0ec0c731f2e3d34ebee39f7c8a894d"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9}}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1c, 0x13, [{0x30, 0x1}, {0x9}, {0x4}, {0x4}, {0x1, 0x1}, {0xc, 0x1}, {0x36}, {0x9}, {0x9}, {}, {0x16, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x24, 0x1}, {0xc}, {0x1b}, {0xc, 0x1}, {0x0, 0x1}, {0x48}, {0x18, 0x1}, {0x6, 0x1}, {0x48, 0x1}, {0x12, 0x1}, {0x3, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) ioctl$USBDEVFS_BULK(r6, 0x5523, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x6}, {0xd}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) 381.266417ms ago: executing program 0 (id=1232): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 245.010289ms ago: executing program 5 (id=1233): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) nanosleep(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600640000014060020010000000000000000000000000001fe800000000000004fc377a589cf59fbc098665c16ab2c2d96eb32392c5b5dfe1beb031ce7b5db163d473642460ce791c6bb3828cd675cca", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_usb_connect$hid(0x2, 0xfffffe85, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="997425bd7000fbdbdf251500000060000180140001"], 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="588addb04cdce416", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f00000004c0), 0xc, &(0x7f00000003c0)={&(0x7f0000001040)=@deltaction={0xd0, 0x31, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x3fff, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x996}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4028089}, 0x20068884) 152.209227ms ago: executing program 6 (id=1234): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 58.819705ms ago: executing program 0 (id=1235): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000004c0), 0xc, &(0x7f00000003c0)={&(0x7f0000001040)=@deltaction={0xd0, 0x31, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x3fff, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x996}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4028089}, 0x20068884) 830.36µs ago: executing program 0 (id=1236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_getoverrun(r2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = io_uring_setup(0x3dd8, &(0x7f0000000040)={0x0, 0x2b1a, 0x80, 0x1, 0xfc}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x28) 0s ago: executing program 0 (id=1237): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0x23) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, &(0x7f0000000740)="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", 0xff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000080), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r0}, &(0x7f0000000400), &(0x7f0000001740)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x4, 0xfffffffc, 0x40, @dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8, 0x700, 0x2, 0xc}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0x13, &(0x7f00000017c0)=@raw=[@jmp={0x5, 0x1, 0x3, 0x0, 0x3, 0x20, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x0, 0x5, 0x9, 0x1, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x4c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x50}], 0x0, 0xc, 0x68, &(0x7f0000001900)=""/104, 0x41100, 0x10, '\x00', r4, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40)={0x4, 0xb, 0x559, 0x7f}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80), 0x10, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0xfc, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c80)=ANY=[@ANYBLOB="24000000190015012bbd708f0b0f2d00021880040000c8000010000008000100ac1414001ad6e752296bb5"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000001880), 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r8}, 0x10) ioctl$USBDEVFS_BULK(r6, 0x5523, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x6}, {0xd}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) kernel console output (not intermixed with test programs): 1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 79.470515][ T5697] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 79.482335][ T5705] syz.1.665: attempt to access beyond end of device [ 79.482335][ T5705] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 79.495915][ T5705] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 79.504904][ T5705] syz.1.665: attempt to access beyond end of device [ 79.504904][ T5705] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 79.519195][ T5705] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 79.556947][ T5720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.569220][ T5720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.634992][ T5726] netlink: 'syz.1.673': attribute type 13 has an invalid length. [ 79.642831][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 79.806197][ T5743] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.819168][ T5743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5743 comm=syz.0.681 [ 79.853131][ T5745] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 79.882573][ T5748] EXT4-fs: Ignoring removed bh option [ 79.888222][ T5748] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 79.898419][ T5748] EXT4-fs (loop3): 1 truncate cleaned up [ 79.904960][ T5745] loop4: p4 < > [ 79.905141][ T5748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.922149][ T5746] serio: Serial port ttyS3 [ 80.005638][ T5756] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 80.006027][ T5756] EXT4-fs (loop2): invalid journal inode [ 80.022729][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.024112][ T5756] EXT4-fs (loop2): can't get journal size [ 80.052498][ T5756] EXT4-fs (loop2): 1 truncate cleaned up [ 80.065195][ T5756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.078294][ T5761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.095714][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.111067][ T5761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.123644][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 80.123691][ T29] audit: type=1326 audit(1767966744.679:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 80.123743][ T29] audit: type=1326 audit(1767966744.679:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 80.123769][ T29] audit: type=1326 audit(1767966744.679:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 80.123840][ T29] audit: type=1326 audit(1767966744.679:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 80.123868][ T29] audit: type=1326 audit(1767966744.679:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 80.123895][ T29] audit: type=1326 audit(1767966744.679:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 80.123922][ T29] audit: type=1326 audit(1767966744.679:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 80.123950][ T29] audit: type=1326 audit(1767966744.679:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 80.124024][ T29] audit: type=1326 audit(1767966744.679:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 80.124051][ T29] audit: type=1326 audit(1767966744.679:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5762 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 80.366887][ T5761] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.386784][ T5761] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.687: iget: bad i_size value: 2533274857506816 [ 80.404183][ T5761] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.687: iget: bad i_size value: 2533274857506816 [ 80.418264][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 80.455780][ T5772] serio: Serial port ttyS3 [ 80.575217][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.602849][ T5782] netlink: 'syz.0.694': attribute type 39 has an invalid length. [ 80.765529][ T5797] ISOFS: Unable to identify CD-ROM format. [ 80.812781][ T5799] FAULT_INJECTION: forcing a failure. [ 80.812781][ T5799] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.826558][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: syz.0.699 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.826582][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.826629][ T5799] Call Trace: [ 80.826635][ T5799] [ 80.826642][ T5799] __dump_stack+0x1d/0x30 [ 80.826688][ T5799] dump_stack_lvl+0x95/0xd0 [ 80.826711][ T5799] dump_stack+0x15/0x1b [ 80.826732][ T5799] should_fail_ex+0x265/0x280 [ 80.826756][ T5799] should_fail+0xb/0x20 [ 80.826837][ T5799] should_fail_usercopy+0x1a/0x20 [ 80.826862][ T5799] _copy_from_user+0x1c/0xb0 [ 80.826891][ T5799] __sys_bpf+0x183/0x7c0 [ 80.826918][ T5799] __x64_sys_bpf+0x41/0x50 [ 80.826950][ T5799] x64_sys_call+0x28e1/0x3000 [ 80.826971][ T5799] do_syscall_64+0xca/0x2b0 [ 80.827075][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.827112][ T5799] RIP: 0033:0x7f32fb11f749 [ 80.827126][ T5799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.827142][ T5799] RSP: 002b:00007f32f9b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.827159][ T5799] RAX: ffffffffffffffda RBX: 00007f32fb375fa0 RCX: 00007f32fb11f749 [ 80.827171][ T5799] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 80.827190][ T5799] RBP: 00007f32f9b87090 R08: 0000000000000000 R09: 0000000000000000 [ 80.827203][ T5799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.827225][ T5799] R13: 00007f32fb376038 R14: 00007f32fb375fa0 R15: 00007ffcc5eade58 [ 80.827244][ T5799] [ 81.362791][ T5820] pimreg: entered allmulticast mode [ 81.381705][ T5819] pimreg: left allmulticast mode [ 81.463414][ T5825] netlink: 'syz.0.708': attribute type 12 has an invalid length. [ 81.542982][ T5832] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 81.565432][ T5834] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.710' sets config #0 [ 81.589661][ T5834] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.710' sets config #1 [ 81.600566][ T5832] loop1: p4 < > [ 82.173076][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'. [ 82.334879][ T5860] set_capacity_and_notify: 10 callbacks suppressed [ 82.334896][ T5860] loop2: detected capacity change from 0 to 128 [ 82.376920][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 82.674168][ T5866] loop0: detected capacity change from 0 to 128 [ 82.708783][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 82.796274][ T5864] syz.2.719: attempt to access beyond end of device [ 82.796274][ T5864] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 82.810649][ T5864] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 82.883121][ T5864] syz.2.719: attempt to access beyond end of device [ 82.883121][ T5864] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 82.896747][ T5864] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 82.912054][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 82.937942][ T5872] vlan2: entered allmulticast mode [ 82.950186][ T5872] dummy0: entered allmulticast mode [ 82.997133][ T5869] syz.0.720: attempt to access beyond end of device [ 82.997133][ T5869] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 83.010745][ T5869] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 83.023706][ T5866] syz.0.720: attempt to access beyond end of device [ 83.023706][ T5866] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 83.033052][ T5874] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.722' sets config #0 [ 83.037278][ T5866] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 83.070963][ T5874] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.722' sets config #1 [ 83.176241][ T5883] loop2: detected capacity change from 0 to 128 [ 83.225469][ T5887] FAULT_INJECTION: forcing a failure. [ 83.225469][ T5887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.239233][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: syz.2.727 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.239265][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.239279][ T5887] Call Trace: [ 83.239286][ T5887] [ 83.239345][ T5887] __dump_stack+0x1d/0x30 [ 83.239371][ T5887] dump_stack_lvl+0x95/0xd0 [ 83.239473][ T5887] dump_stack+0x15/0x1b [ 83.239491][ T5887] should_fail_ex+0x265/0x280 [ 83.239512][ T5887] should_fail+0xb/0x20 [ 83.239612][ T5887] should_fail_usercopy+0x1a/0x20 [ 83.239636][ T5887] copy_fpstate_to_sigframe+0x628/0x7d0 [ 83.239662][ T5887] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 83.239690][ T5887] ? x86_task_fpu+0x36/0x60 [ 83.239753][ T5887] get_sigframe+0x34d/0x490 [ 83.239778][ T5887] ? get_signal+0xdc7/0xf70 [ 83.239805][ T5887] x64_setup_rt_frame+0xa8/0x580 [ 83.239855][ T5887] arch_do_signal_or_restart+0x24c/0x450 [ 83.239884][ T5887] exit_to_user_mode_loop+0x6a/0x740 [ 83.239909][ T5887] do_syscall_64+0x1dd/0x2b0 [ 83.239946][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.240063][ T5887] RIP: 0033:0x7fe36caef747 [ 83.240076][ T5887] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 83.240091][ T5887] RSP: 002b:00007fe36b54f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 83.240108][ T5887] RAX: 0000000000000116 RBX: 00007fe36cd45fa0 RCX: 00007fe36caef749 [ 83.240157][ T5887] RDX: 0000000000000001 RSI: 0000200000001280 RDI: 0000000000000003 [ 83.240172][ T5887] RBP: 00007fe36b54f090 R08: 0000000000000000 R09: 0000000000000000 [ 83.240184][ T5887] R10: 1000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.240196][ T5887] R13: 00007fe36cd46038 R14: 00007fe36cd45fa0 R15: 00007ffdc7acf968 [ 83.240213][ T5887] [ 83.447927][ T5895] loop2: detected capacity change from 0 to 128 [ 83.496752][ T5899] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 83.534248][ T5899] loop0: detected capacity change from 0 to 2048 [ 83.542860][ T5900] mmap: