last executing test programs: 1m46.089356135s ago: executing program 2 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) io_pgetevents(0x0, 0x8000023, 0x0, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 1m45.806658213s ago: executing program 2 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x10001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) r7 = socket(0xf, 0xe449eedea9f7fec6, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x2}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}]}]}}]}, 0x48}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r14], 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b80)={'sit0\x00', &(0x7f0000000ac0)={'sit0\x00', 0x0, 0x20, 0x8, 0x47a4, 0x7fff, {{0x1b, 0x4, 0x0, 0x2, 0x6c, 0x64, 0x0, 0x5, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0xd, [@dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x4c, 0xfd, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x5}, {@private=0xa010102, 0x4bb5218a}, {@multicast1, 0x1}, {@private=0xa010100, 0x90a}, {@rand_addr=0x64010102, 0x6}, {@multicast2, 0x3}, {@local, 0x3}, {@broadcast, 0x6}, {@remote, 0x9}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001b00)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="00012cbd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="5802028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300ff0008000400ffffffff3800010024000100656e61626c6564000000000000000000000003000000060000000400040008000600"/116, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYRESOCT=r10, @ANYRES32=0x0, @ANYBLOB="380001002400010002000000745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400f7ffffff380001002400c5a3f0687a7d16b9706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="e001028064000100240001006270665f686173685f66756e630000000000000000009940633800000000000000000000050003000b00000034000400070009094d36000006000905ffff0000080010050100000005000403040000000e000905020000000400a209030000003c00010024000100656e61626c654924ffff000000000000000000000000000000000000000000000500030006000000040004000800060057f216ae31ed1e3271a973390a5bd42ebdd4ac128d0e5995d73c2bcad5d27500", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="b4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000010000008000600", @ANYRES32=r5, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000900070907000000b0b910ffb4f4d05938000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r6, @ANYBLOB="3402028040000100240001006c625f706f72745f73746174730000000000000b00000000009eae00000000000504000000000008000600", @ANYRES32=0x0, @ANYBLOB="7c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c000400c812f904090000000500060702000000aa120302fdffffff7f00070f010400000000040801000000100004f811040000001003b4600200000500ff00090000000a000805040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYRESHEX=r7, @ANYRES32=r14, @ANYRES32=r5, @ANYRES16=r12, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=r15, @ANYBLOB="2bdc0ab296cdbe653a21220409be05866821f5ec5cf1a2e3f2d33654d5d6c17b5aeac2b0e86bcef9223c0de890b2a099d4bebfaee8c6ee34da702f8053b3d8096f7c10bb54add2b7a0a2f57c38c2725e1e0e559e6b7904f0406c6e0693301fae37164c3a01e26ee28f5230b0d715e2183a0376933fdba499e6297d3da7a1fb7926bc60343a19bc"], 0x8b4}, 0x1, 0x0, 0x0, 0x4048181}, 0x20000051) unlink(&(0x7f0000000180)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r16}, 0x10) r17 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r17, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) 1m45.608766123s ago: executing program 2 (id=25): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) listen(0xffffffffffffffff, 0x20) poll(0x0, 0x0, 0x11ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') openat(r5, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 1m44.414524351s ago: executing program 2 (id=30): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000700008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) (async) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (async) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) (async) pipe2$9p(&(0x7f00000000c0), 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1080) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x2, 0x0, 0x0, {0x0, 0x6, 0x0, r8, 0xffffff81, 0x20}, [@IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48b9}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r4}, 0x38) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r12, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000a878000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m44.284427494s ago: executing program 2 (id=31): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000002000010000000000fcdbdf250a805f00000000031a00030014000200fc020000000000000000000000000001080017004e234e231400010020010000000000000000000000000001a4c42b"], 0x4c}}, 0x40000) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setregid(0x0, 