syz.2.731 (5900) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.617842][ T5901] loop2: detected capacity change from 0 to 512 [ 83.631037][ T5899] loop0: p4 < > [ 83.634606][ T5908] loop3: detected capacity change from 0 to 512 [ 83.642141][ T5901] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 83.650349][ T5901] EXT4-fs (loop2): orphan cleanup on readonly fs [ 83.654165][ T5908] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 83.661515][ T5901] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.731: Failed to acquire dquot type 1 [ 83.671523][ T5908] EXT4-fs (loop3): mount failed [ 83.689184][ T5901] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.731: bg 0: block 40: padding at end of block bitmap is not set [ 83.704017][ T5901] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 83.714751][ T5901] EXT4-fs (loop2): 1 truncate cleaned up [ 83.720887][ T5901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.811881][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 83.821351][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 83.837223][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.852914][ T5918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.862060][ T5918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.925838][ T5921] netlink: 'syz.2.734': attribute type 13 has an invalid length. [ 83.935880][ T5923] netlink: 'syz.4.735': attribute type 21 has an invalid length. [ 83.943698][ T5923] netlink: 132 bytes leftover after parsing attributes in process `syz.4.735'. [ 83.998540][ T5929] netlink: 72 bytes leftover after parsing attributes in process `syz.4.737'. [ 84.014084][ T5931] loop1: detected capacity change from 0 to 128 [ 84.035735][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 84.212977][ T5931] syz.1.738: attempt to access beyond end of device [ 84.212977][ T5931] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 84.226708][ T5931] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 84.235979][ T5934] syz.1.738: attempt to access beyond end of device [ 84.235979][ T5934] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 84.249557][ T5934] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 84.258420][ T5934] syz.1.738: attempt to access beyond end of device [ 84.258420][ T5934] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 84.272492][ T5934] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 84.305780][ T5936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.315711][ T5936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.383274][ T5943] netlink: 'syz.0.739': attribute type 13 has an invalid length. [ 84.749359][ T5951] loop4: detected capacity change from 0 to 512 [ 84.786504][ T5951] EXT4-fs: test_dummy_encryption option not supported [ 85.061754][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.744'. [ 85.247906][ T5961] netlink: 'syz.1.747': attribute type 21 has an invalid length. [ 85.360858][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 85.360871][ T29] audit: type=1326 audit(1767966749.909:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5948 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 85.391742][ T29] audit: type=1326 audit(1767966749.909:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5948 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 85.744185][ T5972] loop0: detected capacity change from 0 to 128 [ 85.804345][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.812867][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.840587][ T5983] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 85.862653][ T5985] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 85.877615][ T5985] EXT4-fs (loop0): mount failed [ 85.886654][ T5989] netlink: 'syz.1.756': attribute type 13 has an invalid length. [ 85.936969][ T29] audit: type=1326 audit(1767966750.509:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fb11f749 code=0x7ffc0000 [ 85.960989][ T29] audit: type=1326 audit(1767966750.509:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f32fb11f749 code=0x7ffc0000 [ 85.984419][ T29] audit: type=1326 audit(1767966750.509:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.0.758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32fb11f749 code=0x0 [ 86.018766][ T29] audit: type=1400 audit(1767966750.589:3034): avc: denied { shutdown } for pid=5982 comm="syz.2.757" lport=37892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.060548][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.068969][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.133766][ T5996] netlink: 'syz.2.759': attribute type 13 has an invalid length. [ 86.455006][ T5998] syz.3.760: attempt to access beyond end of device [ 86.455006][ T5998] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 86.469053][ T5998] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 86.477838][ T6001] syz.3.760: attempt to access beyond end of device [ 86.477838][ T6001] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 86.491953][ T6001] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 86.504823][ T6001] syz.3.760: attempt to access beyond end of device [ 86.504823][ T6001] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 86.518438][ T6001] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 86.727596][ T29] audit: type=1400 audit(1767966751.299:3035): avc: denied { mounton } for pid=6026 comm="syz.0.770" path="/163/file0" dev="tmpfs" ino=889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.728457][ T6029] FAULT_INJECTION: forcing a failure. [ 86.728457][ T6029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.764839][ T6029] CPU: 0 UID: 0 PID: 6029 Comm: syz.1.771 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.764890][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.764903][ T6029] Call Trace: [ 86.764988][ T6029] [ 86.764996][ T6029] __dump_stack+0x1d/0x30 [ 86.765023][ T6029] dump_stack_lvl+0x95/0xd0 [ 86.765042][ T6029] dump_stack+0x15/0x1b [ 86.765062][ T6029] should_fail_ex+0x265/0x280 [ 86.765162][ T6029] should_fail+0xb/0x20 [ 86.765181][ T6029] should_fail_usercopy+0x1a/0x20 [ 86.765206][ T6029] _copy_from_user+0x1c/0xb0 [ 86.765249][ T6029] __sys_bpf+0x183/0x7c0 [ 86.765276][ T6029] __x64_sys_bpf+0x41/0x50 [ 86.765364][ T6029] x64_sys_call+0x28e1/0x3000 [ 86.765391][ T6029] do_syscall_64+0xca/0x2b0 [ 86.765425][ T6029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.765478][ T6029] RIP: 0033:0x7fa34933f749 [ 86.765493][ T6029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.765509][ T6029] RSP: 002b:00007fa347da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.765529][ T6029] RAX: ffffffffffffffda RBX: 00007fa349595fa0 RCX: 00007fa34933f749 [ 86.765593][ T6029] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 86.765606][ T6029] RBP: 00007fa347da7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.765618][ T6029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.765631][ T6029] R13: 00007fa349596038 R14: 00007fa349595fa0 R15: 00007ffdef0450e8 [ 86.765648][ T6029] [ 86.772819][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.835984][ T6036] veth0: entered promiscuous mode [ 86.858287][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.877787][ T6036] veth0: entered allmulticast mode [ 86.930138][ T29] audit: type=1400 audit(1767966751.499:3036): avc: denied { create } for pid=6042 comm="syz.1.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.979347][ T29] audit: type=1400 audit(1767966751.509:3037): avc: denied { ioctl } for pid=6042 comm="syz.1.775" path="socket:[14079]" dev="sockfs" ino=14079 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 87.038518][ T6050] netlink: 'syz.2.777': attribute type 21 has an invalid length. [ 87.086565][ T6046] netlink: 'syz.3.772': attribute type 13 has an invalid length. [ 87.133174][ T6058] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 87.152202][ T6058] EXT4-fs (loop2): mount failed [ 87.220223][ T29] audit: type=1326 audit(1767966751.799:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36caef749 code=0x7ffc0000 [ 87.319709][ T6033] syz.4.773: attempt to access beyond end of device [ 87.319709][ T6033] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 87.333288][ T6033] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 87.343329][ T6033] syz.4.773: attempt to access beyond end of device [ 87.343329][ T6033] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 87.356966][ T6033] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 87.385541][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.394621][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.418022][ T6081] FAULT_INJECTION: forcing a failure. [ 87.418022][ T6081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.438058][ T6081] CPU: 1 UID: 0 PID: 6081 Comm: syz.0.786 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.438137][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.438145][ T6081] Call Trace: [ 87.438149][ T6081] [ 87.438153][ T6081] __dump_stack+0x1d/0x30 [ 87.438169][ T6081] dump_stack_lvl+0x95/0xd0 [ 87.438260][ T6081] dump_stack+0x15/0x1b [ 87.438271][ T6081] should_fail_ex+0x265/0x280 [ 87.438371][ T6081] should_fail+0xb/0x20 [ 87.438382][ T6081] should_fail_usercopy+0x1a/0x20 [ 87.438399][ T6081] strncpy_from_user+0x27/0x260 [ 87.438416][ T6081] ? rb_insert_color+0x71/0x2b0 [ 87.438510][ T6081] path_getxattrat+0xab/0x2a0 [ 87.438533][ T6081] __x64_sys_fgetxattr+0x59/0x70 [ 87.438547][ T6081] x64_sys_call+0x1592/0x3000 [ 87.438561][ T6081] do_syscall_64+0xca/0x2b0 [ 87.438583][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.438595][ T6081] RIP: 0033:0x7f32fb11f749 [ 87.438605][ T6081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.438615][ T6081] RSP: 002b:00007f32f9b87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 87.438629][ T6081] RAX: ffffffffffffffda RBX: 00007f32fb375fa0 RCX: 00007f32fb11f749 [ 87.438653][ T6081] RDX: 0000200000000580 RSI: 0000200000000400 RDI: 0000000000000005 [ 87.438666][ T6081] RBP: 00007f32f9b87090 R08: 0000000000000000 R09: 0000000000000000 [ 87.438678][ T6081] R10: 000000000000007a R11: 0000000000000246 R12: 0000000000000001 [ 87.438689][ T6081] R13: 00007f32fb376038 R14: 00007f32fb375fa0 R15: 00007ffcc5eade58 [ 87.438706][ T6081] [ 87.461910][ T6082] netlink: 'syz.4.785': attribute type 13 has an invalid length. [ 87.491101][ T6084] tipc: Started in network mode [ 87.617894][ T6084] tipc: Node identity 4, cluster identity 4711 [ 87.624045][ T6084] tipc: Node number set to 4 [ 87.656812][ T6088] netlink: 'syz.0.789': attribute type 21 has an invalid length. [ 87.664862][ T6088] __nla_validate_parse: 14 callbacks suppressed [ 87.664908][ T6088] netlink: 132 bytes leftover after parsing attributes in process `syz.0.789'. [ 87.710477][ T6093] FAULT_INJECTION: forcing a failure. [ 87.710477][ T6093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.723655][ T6093] CPU: 1 UID: 0 PID: 6093 Comm: syz.3.791 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.723734][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.723745][ T6093] Call Trace: [ 87.723752][ T6093] [ 87.723760][ T6093] __dump_stack+0x1d/0x30 [ 87.723786][ T6093] dump_stack_lvl+0x95/0xd0 [ 87.723872][ T6093] dump_stack+0x15/0x1b [ 87.723892][ T6093] should_fail_ex+0x265/0x280 [ 87.723931][ T6093] should_fail+0xb/0x20 [ 87.723951][ T6093] should_fail_usercopy+0x1a/0x20 [ 87.723973][ T6093] _copy_from_user+0x1c/0xb0 [ 87.723996][ T6093] ___sys_sendmsg+0xc1/0x1d0 [ 87.724139][ T6093] __x64_sys_sendmsg+0xd4/0x160 [ 87.724193][ T6093] x64_sys_call+0x17ba/0x3000 [ 87.724214][ T6093] do_syscall_64+0xca/0x2b0 [ 87.724247][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.724290][ T6093] RIP: 0033:0x7fd5ed76f749 [ 87.724304][ T6093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.724319][ T6093] RSP: 002b:00007fd5ec1cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.724357][ T6093] RAX: ffffffffffffffda RBX: 00007fd5ed9c5fa0 RCX: 00007fd5ed76f749 [ 87.724376][ T6093] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 87.724390][ T6093] RBP: 00007fd5ec1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 87.724451][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.724462][ T6093] R13: 00007fd5ed9c6038 R14: 00007fd5ed9c5fa0 R15: 00007fff8ee45b28 [ 87.724481][ T6093] [ 87.900673][ T6098] tipc: Started in network mode [ 87.905548][ T6098] tipc: Node identity 4, cluster identity 4711 [ 87.907339][ T6101] set_capacity_and_notify: 6 callbacks suppressed [ 87.907366][ T6101] loop0: detected capacity change from 0 to 128 [ 87.912389][ T6098] tipc: Node number set to 4 [ 87.948070][ T6105] loop1: detected capacity change from 0 to 128 [ 88.009850][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 88.091415][ T6114] FAULT_INJECTION: forcing a failure. [ 88.091415][ T6114] name failslab, interval 1, probability 0, space 0, times 0 [ 88.104142][ T6114] CPU: 0 UID: 0 PID: 6114 Comm: syz.3.799 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.104269][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.104282][ T6114] Call Trace: [ 88.104368][ T6114] [ 88.104375][ T6114] __dump_stack+0x1d/0x30 [ 88.104397][ T6114] dump_stack_lvl+0x95/0xd0 [ 88.104419][ T6114] dump_stack+0x15/0x1b [ 88.104467][ T6114] should_fail_ex+0x265/0x280 [ 88.104489][ T6114] should_failslab+0x8c/0xb0 [ 88.104594][ T6114] kmem_cache_alloc_noprof+0x69/0x4b0 [ 88.104617][ T6114] ? audit_log_start+0x342/0x720 [ 88.104640][ T6114] audit_log_start+0x342/0x720 [ 88.104718][ T6114] ? kstrtouint+0x76/0xc0 [ 88.104741][ T6114] audit_seccomp+0x48/0x100 [ 88.104772][ T6114] ? __seccomp_filter+0x832/0x1260 [ 