0xee01) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc020000000000000001"], 0x5c}}, 0x0) 1m44.282546144s ago: executing program 2 (id=33): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRES64=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000300)={0x33, @remote, 0x4e20, 0x3, 'lblc\x00', 0xf, 0xe, 0xd}, 0x2c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x14, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2400085d}, 0x24048040) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) pidfd_getfd(r6, r6, 0x0) getpgid(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r8, 0x3516, 0xddd3, 0x4, 0x0, 0x0) shutdown(r7, 0x1) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1f, 0x0, 0x0, 0x2000, 0x4}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000800000000020073797a5f74756e00000000000000000000000200"/42], 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r14, 0x0, 0xe, 0x0, &(0x7f0000000140)="9dbaac999f699ddfb8d31cbfee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m29.178834638s ago: executing program 32 (id=33): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRES64=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000300)={0x33, @remote, 0x4e20, 0x3, 'lblc\x00', 0xf, 0xe, 0xd}, 0x2c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x14, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2400085d}, 0x24048040) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) pidfd_getfd(r6, r6, 0x0) getpgid(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r8, 0x3516, 0xddd3, 0x4, 0x0, 0x0) shutdown(r7, 0x1) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1f, 0x0, 0x0, 0x2000, 0x4}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000800000000020073797a5f74756e00000000000000000000000200"/42], 0x34}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r14, 0x0, 0xe, 0x0, &(0x7f0000000140)="9dbaac999f699ddfb8d31cbfee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.884509346s ago: executing program 1 (id=1699): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x20000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) write$binfmt_elf32(r0, &(0x7f0000005640)=ANY=[@ANYRES16=r2], 0x69) close(r0) execve(&(0x7f0000019140)='./file0\x00', 0x0, 0x0) (fail_nth: 3) 3.528781781s ago: executing program 1 (id=1702): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x0, 0x18}, 0xc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001380)={"84347f50237ee67c0be12170b2a0cdf6", 0x0, 0x0, {0x800, 0x1}, {0x3, 0x5}, 0x10, [0x8, 0x8b, 0x8000000000000001, 0xfffffffffffffff8, 0x4, 0x1, 0x9, 0x1ff, 0x8, 0x80, 0x47a, 0x14d, 0x3, 0x8, 0x1, 0x40]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001480)={"e7077041e5cc8d34f5d32e346acb9dcd", 0x0, 0x0, {0x4, 0xfe}, {0x4, 0xd}, 0x7, [0x5, 0xfffffffffffffc01, 0x1, 0x0, 0x7, 0x7fffffffffffffff, 0x447e, 0xfffffffffffffff7, 0x2, 0x4, 0x3ff, 0x7fff, 0xe, 0xfff, 0xa03c, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001580)={"f50d9d201e0a00bfe5f9483e1524a29a", r1, r2, {0xfff}, {0xc0b, 0x3}, 0x8000000000000000, [0x6, 0x6, 0x8, 0x80, 0xff, 0x0, 0x48bfffde, 0x5, 0x2, 0x9, 0x8001, 0x7, 0x2, 0xfffffffffffffffc, 0x1000, 0x5]}) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000002c0)={0x32, 0x0, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syncfs(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) 3.477674266s ago: executing program 0 (id=1703): r0 = openat$sysfs(0xffffff9c, 0x0, 0x40000, 0xc8) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/36, 0x24}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdbf, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r4 = socket$pptp(0x18, 0x1, 0x2) connect(r4, &(0x7f0000000480)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getitimer(0x0, &(0x7f0000000500)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f00000002c0)={0x40, "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"}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x190da) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 3.24225851s ago: executing program 0 (id=1706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f31000014000100776732000000000000000000000000001400010077673200000000000000000000000000080001"], 0xa8}}, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r2, 0x0, 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="871000000000000000000100004008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x4000084}, 0x808) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x58, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xb}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfd}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000005) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010100, @empty}, {0x20, 0x1, 0x0, @rand_addr=0x64010102}}}}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000ac0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000a80)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r8, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x2, {0x1, 0xfff, "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", 0x0, 0x4, 0x0, 0x8, 0x4, 0x1, 0xe}, r10}}, 0x128) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r11, r11, 0x8, &(0x7f0000000140)={0x3d, 0x5, 0xfffffff9}) move_pages(r11, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r10, 0x8, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @local}}}, 0x118) 2.653173178s ago: executing program 1 (id=1713): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1, &(0x7f0000000240)=@raw=[@generic={0x8, 0xa, 0x0, 0x0, 0x2}], &(0x7f0000000340)='syzkaller\x00', 0x5321, 0x4d, &(0x7f0000000380)=""/77, 0x40f00, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xe, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000480)=[r0, r0], &(0x7f00000004c0)=[{0x0, 0x3, 0x3, 0x8}, {0x2, 0x2, 0x0, 0x8}, {0x4, 0x5, 0x10, 0xc}, {0x4, 0x2, 0x9, 0x3}, {0x5, 0x2, 0x1, 0x1}, {0x3, 0x3, 0x7, 0x3}], 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@bridge_getlink={0x64, 0x12, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0xc500, 0x42028}, [@IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1\x00'}, @IFLA_NET_NS_FD={0x8}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_FD={0x8, 0x1, r4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000080)=""/21, 0x15, 0xfffffffffffffffc, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000800000000000500000a1c000044ac0a88ac02ce8efe52f4bb6d069890c896fb37f800090a010400000000000000000a000004080005400000002b1400000011000100000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x80, 0xe0, 0xd9, 0x1c, 0x0, 0x4, 0x1}, 0x1c) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000080)={0x100b, 0x0, 0x1, 0xb, 0x0, "00120dd608f500001e20000080c90a008000"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xa) 2.253763328s ago: executing program 3 (id=1720): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r3, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7ffffffffffffffd) 2.116555181s ago: executing program 0 (id=1721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409}) flock(r2, 0x5) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x29, 0x7, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x8a0, 0x30, 0x12f, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x4, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0xc, 0x8001, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x3, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0x8000fff, 0x1f2, 0x24000, 0x7, 0x8001, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x9, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0c, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x7, 0xbae5, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x72aad88, 0x8ec3, 0x0, 0x1, 0x4, 0xfffffffe, 0x2000000, 0x1ff, 0xfbd, 0x1, 0xb, 0x7, 0x5, 0x7a, 0x4c7c, 0x2782, 0x2, 0x1, 0x1, 0xfffffff3, 0x1ff, 0x3, 0x0, 0xffff, 0x8, 0xfffffbff, 0x9, 0x0, 0x3, 0x7ffe, 0x6, 0x9, 0x580, 0x8b1, 0x6, 0x3, 0x717, 0x8, 0x4, 0x450a, 0x0, 0x2, 0x7, 0x5, 0x4, 0x3, 0x8000, 0x0, 0x5, 0x1, 0x7fffffff, 0x5, 0x793, 0x6, 0x4, 0xfffffffc, 0x9, 0x8, 0x9, 0x5, 0xd0, 0x0, 0x311, 0x23e8, 0xd6de, 0x9, 0x5, 0xc, 0x7, 0x18, 0xa, 0x1, 0x8, 0x1, 0x400, 0x3e, 0x1, 0xf, 0x81, 0x3, 0x6, 0x7, 0x4, 0xb6a5, 0x37a, 0x6, 0x9, 0x0, 0x80000000, 0xbd72, 0x6, 0x5184, 0x1, 0x30000000, 0x9, 0x526, 0x3, 0x6c18, 0x6, 0x5, 0x1, 0x7, 0x3, 0xe, 0x3, 0x9, 0x4c8a, 0x1000, 0x100000, 0x0, 0x3, 0x14a, 0x5, 0x56ad2c07, 0x7fffffff, 0x3ff, 0xfffffbff, 0x8, 0x6, 0x6, 0x6658, 0x10001, 0xe, 0x4, 0x1, 0x10000, 0xfffffbff, 0x0, 0x8, 0x0, 0x3ff, 0x8001, 0x5, 0x6, 0x8000, 0xffff, 0x0, 0x4c05390b, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x2, 0x9, 0x9de, 0xfff, 0x0, 0x5, 0x80000001, 0x1000, 0x5, 0x1, 0x3, 0x7, 0x7, 0x3, 0x2, 0x1, 0x3, 0xff, 0xd3, 0x10000, 0x73, 0x1800000, 0x8, 0x0, 0x3, 0x2, 0x2, 0x0, 0x9, 0x6f32, 0xc, 0x7f, 0x5, 0xc, 0x883, 0x8, 0xc, 0x4, 0x5, 0x0, 0x7, 0x4, 0x3ff, 0x1, 0x2, 0x8, 0x9, 0x2, 0x4, 0xfffffffd, 0x7, 0x8, 0x5e4a, 0x8, 0x9, 0x800, 0x6, 0x7, 0xffff, 0x8, 0x0, 0x8001, 0xde, 0xc, 0x8ef, 0xffffffff, 0x9, 0x81, 0x0, 0x3, 0x0, 0x3, 0x8001, 0x0, 0x7, 0x4, 0x9, 0x9, 0x6, 0x1, 0x0, 0xfffffff8, 0x1ff, 0x80000000, 0x71, 0x8, 0x4, 0x80000000, 0x1eea, 0x81, 0x200, 0x10000, 0x4, 0x7ff, 0x7, 0xfffffff8, 0xa, 0x81, 0x2, 0x7, 0x8, 0x5, 0x640, 0x7, 0x947, 0x7, 0x0, 0x5, 0x1, 0x6, 0x8, 0x7fffffff]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x8a0}}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r9, 0x2) dup3(r9, r2, 0x0) 2.004713252s ago: executing program 5 (id=1725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1023, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000001380)=ANY=[@ANYBLOB="e727dc07001f00000000000086dd609907a600092c03cb"], 