88.104806][ T6114] __seccomp_filter+0x843/0x1260 [ 88.104886][ T6114] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 88.104937][ T6114] ? vfs_write+0x7e8/0x960 [ 88.104959][ T6114] __secure_computing+0x82/0x150 [ 88.104986][ T6114] syscall_trace_enter+0xcf/0x1e0 [ 88.105013][ T6114] do_syscall_64+0xa4/0x2b0 [ 88.105128][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.105148][ T6114] RIP: 0033:0x7fd5ed76f749 [ 88.105161][ T6114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.105178][ T6114] RSP: 002b:00007fd5ec1ced68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 88.105278][ T6114] RAX: ffffffffffffffda RBX: 0000000000004097 RCX: 00007fd5ed76f749 [ 88.105292][ T6114] RDX: 00007fd5ec1cedec RSI: 0000000000000000 RDI: 00007fd5ed7f4960 [ 88.105310][ T6114] RBP: 00002000000040c0 R08: 00007fd5ec1ceb07 R09: 0000000000000000 [ 88.105325][ T6114] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 88.105351][ T6114] R13: 00007fd5ec1cedec R14: 00007fd5ec1cedf0 R15: 00007fff8ee45b28 [ 88.105372][ T6114] [ 88.336395][ T6114] loop3: detected capacity change from 0 to 32768 [ 88.346266][ T6120] netlink: 132 bytes leftover after parsing attributes in process `syz.4.801'. [ 88.378134][ T6111] syz.1.796: attempt to access beyond end of device [ 88.378134][ T6111] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 88.380023][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.392528][ T6111] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 88.410812][ T6114] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 88.421054][ T6111] syz.1.796: attempt to access beyond end of device [ 88.421054][ T6111] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 88.422920][ T6114] loop3: p1 start 460800 is beyond EOD, [ 88.434680][ T6111] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 88.449037][ T6114] truncated [ 88.453523][ T6114] loop3: p2 size 83886080 extends beyond EOD, truncated [ 88.465932][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.486466][ T6108] loop0: detected capacity change from 0 to 32768 [ 88.493414][ T6114] loop3: p5 start 460800 is beyond EOD, truncated [ 88.493431][ T6114] loop3: p6 size 83886080 extends beyond EOD, truncated [ 88.530379][ T6108] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 88.540122][ T6108] loop0: p1 start 460800 is beyond EOD, truncated [ 88.546559][ T6108] loop0: p2 size 83886080 extends beyond EOD, truncated [ 88.567469][ T6108] loop0: p5 start 460800 is beyond EOD, truncated [ 88.573995][ T6108] loop0: p6 size 83886080 extends beyond EOD, truncated [ 88.591038][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 88.603176][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 88.695421][ T6126] loop1: detected capacity change from 0 to 32768 [ 88.751011][ T6126] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 88.756258][ T6126] loop1: p1 start 460800 is beyond EOD, truncated [ 88.756493][ T6141] loop4: detected capacity change from 0 to 512 [ 88.762744][ T6126] loop1: p2 size 83886080 extends beyond EOD, truncated [ 88.764036][ T6126] loop1: p5 start 460800 is beyond EOD, truncated [ 88.783292][ T6126] loop1: p6 size 83886080 extends beyond EOD, truncated [ 88.815341][ T6141] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 88.830438][ T6141] EXT4-fs (loop4): mount failed [ 88.969486][ T6155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6155 comm=syz.1.811 [ 89.090774][ T6158] program syz.1.811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.141762][ T6162] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.813' sets config #1 [ 89.319873][ T6172] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.818' sets config #1 [ 89.439720][ T6178] loop3: detected capacity change from 0 to 128 [ 89.541275][ T6186] netlink: 96 bytes leftover after parsing attributes in process `syz.2.823'. [ 89.562717][ T6187] loop3: detected capacity change from 0 to 2048 [ 89.621211][ T6187] loop3: p4 < > [ 89.720278][ T6192] ALSA: seq fatal error: cannot create timer (-22) [ 89.774183][ T6194] loop1: detected capacity change from 0 to 512 [ 89.791348][ T6194] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 89.811096][ T6194] EXT4-fs (loop1): mount failed [ 89.826311][ T6198] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.826' sets config #1 [ 89.854092][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.863575][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.928901][ T6204] validate_nla: 2 callbacks suppressed [ 89.928912][ T6204] netlink: 'syz.2.827': attribute type 13 has an invalid length. [ 89.987784][ T6209] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.830' sets config #1 [ 90.020873][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 90.031191][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 90.194634][ T6224] netlink: 'syz.4.836': attribute type 21 has an invalid length. [ 90.203540][ T6224] netlink: 132 bytes leftover after parsing attributes in process `syz.4.836'. [ 90.229964][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.238630][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.305870][ T6228] netlink: 'syz.4.837': attribute type 13 has an invalid length. [ 90.393522][ T6235] loop3: detected capacity change from 0 to 2048 [ 90.439834][ T6235] loop3: p4 < > [ 90.633197][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 90.633212][ T29] audit: type=1326 audit(1767966755.209:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 90.663819][ T29] audit: type=1326 audit(1767966755.209:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 90.687692][ T29] audit: type=1326 audit(1767966755.209:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 90.711659][ T29] audit: type=1326 audit(1767966755.209:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 90.735030][ T29] audit: type=1326 audit(1767966755.209:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 90.758994][ T29] audit: type=1326 audit(1767966755.209:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 90.782977][ T29] audit: type=1326 audit(1767966755.209:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 90.806383][ T29] audit: type=1326 audit(1767966755.209:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 90.830502][ T29] audit: type=1326 audit(1767966755.209:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3493365e7 code=0x7ffc0000 [ 90.853715][ T29] audit: type=1326 audit(1767966755.209:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6241 comm="syz.1.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3492db829 code=0x7ffc0000 [ 90.911924][ T6246] netlink: 72 bytes leftover after parsing attributes in process `syz.1.842'. [ 91.157835][ T6254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.191103][ T6254] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 91.199271][ T6254] System zones: 0-1, 3-12 [ 91.204220][ T6254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.217486][ T6254] EXT4-fs error (device loop4): __ext4_remount:6789: comm syz.4.846: Abort forced by user [ 91.228306][ T6254] EXT4-fs (loop4): Remounting filesystem read-only [ 91.234890][ T6254] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 91.342148][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.406373][ T6263] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.849' sets config #1 [ 91.762087][ T6268] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 91.866223][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.885572][ T6268] EXT4-fs (loop1): mount failed [ 91.930545][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.032922][ T6278] netlink: 'syz.0.852': attribute type 13 has an invalid length. [ 92.211785][ T6287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.351546][ T6301] loop3: p4 < > [ 92.445699][ T6302] syz.4.856: attempt to access beyond end of device [ 92.445699][ T6302] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 92.459312][ T6302] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 92.468780][ T6302] syz.4.856: attempt to access beyond end of device [ 92.468780][ T6302] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 92.483121][ T6302] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 92.574028][ T6308] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.860' sets config #0 [ 92.595886][ T6310] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.861' sets config #1 [ 93.102986][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.471121][ T6330] __nla_validate_parse: 3 callbacks suppressed [ 93.471135][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 93.506162][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 93.520972][ T6336] set_capacity_and_notify: 7 callbacks suppressed [ 93.520987][ T6336] loop4: detected capacity change from 0 to 164 [ 93.521361][ T6335] loop1: detected capacity change from 0 to 128 [ 93.541687][ T6336] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 93.573829][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 93.583292][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 93.594117][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 93.603329][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'. [ 93.644973][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.660377][ T6342] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.872' sets config #0 [ 93.676870][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.700945][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.716420][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.733164][ T6344] loop1: detected capacity change from 0 to 2048 [ 93.755561][ T6346] netlink: 'syz.4.874': attribute type 13 has an invalid length. [ 93.764295][ T6344] loop1: p4 < > [ 93.836564][ T6352] netlink: 'syz.3.873': attribute type 13 has an invalid length. [ 93.869606][ T6363] loop2: detected capacity change from 0 to 1024 [ 93.884211][ T6363] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.909948][ T6363] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 93.918128][ T6363] System zones: 0-1, 3-12 [ 93.924145][ T6363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.939057][ T6363] EXT4-fs error (device loop2): __ext4_remount:6789: comm syz.2.879: Abort forced by user [ 93.950337][ T6363] EXT4-fs (loop2): Remounting filesystem read-only [ 93.956829][ T6363] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 94.158127][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.376572][ T6374] tc_dump_action: action bad kind [ 94.575401][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 94.588830][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 94.672808][ T6389] program syz.4.885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.758530][ T6391] loop1: detected capacity change from 0 to 512 [ 94.766557][ T6391] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.779657][ T6391] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.791908][ T6391] EXT4-fs (loop1): 1 truncate cleaned up [ 94.798152][ T6391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.834074][ T6398] netlink: 'syz.3.890': attribute type 21 has an invalid length. [ 94.842033][ T6398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.890'. [ 94.851257][ T6391] infiniband syz!: set down [ 94.851274][ T6391] infiniband syz!: added team_slave_0 [ 94.860340][ T6391] RDS/IB: syz!: added [ 94.866488][ T6391] smc: adding ib device syz! with port count 1 [ 94.872808][ T6391] smc: ib device syz! port 1 has no pnetid [ 95.001434][ T6404] loop3: detected capacity change from 0 to 128 [ 95.036418][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 95.071238][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.245308][ T6404] syz.3.892: attempt to access beyond end of device [ 95.245308][ T6404] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 95.260708][ T6404] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 95.276480][ T6409] syz.3.892: attempt to access beyond end of device [ 95.276480][ T6409] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 95.291458][ T6409] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 95.300912][ T6404] syz.3.892: attempt to access beyond end of device [ 95.300912][ T6404] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 95.314508][ T6404] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 95.429309][ T6420] loop0: detected capacity change from 0 to 128 [ 95.670030][ T6434] netlink: 'syz.0.902': attribute type 21 has an invalid length. [ 95.924493][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 95.924507][ T29] audit: type=1400 audit(1767966760.499:3655): avc: denied { ioctl } for pid=6438 comm="syz.0.904" path="socket:[16008]" dev="sockfs" ino=16008 ioctlcmd=0x48e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.581327][ T6450] program syz.3.906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.945623][ T6461] tc_dump_action: action bad kind [ 97.037609][ T6465] loop1: detected capacity change from 0 to 128 [ 97.130612][ T6467] loop1: detected capacity change from 0 to 1024 [ 97.156234][ T6467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.157077][ T6469] netlink: 'syz.2.914': attribute type 21 has an invalid length. [ 97.192644][ T6467] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 97.209054][ T6467] System zones: 0-1, 3-12 [ 97.221944][ T6467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.264183][ T6467] EXT4-fs error (device loop1): __ext4_remount:6789: comm syz.1.913: Abort forced by user [ 97.275293][ T6467] EXT4-fs (loop1): Remounting filesystem read-only [ 97.281854][ T6467] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 97.309976][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.422509][ T29] audit: type=1326 audit(1767966761.999:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 97.445879][ T29] audit: type=1326 audit(1767966761.999:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 97.469938][ T29] audit: type=1326 audit(1767966761.999:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 97.493306][ T29] audit: type=1326 audit(1767966761.999:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 97.516665][ T29] audit: type=1326 audit(1767966761.999:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 97.540652][ T29] audit: type=1326 audit(1767966761.999:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 97.564047][ T29] audit: type=1326 audit(1767966761.999:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 97.588005][ T29] audit: type=1326 audit(1767966761.999:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 97.611949][ T29] audit: type=1326 audit(1767966761.999:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa3493365e7 code=0x7ffc0000 [ 97.690592][ T6489] loop1: detected capacity change from 0 to 512 [ 97.702019][ T6489] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 97.717345][ T6489] EXT4-fs (loop1): mount failed [ 97.764621][ T6499] tc_dump_action: action bad kind [ 97.924726][ T6511] program syz.2.926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.056838][ T6514] netlink: 'syz.1.928': attribute type 21 has an invalid length. [ 98.176676][ T6527] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 98.229783][ T6527] loop3: p4 < > [ 98.477163][ T6541] tc_dump_action: action bad kind [ 98.609987][ T6543] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 98.682242][ T6545] set_capacity_and_notify: 4 callbacks suppressed [ 98.682257][ T6545] loop2: detected capacity change from 0 to 1024 [ 98.720726][ T6545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.749225][ T6543] loop4: detected capacity change from 0 to 4096 [ 98.761791][ T6545] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 98.787118][ T6543] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51142!=55237) [ 98.796717][ T6543] EXT4-fs (loop4): group descriptors corrupted! [ 98.803147][ T6545] System zones: 0-1, 3-12 [ 98.808052][ T6545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.862506][ T6545] EXT4-fs error (device loop2): __ext4_remount:6789: comm syz.2.938: Abort forced by user [ 98.908426][ T6545] EXT4-fs (loop2): Remounting filesystem read-only [ 98.915654][ T6545] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 98.999089][ T6549] __nla_validate_parse: 9 callbacks suppressed [ 98.999106][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 99.016415][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.060701][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 99.078769][ T6554] loop2: detected capacity change from 0 to 1024 [ 99.097663][ T6554] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.110689][ T6554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 99.132900][ T6554] System zones: 0-1, 3-12 [ 99.137839][ T6554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.164860][ T6554] EXT4-fs error (device loop2): __ext4_remount:6789: comm syz.2.941: Abort forced by user [ 99.176545][ T6554] EXT4-fs (loop2): Remounting filesystem read-only [ 99.183806][ T6554] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 99.235984][ T6564] netlink: 72 bytes leftover after parsing attributes in process `syz.0.945'. [ 99.274369][ T6568] loop3: detected capacity change from 0 to 128 [ 99.302510][ T6570] tc_dump_action: action bad kind [ 99.309669][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.332457][ T6574] loop2: detected capacity change from 0 to 512 [ 99.353470][ T6574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.366764][ T6574] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.401638][ T6581] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 99.419540][ T6581] loop3: detected capacity change from 0 to 2048 [ 99.461305][ T6581] loop3: p4 < > [ 99.522407][ T6584] loop1: detected capacity change from 0 to 128 [ 99.529904][ T6574] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.949: corrupted inode contents [ 99.541815][ T6574] EXT4-fs (loop2): Remounting filesystem read-only [ 99.548354][ T6574] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 99.566660][ T6586] loop1: detected capacity change from 0 to 128 [ 99.606069][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.625743][ T6590] loop2: detected capacity change from 0 to 1024 [ 99.632486][ T6590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.650534][ T6590] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 99.658644][ T6590] System zones: 0-1, 3-12 [ 99.663824][ T6590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.678284][ T6590] EXT4-fs error (device loop2): __ext4_remount:6789: comm syz.2.954: Abort forced by user [ 99.689133][ T6590] EXT4-fs (loop2): Remounting filesystem read-only [ 99.696378][ T6590] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 99.806850][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.867803][ T6606] netlink: 'syz.0.958': attribute type 21 has an invalid length. [ 99.881263][ T6606] netlink: 132 bytes leftover after parsing attributes in process `syz.0.958'. [ 100.041588][ T6616] loop2: detected capacity change from 0 to 128 [ 100.221848][ T6622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.965'. [ 100.263070][ T6626] netlink: 72 bytes leftover after parsing attributes in process `syz.3.967'. [ 100.275562][ T6622] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 100.471386][ T6628] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 100.490722][ T6628] EXT4-fs (loop2): mount failed [ 100.843931][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.970'. [ 100.871561][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.970'. [ 100.935351][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'. [ 101.106719][ T6644] netlink: 'syz.0.972': attribute type 21 has an invalid length. [ 101.125625][ T6644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.972'. [ 101.126842][ T6642] syz.1.971: attempt to access beyond end of device [ 101.126842][ T6642] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 101.148190][ T6642] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 101.158853][ T6642] syz.1.971: attempt to access beyond end of device [ 101.158853][ T6642] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 101.172447][ T6642] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 101.333158][ T6669] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 101.398727][ T6671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6671 comm=syz.2.979 [ 101.399811][ T6669] loop0: p4 < > [ 101.461648][ T6646] syz.4.973: attempt to access beyond end of device [ 101.461648][ T6646] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 101.475327][ T6646] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 101.485727][ T6646] syz.4.973: attempt to access beyond end of device [ 101.485727][ T6646] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 101.499296][ T6646] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 101.540613][ T6672] program syz.2.979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.653658][ T6677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6677 comm=syz.4.981 [ 101.718847][ T6678] program syz.4.981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.148453][ T6686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.163906][ T6686] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 102.176582][ T6686] System zones: 0-1, 3-12 [ 102.201711][ T6686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.232686][ T6686] EXT4-fs error (device loop0): __ext4_remount:6789: comm syz.0.984: Abort forced by user [ 102.262771][ T6686] EXT4-fs (loop0): Remounting filesystem read-only [ 102.269474][ T6686] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 102.278921][ T6697] netlink: 'syz.2.987': attribute type 21 has an invalid length. [ 102.334601][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.361515][ T6699] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 102.376231][ T6699] EXT4-fs (loop2): mount failed [ 102.419001][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 102.419016][ T29] audit: type=1326 audit(1767966766.989:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36caef749 code=0x7ffc0000 [ 102.449754][ T29] audit: type=1326 audit(1767966766.989:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36caef749 code=0x7ffc0000 [ 102.473318][ T29] audit: type=1326 audit(1767966766.989:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe36caef749 code=0x7ffc0000 [ 102.496821][ T29] audit: type=1326 audit(1767966766.989:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="gtp" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe36caef749 code=0x0 [ 102.551021][ T6710] sd 0:0:1:0: device reset [ 102.556767][ T29] audit: type=1326 audit(1767966767.129:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.0.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fb11f749 code=0x7ffc0000 [ 102.585441][ T29] audit: type=1326 audit(1767966767.159:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.0.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fb11f749 code=0x7ffc0000 [ 102.608925][ T29] audit: type=1326 audit(1767966767.159:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.0.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f32fb11f749 code=0x7ffc0000 [ 102.683145][ T6715] sd 0:0:1:0: device reset [ 102.800516][ T29] audit: type=1326 audit(1767966767.369:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.0.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fb11f749 code=0x7ffc0000 [ 102.824907][ T29] audit: type=1326 audit(1767966767.369:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.0.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fb11f749 code=0x7ffc0000 [ 102.860511][ T6711] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 102.865869][ T6711] loop0: p1 start 460800 is beyond EOD, truncated [ 102.872367][ T6711] loop0: p2 size 83886080 extends beyond EOD, truncated [ 102.895219][ T6711] loop0: p5 start 460800 is beyond EOD, truncated [ 102.897038][ T29] audit: type=1326 audit(1767966767.459:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.0.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f32fb11f749 code=0x7ffc0000 [ 102.901723][ T6711] loop0: p6 size 83886080 extends beyond EOD, truncated [ 103.020088][ T6715] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 103.023155][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.025424][ T6715] loop4: p1 start 460800 is beyond EOD, truncated [ 103.035356][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.040954][ T6715] loop4: p2 size 83886080 extends beyond EOD, truncated [ 103.056851][ T6715] loop4: p5 start 460800 is beyond EOD, truncated [ 103.063386][ T6715] loop4: p6 size 83886080 extends beyond EOD, truncated [ 103.128287][ T6727] netlink: 'syz.0.995': attribute type 13 has an invalid length. [ 103.145616][ T6729] netlink: 'syz.1.999': attribute type 21 has an invalid length. [ 103.178051][ T6733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.191656][ T6733] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 103.200298][ T6733] System zones: 0-1, 3-12 [ 103.205268][ T6733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.219032][ T6733] EXT4-fs error (device loop4): __ext4_remount:6789: comm syz.4.1000: Abort forced by user [ 103.234706][ T6733] EXT4-fs (loop4): Remounting filesystem read-only [ 103.241264][ T6733] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 103.258839][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.298863][ T6743] lo speed is unknown, defaulting to 1000 [ 103.304899][ T6743] lo speed is unknown, defaulting to 1000 [ 103.311026][ T6743] lo speed is unknown, defaulting to 1000 [ 103.317625][ T6743] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 103.328539][ T6743] lo speed is unknown, defaulting to 1000 [ 103.334587][ T6743] lo speed is unknown, defaulting to 1000 [ 103.340694][ T6743] lo speed is unknown, defaulting to 1000 [ 103.346575][ T6743] lo speed is unknown, defaulting to 1000 [ 103.353393][ T6743] lo speed is unknown, defaulting to 1000 [ 103.768736][ T6756] syz.3.1007: attempt to access beyond end of device [ 103.768736][ T6756] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 103.783352][ T6756] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 103.795982][ T6759] syz.3.1007: attempt to access beyond end of device [ 103.795982][ T6759] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 103.810427][ T6759] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 103.820254][ T6756] syz.3.1007: attempt to access beyond end of device [ 103.820254][ T6756] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 103.833933][ T6756] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 103.861437][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.871387][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.956027][ T6766] netlink: 'syz.0.1008': attribute type 13 has an invalid length. [ 103.969008][ T6765] FAULT_INJECTION: forcing a failure. [ 103.969008][ T6765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.982088][ T6765] CPU: 0 UID: 0 PID: 6765 Comm: syz.3.1009 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.982143][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.982154][ T6765] Call Trace: [ 103.982161][ T6765] [ 103.982169][ T6765] __dump_stack+0x1d/0x30 [ 103.982260][ T6765] dump_stack_lvl+0x95/0xd0 [ 103.982283][ T6765] dump_stack+0x15/0x1b [ 103.982304][ T6765] should_fail_ex+0x265/0x280 [ 103.982330][ T6765] should_fail+0xb/0x20 [ 103.982373][ T6765] should_fail_usercopy+0x1a/0x20 [ 103.982394][ T6765] _copy_from_user+0x1c/0xb0 [ 103.982419][ T6765] ___sys_sendmsg+0xc1/0x1d0 [ 103.982458][ T6765] __x64_sys_sendmsg+0xd4/0x160 [ 103.982518][ T6765] x64_sys_call+0x17ba/0x3000 [ 103.982543][ T6765] do_syscall_64+0xca/0x2b0 [ 103.982621][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.982644][ T6765] RIP: 0033:0x7fd5ed76f749 [ 103.982661][ T6765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.982710][ T6765] RSP: 002b:00007fd5ec1cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.982727][ T6765] RAX: ffffffffffffffda RBX: 00007fd5ed9c5fa0 RCX: 00007fd5ed76f749 [ 103.982739][ T6765] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 000000000000000c [ 103.982751][ T6765] RBP: 00007fd5ec1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 103.982765][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.982778][ T6765] R13: 00007fd5ed9c6038 R14: 00007fd5ed9c5fa0 R15: 00007fff8ee45b28 [ 103.982799][ T6765] [ 104.202591][ T6773] set_capacity_and_notify: 14 callbacks suppressed [ 104.202674][ T6773] loop1: detected capacity change from 0 to 512 [ 104.232493][ T6773] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 104.253180][ T6778] netlink: 'syz.2.1013': attribute type 21 has an invalid length. [ 104.262531][ T6773] EXT4-fs (loop1): mount failed [ 104.267624][ T6778] __nla_validate_parse: 7 callbacks suppressed [ 104.267636][ T6778] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1013'. [ 104.291964][ T6780] loop3: detected capacity change from 0 to 128 [ 104.347446][ T6783] loop3: detected capacity change from 0 to 1024 [ 104.358544][ T6783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.381757][ T6783] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 104.399435][ T6783] System zones: 0-1, 3-12 [ 104.404610][ T6783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.431512][ T6783] EXT4-fs error (device loop3): __ext4_remount:6789: comm syz.3.1015: Abort forced by user [ 104.445455][ T6783] EXT4-fs (loop3): Remounting filesystem read-only [ 104.451999][ T6783] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 104.462823][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 104.472119][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 104.481383][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.509195][ T6792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.517934][ T6792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.582885][ T6795] netlink: 'syz.3.1018': attribute type 13 has an invalid length. [ 104.645872][ T6799] loop4: detected capacity change from 0 to 128 [ 104.668890][ T6803] loop0: detected capacity change from 0 to 128 [ 104.675565][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1020'. [ 104.681004][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 104.925747][ T6799] syz.4.1020: attempt to access beyond end of device [ 104.925747][ T6799] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 104.939539][ T6799] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 104.948450][ T6799] syz.4.1020: attempt to access beyond end of device [ 104.948450][ T6799] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 104.962771][ T6799] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 104.997598][ T6807] FAULT_INJECTION: forcing a failure. [ 104.997598][ T6807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.998957][ T6803] syz.0.1021: attempt to access beyond end of device [ 104.998957][ T6803] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 105.010737][ T6807] CPU: 1 UID: 0 PID: 6807 Comm: syz.4.1022 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.010763][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.010775][ T6807] Call Trace: [ 105.010781][ T6807] [ 105.010788][ T6807] __dump_stack+0x1d/0x30 [ 105.010848][ T6807] dump_stack_lvl+0x95/0xd0 [ 105.010871][ T6807] dump_stack+0x15/0x1b [ 105.010891][ T6807] should_fail_ex+0x265/0x280 [ 105.010920][ T6807] should_fail+0xb/0x20 [ 105.010940][ T6807] should_fail_usercopy+0x1a/0x20 [ 105.010975][ T6807] _copy_from_user+0x1c/0xb0 [ 105.011002][ T6807] __sys_bpf+0x183/0x7c0 [ 105.011030][ T6807] __x64_sys_bpf+0x41/0x50 [ 105.011061][ T6807] x64_sys_call+0x28e1/0x3000 [ 105.011099][ T6807] do_syscall_64+0xca/0x2b0 [ 105.011184][ T6807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.011207][ T6807] RIP: 0033:0x7f88ba5cf749 [ 105.011223][ T6807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.011241][ T6807] RSP: 002b:00007f88b902f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.011353][ T6807] RAX: ffffffffffffffda RBX: 00007f88ba825fa0 RCX: 00007f88ba5cf749 [ 105.011367][ T6807] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 105.011380][ T6807] RBP: 00007f88b902f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.011393][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.011406][ T6807] R13: 00007f88ba826038 R14: 00007f88ba825fa0 R15: 00007fff83340e58 [ 105.011427][ T6807] [ 105.161941][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1023'. [ 105.168838][ T6803] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 105.214786][ T3481] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 105.222633][ T3481] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 105.230396][ T3481] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 105.239925][ T3481] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 105.247801][ T3481] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 105.255616][ T3481] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 105.264095][ T3481] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x1 [ 105.272631][ T3481] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 105.280384][ T3481] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 105.288099][ T3481] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 105.306261][ T3481] hid-generic 0000:0000:FFFFFFFC.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 105.333422][ T6820] loop2: detected capacity change from 0 to 128 [ 105.362050][ T6821] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 105.380511][ T6821] loop3: detected capacity change from 0 to 2048 [ 105.391837][ T6825] loop2: detected capacity change from 0 to 1024 [ 105.398689][ T6825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.421453][ T6821] loop3: p4 < > [ 105.425729][ T6825] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 105.434088][ T6825] System zones: 0-1, 3-12 [ 105.438934][ T6825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.454554][ T6825] EXT4-fs error (device loop2): __ext4_remount:6789: comm syz.2.1028: Abort forced by user [ 105.459016][ T6833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.473070][ T6825] EXT4-fs (loop2): Remounting filesystem read-only [ 105.473390][ T6833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.479671][ T6825] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 105.506778][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.525361][ T6836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.534028][ T6836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.550807][ T6840] netlink: 'syz.1.1030': attribute type 13 has an invalid length. [ 105.568476][ T6838] 9p: Bad value for 'rfdno' [ 105.585943][ T6842] loop0: detected capacity change from 0 to 128 [ 105.605556][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'. [ 105.612730][ T6845] netlink: 'syz.2.1031': attribute type 13 has an invalid length. [ 105.826288][ T6848] loop0: detected capacity change from 0 to 512 [ 105.840365][ T6848] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 105.855400][ T6848] EXT4-fs (loop0): mount failed [ 105.924240][ T6852] EXT4-fs: Ignoring removed bh option [ 105.931100][ T6852] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.941889][ T6852] EXT4-fs error (device loop4): __ext4_iget:5426: inode #15: block 1803188595: comm syz.4.1035: invalid block [ 105.953762][ T6852] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1035: couldn't read orphan inode 15 (err -117) [ 105.966653][ T6852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.986281][ T6852] syzkaller0: entered promiscuous mode [ 105.992302][ T6852] syzkaller0: entered allmulticast mode [ 105.999475][ T6852] 0: reclassify loop, rule prio 0, protocol 800 [ 106.051103][ T6852] EXT4-fs (loop4): I/O error while writing superblock [ 106.058387][ T6852] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4953: inode #11: block 7: comm syz.4.1035: unable to read itable block [ 106.072751][ T6852] EXT4-fs (loop4): I/O error while writing superblock [ 106.084151][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.092780][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.133110][ T3317] EXT4-fs error (device loop4): ext4_get_inode_loc:4968: inode #2: block 5: comm syz-executor: unable to read itable block [ 106.146543][ T3317] EXT4-fs (loop4): I/O error while writing superblock [ 106.153343][ T3317] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: IO failure [ 106.157816][ T6860] netlink: 'syz.1.1036': attribute type 13 has an invalid length. [ 106.162074][ T3317] buffer_io_error: 8 callbacks suppressed [ 106.162087][ T3317] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 106.162103][ T3317] EXT4-fs (loop4): I/O error while writing superblock [ 106.162131][ T3317] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz-executor: mark_inode_dirty error [ 106.203993][ T3317] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 106.212360][ T3317] EXT4-fs (loop4): I/O error while writing superblock [ 106.220359][ T4129] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4953: inode #2: block 5: comm kworker/u8:30: unable to read itable block [ 106.238849][ T4129] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 106.248555][ T4129] EXT4-fs (loop4): I/O error while writing superblock [ 106.263323][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.274493][ T3317] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 106.282845][ T3317] EXT4-fs (loop4): I/O error while writing superblock [ 106.348318][ T6862] lo speed is unknown, defaulting to 1000 [ 106.448475][ T6868] lo speed is unknown, defaulting to 1000 [ 106.635215][ T4120] bridge_slave_1: left allmulticast mode [ 106.640937][ T4120] bridge_slave_1: left promiscuous mode [ 106.646613][ T4120] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.675502][ T4120] bridge_slave_0: left allmulticast mode [ 106.682576][ T4120] bridge_slave_0: left promiscuous mode [ 106.688271][ T4120] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.763391][ T4120] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.773031][ T4120] bond_slave_0: left promiscuous mode [ 106.779083][ T4120] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.788172][ T4120] bond_slave_1: left promiscuous mode [ 106.794315][ T4120] $Hÿ (unregistering): Released all slaves [ 106.795498][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'. [ 106.811227][ T6878] lo speed is unknown, defaulting to 1000 [ 106.956562][ T6878] chnl_net:caif_netlink_parms(): no params data found [ 107.004346][ T4120] hsr_slave_0: left promiscuous mode [ 107.012700][ T4120] hsr_slave_1: left promiscuous mode [ 107.020000][ T4120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.027960][ T4120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.097237][ T4120] team0 (unregistering): Port device team_slave_1 removed [ 107.108425][ T4120] team0 (unregistering): Port device team_slave_0 removed [ 107.123529][ T6898] bio_check_eod: 5 callbacks suppressed [ 107.123543][ T6898] syz.0.1045: attempt to access beyond end of device [ 107.123543][ T6898] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 107.142738][ T6898] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 107.152142][ T6892] syz.0.1045: attempt to access beyond end of device [ 107.152142][ T6892] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 107.167256][ T6892] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 107.223972][ T6892] syz.0.1045: attempt to access beyond end of device [ 107.223972][ T6892] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 107.237758][ T6892] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 107.256227][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.263361][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.270749][ T6878] bridge_slave_0: entered allmulticast mode [ 107.292124][ T6878] bridge_slave_0: entered promiscuous mode [ 107.298923][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.301476][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.306092][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.322819][ T6878] bridge_slave_1: entered allmulticast mode [ 107.329292][ T6878] bridge_slave_1: entered promiscuous mode [ 107.349006][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.358848][ T6878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.369304][ T6878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.392304][ T6878] team0: Port device team_slave_0 added [ 107.400916][ T6878] team0: Port device team_slave_1 added [ 107.418602][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.425575][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.448853][ T6913] netlink: 'syz.0.1047': attribute type 13 has an invalid length. [ 107.452138][ T6878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.471042][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.474184][ T6914] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 107.477987][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.514516][ T6878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.558982][ T6878] hsr_slave_0: entered promiscuous mode [ 107.565190][ T6878] hsr_slave_1: entered promiscuous mode [ 107.571243][ T6878] debugfs: 'hsr0' already exists in 'hsr' [ 107.576960][ T6878] Cannot create hsr debugfs directory [ 107.584317][ T6914] loop2: p4 < > [ 107.590491][ T6916] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1049'. [ 107.622796][ T6919] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1050'. [ 107.656642][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 107.656654][ T29] audit: type=1400 audit(1767966772.229:3891): avc: denied { map } for pid=6920 comm="syz.1.1051" path="/187/file0" dev="tmpfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 107.739441][ T6878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.752005][ T6878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.764697][ T6878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.780900][ T6878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.822819][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.829922][ T6878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.837319][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.844422][ T6878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.879861][ T6878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.892953][ T6878] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.908337][ T4152] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.917251][ T29] audit: type=1400 audit(1767966772.499:3892): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 107.945380][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.952450][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.983563][ T6878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.005802][ T6936] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 108.022579][ T6936] EXT4-fs (loop1): mount failed [ 108.042913][ T6878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.065915][ T6946] netlink: 'syz.0.1055': attribute type 21 has an invalid length. [ 108.083073][ T29] audit: type=1326 audit(1767966772.659:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6935 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 108.117535][ T29] audit: type=1326 audit(1767966772.689:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6935 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa34933f749 code=0x7ffc0000 [ 108.142348][ T29] audit: type=1326 audit(1767966772.689:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6935 comm="syz.1.1054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa34933f749 code=0x0 [ 108.162242][ T6878] veth0_vlan: entered promiscuous mode [ 108.186586][ T6878] veth1_vlan: entered promiscuous mode [ 108.203041][ T6878] veth0_macvtap: entered promiscuous mode [ 108.211717][ T6878] veth1_macvtap: entered promiscuous mode [ 108.262758][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.274680][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.287715][ T29] audit: type=1326 audit(1767966772.849:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.2.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36caef749 code=0x7ffc0000 [ 108.312636][ T29] audit: type=1326 audit(1767966772.849:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.2.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36caef749 code=0x7ffc0000 [ 108.336221][ T29] audit: type=1326 audit(1767966772.849:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.2.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fe36caef749 code=0x7ffc0000 [ 108.361048][ T29] audit: type=1326 audit(1767966772.849:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.2.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36caef749 code=0x7ffc0000 [ 108.384438][ T29] audit: type=1326 audit(1767966772.849:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.2.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe36caef749 code=0x7ffc0000 [ 108.410731][ T4152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.431728][ T4152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.454022][ T6973] gtp calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 108.459568][ T4152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.473459][ T4152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.516590][ T6978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.537359][ T6978] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 108.556034][ T6978] System zones: 0-1, 3-12 [ 108.562805][ T6978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.592926][ T6955] syz.0.1056: attempt to access beyond end of device [ 108.592926][ T6955] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 108.606666][ T6955] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 108.607207][ T6978] EXT4-fs error (device loop5): __ext4_remount:6789: comm syz.5.1042: Abort forced by user [ 108.627408][ T6960] syz.0.1056: attempt to access beyond end of device [ 108.627408][ T6960] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 108.638764][ T6978] EXT4-fs (loop5): Remounting filesystem read-only [ 108.642537][ T6960] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 108.648345][ T6978] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 108.661090][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.675416][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.684643][ T6986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.704931][ T6986] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.718369][ T6878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.730587][ T6986] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1064: corrupted inode contents [ 108.742762][ T6986] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.1064: mark_inode_dirty error [ 108.754842][ T6986] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1064: corrupted inode contents [ 108.768008][ T6986] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1064: mark_inode_dirty error [ 108.784287][ T6986] FAULT_INJECTION: forcing a failure. [ 108.784287][ T6986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.787564][ T6996] netlink: 'syz.5.1066': attribute type 21 has an invalid length. [ 108.798211][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.2.1064 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.798241][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.798255][ T6986] Call Trace: [ 108.798261][ T6986] [ 108.798267][ T6986] __dump_stack+0x1d/0x30 [ 108.798305][ T6986] dump_stack_lvl+0x95/0xd0 [ 108.798329][ T6986] dump_stack+0x15/0x1b [ 108.798350][ T6986] should_fail_ex+0x265/0x280 [ 108.798373][ T6986] should_fail+0xb/0x20 [ 108.798393][ T6986] should_fail_usercopy+0x1a/0x20 [ 108.798436][ T6986] strncpy_from_user+0x27/0x260 [ 108.798468][ T6986] path_setxattrat+0xeb/0x310 [ 108.798585][ T6986] __x64_sys_setxattr+0x6e/0x90 [ 108.798611][ T6986] x64_sys_call+0xf1e/0x3000 [ 108.798639][ T6986] do_syscall_64+0xca/0x2b0 [ 108.798714][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.798736][ T6986] RIP: 0033:0x7fe36caef749 [ 108.798751][ T6986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.798817][ T6986] RSP: 002b:00007fe36b54f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 108.798836][ T6986] RAX: ffffffffffffffda RBX: 00007fe36cd45fa0 RCX: 00007fe36caef749 [ 108.798849][ T6986] RDX: 0000200000000440 RSI: 0000200000000000 RDI: 0000200000002a00 [ 108.798860][ T6986] RBP: 00007fe36b54f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.798873][ T6986] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 108.798924][ T6986] R13: 00007fe36cd46038 R14: 00007fe36cd45fa0 R15: 00007ffdc7acf968 [ 108.798944][ T6986] [ 108.808898][ T6993] wireguard0: entered promiscuous mode [ 108.973417][ T6993] wireguard0: entered allmulticast mode [ 108.986641][ T6988] netlink: 'syz.3.1065': attribute type 13 has an invalid length. [ 108.997980][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.016582][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.025938][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.032340][ T7003] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 109.099935][ T7003] loop1: p4 < > [ 109.111914][ T7016] netlink: 'syz.5.1070': attribute type 13 has an invalid length. [ 109.157014][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.164202][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.204463][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.232450][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.277441][ T4120] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.286717][ T7029] __nla_validate_parse: 5 callbacks suppressed [ 109.286731][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 109.287743][ T4120] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.314482][ T4120] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.323472][ T4120] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.384574][ T7032] set_capacity_and_notify: 15 callbacks suppressed [ 109.384632][ T7032] loop0: detected capacity change from 0 to 1024 [ 109.398099][ T7032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.410467][ T7032] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 109.418606][ T7032] System zones: 0-1, 3-12 [ 109.423966][ T7032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.436826][ T7032] EXT4-fs error (device loop0): __ext4_remount:6789: comm syz.0.1077: Abort forced by user [ 109.447030][ T7032] EXT4-fs (loop0): Remounting filesystem read-only [ 109.454141][ T7032] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 109.469806][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.591736][ T7044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7044 comm=syz.0.1078 [ 109.655765][ T7046] program syz.0.1078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.848419][ T7062] loop3: detected capacity change from 0 to 128 [ 109.885783][ T7066] loop3: detected capacity change from 0 to 1024 [ 109.892972][ T7066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.911360][ T7066] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 109.919656][ T7066] System zones: 0-1, 3-12 [ 109.924643][ T7066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.938231][ T7066] EXT4-fs error (device loop3): __ext4_remount:6789: comm syz.3.1088: Abort forced by user [ 109.948518][ T7066] EXT4-fs (loop3): Remounting filesystem read-only [ 109.955146][ T7066] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 109.974271][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.075944][ T7077] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1091'. [ 110.108386][ T7081] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1093'. [ 110.142361][ T7082] loop1: detected capacity change from 0 to 512 [ 110.149542][ T7082] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.161366][ T7082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 110.169326][ T7082] System zones: 1-12 [ 110.173567][ T7082] EXT4-fs (loop1): 1 truncate cleaned up [ 110.179738][ T7082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.223225][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.372201][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.381982][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.446041][ T7094] netlink: 'syz.0.1096': attribute type 13 has an invalid length. [ 110.521320][ T7096] loop1: detected capacity change from 0 to 1024 [ 110.527922][ T7096] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.535089][ T7096] EXT4-fs: dax option not supported [ 110.630942][ T7101] loop1: detected capacity change from 0 to 128 [ 110.654880][ T7106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=7106 comm=syz.1.1101 [ 110.668345][ T7106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=7106 comm=syz.1.1101 [ 110.681346][ T7106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=7106 comm=syz.1.1101 [ 110.695402][ T7106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=7106 comm=syz.1.1101 [ 110.708598][ T7106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=7106 comm=syz.1.1101 [ 110.722572][ T7106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=7106 comm=syz.1.1101 [ 110.728624][ T7113] loop5: detected capacity change from 0 to 128 [ 110.735451][ T7106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=7106 comm=syz.1.1101 [ 110.745397][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1103'. [ 110.753888][ T7106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=7106 comm=syz.1.1101 [ 110.776287][ T7106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=7106 comm=syz.1.1101 [ 110.988898][ T7119] loop3: detected capacity change from 0 to 32768 [ 110.994097][ T7114] syz.5.1103: attempt to access beyond end of device [ 110.994097][ T7114] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 111.010225][ T7114] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 111.019095][ T7114] syz.5.1103: attempt to access beyond end of device [ 111.019095][ T7114] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 111.019811][ T7119] loop3: p1 p3 < p5 p6 > [ 111.128355][ T7132] loop0: detected capacity change from 0 to 512 [ 111.151888][ T7132] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 111.167160][ T7132] EXT4-fs (loop0): mount failed [ 111.218741][ T7136] program syz.3.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.486741][ T7139] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1110'. [ 111.629761][ T7149] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.1113'. [ 111.639066][ T7149] netlink: zone id is out of range [ 111.644876][ T7149] netlink: zone id is out of range [ 111.650074][ T7149] netlink: zone id is out of range [ 111.655210][ T7149] netlink: zone id is out of range [ 111.660360][ T7149] netlink: zone id is out of range [ 111.665474][ T7149] netlink: del zone limit has 8 unknown bytes [ 111.986131][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 111.996437][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 112.119228][ T7165] loop2: detected capacity change from 0 to 128 [ 112.142855][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 112.410723][ T7168] syz.2.1120: attempt to access beyond end of device [ 112.410723][ T7168] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 112.424875][ T7168] buffer_io_error: 1 callbacks suppressed [ 112.424884][ T7168] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 112.444210][ T7165] syz.2.1120: attempt to access beyond end of device [ 112.444210][ T7165] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 112.457920][ T7165] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 112.467266][ T7165] syz.2.1120: attempt to access beyond end of device [ 112.467266][ T7165] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 112.482488][ T7165] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 112.521130][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'. [ 112.589968][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.598474][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.631370][ T7180] netlink: 'syz.5.1124': attribute type 21 has an invalid length. [ 112.667716][ T7183] netlink: 'syz.2.1122': attribute type 13 has an invalid length. [ 112.776825][ T7173] syz.1.1121: attempt to access beyond end of device [ 112.776825][ T7173] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 112.791370][ T7173] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 112.805991][ T7170] syz.1.1121: attempt to access beyond end of device [ 112.805991][ T7170] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 112.820360][ T7170] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 112.831125][ T7170] syz.1.1121: attempt to access beyond end of device [ 112.831125][ T7170] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 112.844809][ T7170] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 112.859264][ T7188] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 112.874180][ T7188] EXT4-fs (loop3): mount failed [ 112.952029][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.960756][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.970863][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 112.970875][ T29] audit: type=1326 audit(1767966777.549:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7187 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 113.001520][ T29] audit: type=1326 audit(1767966777.549:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7187 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 113.024978][ T29] audit: type=1326 audit(1767966777.549:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7187 comm="syz.3.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd5ed76f749 code=0x7ffc0000 [ 113.055963][ T29] audit: type=1326 audit(1767966777.549:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7187 comm="syz.3.1126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5ed76f749 code=0x0 [ 113.067585][ T7186] syz.5.1125: attempt to access beyond end of device [ 113.067585][ T7186] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 113.093038][ T7186] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 113.101791][ T7182] syz.5.1125: attempt to access beyond end of device [ 113.101791][ T7182] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 113.115922][ T7182] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 113.145198][ T7197] netlink: 'syz.1.1129': attribute type 13 has an invalid length. [ 113.264253][ T7205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.273286][ T7205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.311203][ T7210] EXT4-fs: Ignoring removed bh option [ 113.316945][ T7210] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.328031][ T7210] EXT4-fs error (device loop2): __ext4_iget:5426: inode #15: block 1803188595: comm syz.2.1133: invalid block [ 113.340481][ T7210] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1133: couldn't read orphan inode 15 (err -117) [ 113.346880][ T7212] netlink: 'syz.5.1131': attribute type 13 has an invalid length. [ 113.353203][ T7210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.409496][ C1] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x803800 phys_seg 1 prio class 2 [ 113.419146][ C1] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x803800 phys_seg 1 prio class 2 [ 113.428766][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 113.437004][ T7213] EXT4-fs (loop2): I/O error while writing superblock [ 113.450066][ T7210] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4953: inode #11: block 7: comm syz.2.1133: unable to read itable block [ 113.463948][ T7210] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 113.473855][ T7210] EXT4-fs (loop2): I/O error while writing superblock [ 113.511507][ T6912] EXT4-fs error (device loop2): ext4_get_inode_loc:4968: inode #2: block 5: comm syz.2.1048: unable to read itable block [ 113.524237][ T6912] EXT4-fs (loop2): I/O error while writing superblock [ 113.532516][ T6912] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: IO failure [ 113.541341][ T6912] EXT4-fs (loop2): I/O error while writing superblock [ 113.548181][ T6912] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.1048: mark_inode_dirty error [ 113.561166][ T6912] EXT4-fs (loop2): I/O error while writing superblock [ 113.568032][ T4129] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4953: inode #2: block 5: comm kworker/u8:30: unable to read itable block [ 113.582394][ T4129] EXT4-fs (loop2): I/O error while writing superblock [ 113.589906][ T6912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.599286][ T6912] EXT4-fs (loop2): I/O error while writing superblock [ 113.649805][ T7220] netlink: 'syz.3.1136': attribute type 21 has an invalid length. [ 113.711005][ T7218] syz.0.1134: attempt to access beyond end of device [ 113.711005][ T7218] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 113.725185][ T7218] syz.0.1134: attempt to access beyond end of device [ 113.725185][ T7218] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 113.847749][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.865561][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.941021][ T7246] netlink: 'syz.1.1143': attribute type 13 has an invalid length. [ 113.958725][ T7224] chnl_net:caif_netlink_parms(): no params data found [ 113.983395][ T4129] bridge_slave_1: left allmulticast mode [ 113.989061][ T4129] bridge_slave_1: left promiscuous mode [ 113.996162][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.004663][ T4129] bridge_slave_0: left allmulticast mode [ 114.010389][ T4129] bridge_slave_0: left promiscuous mode [ 114.016058][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.092152][ T4129] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.100985][ T4129] bond_slave_0: left promiscuous mode [ 114.107134][ T4129] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.116529][ T4129] bond_slave_1: left promiscuous mode [ 114.122996][ T4129] $Hÿ (unregistering): Released all slaves [ 114.156660][ T7255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.169263][ T7224] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.176395][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.183792][ T7224] bridge_slave_0: entered allmulticast mode [ 114.184453][ T7255] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 114.191185][ T7224] bridge_slave_0: entered promiscuous mode [ 114.199688][ T7255] System zones: 0-1, 3-12 [ 114.205336][ T7224] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.215741][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.223705][ T7224] bridge_slave_1: entered allmulticast mode [ 114.223925][ T7255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.230186][ T7224] bridge_slave_1: entered promiscuous mode [ 114.257258][ T4129] hsr_slave_0: left promiscuous mode [ 114.262842][ T7255] EXT4-fs error (device loop0): __ext4_remount:6789: comm syz.0.1145: Abort forced by user [ 114.273402][ T4129] hsr_slave_1: left promiscuous mode [ 114.275730][ T7255] EXT4-fs (loop0): Remounting filesystem read-only [ 114.279012][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.285282][ T7255] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 114.303877][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.314046][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.331015][ T7259] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 114.347540][ T4129] team0 (unregistering): Port device team_slave_1 removed [ 114.348129][ T7259] EXT4-fs (loop0): mount failed [ 114.360405][ T4129] team0 (unregistering): Port device team_slave_0 removed [ 114.395192][ T7224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.400087][ T29] audit: type=1326 audit(1767966778.969:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fb11f749 code=0x7ffc0000 [ 114.405934][ T7224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.427057][ T29] audit: type=1326 audit(1767966778.969:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f32fb11f749 code=0x7ffc0000 [ 114.427113][ T29] audit: type=1326 audit(1767966778.969:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="gtp" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32fb11f749 code=0x0 [ 114.496235][ T7224] team0: Port device team_slave_0 added [ 114.502775][ T7224] team0: Port device team_slave_1 added [ 114.517504][ T7224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.524987][ T7224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.551837][ T7224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.578057][ T7224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.585691][ T7224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.612415][ T7224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.732845][ T7273] set_capacity_and_notify: 10 callbacks suppressed [ 114.732862][ T7273] loop5: detected capacity change from 0 to 128 [ 114.778956][ T7278] loop3: detected capacity change from 0 to 128 [ 114.791122][ T7224] hsr_slave_0: entered promiscuous mode [ 114.797279][ T7224] hsr_slave_1: entered promiscuous mode [ 114.803357][ T7224] debugfs: 'hsr0' already exists in 'hsr' [ 114.809090][ T7224] Cannot create hsr debugfs directory [ 114.815012][ T7273] __nla_validate_parse: 7 callbacks suppressed [ 114.815025][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1150'. [ 114.902375][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.907014][ T7224] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 114.919176][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.927152][ T7224] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 114.936521][ T7224] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 114.947548][ T7224] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 115.030774][ T7224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.043176][ T7293] netlink: 'syz.1.1154': attribute type 13 has an invalid length. [ 115.054459][ T7224] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.069946][ T4116] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.077004][ T4116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.098333][ T4120] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.105405][ T4120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.188781][ T7224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.213832][ T7304] loop5: detected capacity change from 0 to 128 [ 115.226843][ T7304] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.227214][ T7307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.242481][ T7304] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.248387][ T7307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.281868][ T6878] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.328823][ T7319] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1159'. [ 115.335797][ T7321] netlink: 'syz.0.1158': attribute type 13 has an invalid length. [ 115.360886][ T7224] veth0_vlan: entered promiscuous mode [ 115.368265][ T7224] veth1_vlan: entered promiscuous mode [ 115.382865][ T7224] veth0_macvtap: entered promiscuous mode [ 115.392918][ T7224] veth1_macvtap: entered promiscuous mode [ 115.403498][ T7224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.413505][ T7224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.425007][ T4160] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.434051][ T4160] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.442965][ T4160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.454132][ T4160] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.489271][ T7326] $Hÿ: renamed from bond0 (while UP) [ 115.496519][ T7326] $Hÿ: entered promiscuous mode [ 115.502179][ T7326] bond_slave_0: entered promiscuous mode [ 115.507899][ T7326] bond_slave_1: entered promiscuous mode [ 115.537044][ T7330] netlink: 'syz.6.1161': attribute type 21 has an invalid length. [ 115.545627][ T7330] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1161'. [ 115.581706][ T7334] loop6: detected capacity change from 0 to 128 [ 115.871073][ T29] audit: type=1326 audit(1767966780.449:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44409ef749 code=0x7ffc0000 [ 115.894549][ T29] audit: type=1326 audit(1767966780.449:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44409ef749 code=0x7ffc0000 [ 115.918704][ T29] audit: type=1326 audit(1767966780.449:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7338 comm="syz.5.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f44409ef749 code=0x7ffc0000 [ 115.937460][ T7342] loop1: detected capacity change from 0 to 1024 [ 115.949977][ T7342] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.967250][ T7342] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 115.979327][ T7347] loop5: detected capacity change from 0 to 512 [ 115.986618][ T7342] System zones: 0-1, 3-12 [ 115.991592][ T7342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.007527][ T7347] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 116.041265][ T7350] loop0: detected capacity change from 0 to 128 [ 116.047588][ T7341] EXT4-fs error (device loop1): __ext4_remount:6789: comm syz.1.1175: Abort forced by user [ 116.060845][ T7347] EXT4-fs (loop5): 1 truncate cleaned up [ 116.066847][ T7351] loop3: detected capacity change from 0 to 128 [ 116.066982][ T7347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.088888][ T7341] EXT4-fs (loop1): Remounting filesystem read-only [ 116.095416][ T7341] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 116.129792][ T7347] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 116.150168][ T6878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.159777][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 116.178356][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 116.188339][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.229880][ T7360] loop5: detected capacity change from 0 to 1024 [ 116.264903][ T7360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.285823][ T7360] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 116.296083][ T7360] System zones: 0-1, 3-12 [ 116.315708][ T7360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.334707][ T7360] EXT4-fs error (device loop5): __ext4_remount:6789: comm syz.5.1169: Abort forced by user [ 116.345083][ T7360] EXT4-fs (loop5): Remounting filesystem read-only [ 116.351622][ T7360] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 116.372358][ T6878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.423620][ T7367] $Hÿ: renamed from bond0 [ 116.430622][ T7367] $Hÿ: entered promiscuous mode [ 116.435688][ T7367] bond_slave_0: entered promiscuous mode [ 116.441491][ T7367] bond_slave_1: entered promiscuous mode [ 116.500831][ T7371] netlink: 'syz.6.1173': attribute type 21 has an invalid length. [ 116.511163][ T7371] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1173'. [ 116.566015][ T7375] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1176'. [ 116.658513][ T7381] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1179'. [ 116.733678][ T7388] selinux_netlink_send: 25 callbacks suppressed [ 116.733691][ T7388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7388 comm=syz.0.1180 [ 116.786585][ T7390] ALSA: seq fatal error: cannot create timer (-22) [ 116.822935][ T7391] program syz.0.1180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.577125][ T7398] loop6: detected capacity change from 0 to 128 [ 117.682135][ T7398] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.725873][ T7398] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.842396][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 117.853002][ T7224] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.927509][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.939351][ T7427] veth0: entered promiscuous mode [ 117.958732][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1193'. [ 117.968948][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.980420][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 117.980433][ T29] audit: type=1326 audit(1767966782.559:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f32fb11f749 code=0x7ffc0000 [ 118.118786][ T7424] bio_check_eod: 9 callbacks suppressed [ 118.118801][ T7424] syz.3.1190: attempt to access beyond end of device [ 118.118801][ T7424] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 118.138788][ T7424] buffer_io_error: 16 callbacks suppressed [ 118.138802][ T7424] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 118.184048][ T29] audit: type=1326 audit(1767966782.589:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32fb1165e7 code=0x7ffc0000 [ 118.208168][ T29] audit: type=1326 audit(1767966782.589:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32fb0bb829 code=0x7ffc0000 [ 118.233146][ T29] audit: type=1326 audit(1767966782.589:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f32fb11f749 code=0x7ffc0000 [ 118.256465][ T29] audit: type=1326 audit(1767966782.589:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32fb1165e7 code=0x7ffc0000 [ 118.280455][ T29] audit: type=1326 audit(1767966782.739:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32fb0bb829 code=0x7ffc0000 [ 118.303738][ T29] audit: type=1326 audit(1767966782.749:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32fb1165e7 code=0x7ffc0000 [ 118.327736][ T29] audit: type=1326 audit(1767966782.749:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32fb0bb829 code=0x7ffc0000 [ 118.351689][ T29] audit: type=1326 audit(1767966782.749:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f32fb11f749 code=0x7ffc0000 [ 118.375000][ T29] audit: type=1326 audit(1767966782.749:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7419 comm="syz.0.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32fb1165e7 code=0x7ffc0000 [ 118.426163][ T7440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7440 comm=syz.3.1195 [ 118.536962][ T7431] syz.6.1193: attempt to access beyond end of device [ 118.536962][ T7431] loop6: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 118.550729][ T7431] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 118.559571][ T7434] syz.6.1193: attempt to access beyond end of device [ 118.559571][ T7434] loop6: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 118.573929][ T7434] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 118.596650][ T7431] syz.6.1193: attempt to access beyond end of device [ 118.596650][ T7431] loop6: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 118.600705][ T7440] program syz.3.1195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.611121][ T7431] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 118.653669][ T7444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.671627][ T7444] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 118.680038][ T7444] System zones: 0-1, 3-12 [ 118.685093][ T7444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.698105][ T7444] EXT4-fs error (device loop0): __ext4_remount:6789: comm syz.0.1197: Abort forced by user [ 118.708990][ T7444] EXT4-fs (loop0): Remounting filesystem read-only [ 118.715596][ T7444] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 118.730908][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.838278][ T7461] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.851474][ T7461] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.871243][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.931143][ T7464] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 118.946301][ T7464] EXT4-fs (loop0): mount failed [ 119.179109][ T7468] syz.5.1206: attempt to access beyond end of device [ 119.179109][ T7468] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 119.193328][ T7468] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 119.202128][ T7471] syz.5.1206: attempt to access beyond end of device [ 119.202128][ T7471] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 119.215855][ T7471] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 119.355813][ T7478] vlan2: entered allmulticast mode [ 119.361106][ T7478] dummy0: entered allmulticast mode [ 119.368689][ T7488] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 119.454443][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.465362][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.534217][ T7505] netlink: 'syz.1.1217': attribute type 13 has an invalid length. [ 119.873686][ T7509] set_capacity_and_notify: 10 callbacks suppressed [ 119.873705][ T7509] loop6: detected capacity change from 0 to 128 [ 119.987409][ T7516] __nla_validate_parse: 2 callbacks suppressed [ 119.987427][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1220'. [ 120.163416][ T7525] loop0: detected capacity change from 0 to 128 [ 120.292605][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1225'. [ 120.327995][ T7529] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 120.392463][ T7529] loop5: detected capacity change from 0 to 2048 [ 120.421178][ T7529] loop5: p4 < > [ 120.583203][ T7509] syz.6.1220: attempt to access beyond end of device [ 120.583203][ T7509] loop6: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 120.597013][ T7509] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 120.612066][ T7516] syz.6.1220: attempt to access beyond end of device [ 120.612066][ T7516] loop6: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 120.625813][ T7516] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 120.699280][ T7528] syz.0.1225: attempt to access beyond end of device [ 120.699280][ T7528] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 120.713836][ T7528] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 120.723135][ T7525] syz.0.1225: attempt to access beyond end of device [ 120.723135][ T7525] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 120.736981][ T7525] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 120.749200][ T7541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.763525][ T7541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.782620][ T7543] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.836820][ T7543] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.843920][ T7547] loop0: detected capacity change from 0 to 128 [ 120.855009][ T7548] netlink: 'syz.3.1231': attribute type 13 has an invalid length. [ 120.871372][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 120.882552][ T7543] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.924253][ T7543] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.977303][ T7553] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1233'. [ 120.991170][ T4129] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.999459][ T4129] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.009860][ T4129] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.019034][ T4129] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.063925][ T7555] loop6: detected capacity change from 0 to 128 [ 121.093173][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1234'. [ 121.202196][ T7564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.211225][ T7564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.236432][ T7555] ================================================================== [ 121.244522][ T7555] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 121.252509][ T7555] [ 121.254840][ T7555] write to 0xffff88811a8c0b14 of 4 bytes by task 7558 on cpu 0: [ 121.262463][ T7555] xas_set_mark+0x12b/0x140 [ 121.266978][ T7555] tag_pages_for_writeback+0xc2/0x290 [ 121.272356][ T7555] writeback_iter+0x340/0x820 [ 121.277039][ T7555] mpage_writepages+0x87/0x1250 [ 121.281897][ T7555] fat_writepages+0x24/0x30 [ 121.286408][ T7555] do_writepages+0x1c6/0x310 [ 121.291006][ T7555] file_write_and_wait_range+0x156/0x2c0 [ 121.296637][ T7555] __generic_file_fsync+0x46/0x160 [ 121.301755][ T7555] fat_file_fsync+0x49/0x100 [ 121.306346][ T7555] vfs_fsync_range+0x10d/0x130 [ 121.311114][ T7555] generic_file_write_iter+0x1b8/0x2f0 [ 121.316583][ T7555] iter_file_splice_write+0x66b/0xa20 [ 121.321960][ T7555] direct_splice_actor+0x156/0x2a0 [ 121.327074][ T7555] splice_direct_to_actor+0x312/0x680 [ 121.332446][ T7555] do_splice_direct+0xda/0x150 [ 121.337211][ T7555] do_sendfile+0x380/0x650 [ 121.341639][ T7555] __x64_sys_sendfile64+0x105/0x150 [ 121.346842][ T7555] x64_sys_call+0x2db1/0x3000 [ 121.351502][ T7555] do_syscall_64+0xca/0x2b0 [ 121.356001][ T7555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.361883][ T7555] [ 121.364190][ T7555] read to 0xffff88811a8c0b14 of 4 bytes by task 7555 on cpu 1: [ 121.371712][ T7555] file_write_and_wait_range+0x10e/0x2c0 [ 121.377338][ T7555] __generic_file_fsync+0x46/0x160 [ 121.382435][ T7555] fat_file_fsync+0x49/0x100 [ 121.387011][ T7555] vfs_fsync_range+0x10d/0x130 [ 121.391764][ T7555] generic_file_write_iter+0x1b8/0x2f0 [ 121.397213][ T7555] iter_file_splice_write+0x66b/0xa20 [ 121.402568][ T7555] direct_splice_actor+0x156/0x2a0 [ 121.407666][ T7555] splice_direct_to_actor+0x312/0x680 [ 121.413031][ T7555] do_splice_direct+0xda/0x150 [ 121.417779][ T7555] do_sendfile+0x380/0x650 [ 121.422186][ T7555] __x64_sys_sendfile64+0x105/0x150 [ 121.427370][ T7555] x64_sys_call+0x2db1/0x3000 [ 121.432037][ T7555] do_syscall_64+0xca/0x2b0 [ 121.436535][ T7555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.442418][ T7555] [ 121.444724][ T7555] value changed: 0x02000021 -> 0x04000021 [ 121.450428][ T7555] [ 121.452733][ T7555] Reported by Kernel Concurrency Sanitizer on: [ 121.458869][ T7555] CPU: 1 UID: 0 PID: 7555 Comm: syz.6.1234 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.468573][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.478613][ T7555] ================================================================== [ 121.491443][ T7566] netlink: 'syz.0.1237': attribute type 13 has an invalid length.