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) fsopen(&(0x7f0000000100)='virtiofs\x00', 0x0) syz_emit_ethernet(0xb0, &(0x7f0000000680)=ANY=[@ANYBLOB="e727dc07001f00000000000088a820008100000086dd60000080007200000000000000000000000000000098cad7018800000000000000000000000001015bae743de4f1cb37fb033eb92ce6d0aabd1bfad6871926032b8baaef1ae27eaa16b851f78cf1c8064ba08f3d9b305a331e13e797167f33dc3cb143dc4f06c6133ace4e4fa663251787bbd858e2fc1108b3bc280042a7b4a329592258d9dae1a64559fba9f8483fb60b000008000000006883"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) fallocate(0xffffffffffffffff, 0x1, 0x8a5, 0x1001f0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x15, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x8cdb}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r7, @ANYRES16=r6], 0x84}}, 0x20008040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) 1.945061508s ago: executing program 5 (id=1726): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.891726304s ago: executing program 5 (id=1727): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 1.784704024s ago: executing program 5 (id=1728): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) openat(0xffffffffffffff9c, 0x0, 0x189002, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0x101, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0xf0, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xcf}, [@feature_unit={0xb, 0x24, 0x6, 0x3, 0x5, 0x2, [0x2, 0x8], 0xdf}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x1, 0x9, 0x9, 0x1, 0x2], 0x3}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x29a, 0x7f, '#\a'}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x6}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x0, 0x5, "f3e7e7ad58"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1c, 0x1, 0x4a, 0xe, "e849", "f8a879"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xb, 0x6, 0xa4, "e43dccd523de25d9"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0xfffe, 0x5e, "de841a4d61ea1a5c44"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x3, 0x0, 0x5, "d99a6efdbd"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x0, 0x2}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x0, 0xf, "8366b7a9ce"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf, 0x5, 0x0, {0x7, 0x25, 0x1, 0x2, 0x3, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x2, 0x9, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xf8, 0x1e, 0x4, {0x7, 0x25, 0x1, 0x1, 0x6, 0x7f}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x140, 0x11, 0x3, 0x80, 0x40, 0x5}, 0x1d, &(0x7f0000000200)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x9, 0xf, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x80, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0x9, 0x4a}]}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3401}}, {0xb, &(0x7f0000000280)=@string={0xb, 0x3, "c1c7fbdc2e8e10bd60"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x446}}, {0xe8, &(0x7f00000006c0)=@string={0xe8, 0x3, "abca035ed3bd85772f10847dab30849b69b48e7bea84e4e5b7216ba59d78b85e700f08fc273915bc3a53740d4e3f66c97a968ad82c331696b8ac175d45addde7b90260cc126888ad9ec3c76915db8f9987ed3ac983e83edbaf736527c4ab2623e643282a8851ff0b988767036c08c344281a8173677128050dcb0ecd06a6d94bf2e848e3a0941ce97a51f254192f70f9056a7b5925006772b182a95adec239439887bb9cfb090cf873087b325cdc2569c3a24c0002b13d9026198115df7630b0662a61115693b3ed41d31a17b7f47df54ce27e548436bd881fb32877f37ad7c66fc1d62466aa"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x457}}, {0x76, &(0x7f00000007c0)=@string={0x76, 0x3, "95fdb9fa8b539c5f2af2463038fad77dc4efd28defe7a113a80aaacfbbf25433a19f5823909c72f928fb9fb314db4cc43db23e5584f3e1a3cbe05fc9cd60270cd6626772c90d5fd9ea77a0e74076f780a086fa790333a41a1e63c02ca2ec6df7ac61ef1dadd03e5570810347eab37e803b5a47c0"}}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.634282009s ago: executing program 1 (id=1729): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r2, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000001200)=""/147, 0x93}], 0x2) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r3 = syz_open_pts(r2, 0x42) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000012c0)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f00000013c0)={&(0x7f0000001300)={0x1d, r4, 0x0, {0x1, 0x1}, 0x1}, 0x18, &(0x7f0000001380)={&(0x7f0000001340)="11dd41b6a4a7b663590644572c34c4d922f3ac202e", 0x15}, 0x1, 0x0, 0x0, 0x401c}, 0x20000000) r5 = dup3(r3, r2, 0x0) write$UHID_INPUT(r5, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r0, r6, 0x4, 0x91, &(0x7f0000000180)="2c1b18f1042c2bfd0b1694833a388e4d487eadb3fa6421237f48939d4f50ab766e5b8d6733bbf7fb0dcbdf2ab635bc0303b018dfaad7c49cb49538a9fd84defbc8becdc316c1f7a071c5d12ae85e94867e257bbd0d6fa7c663bb338da9c5f8cb8233206f405fe0f64e6ef4e946cb4c68300a9be24e6a0601cb0b653ad66ee233b4528ef8187a556437ff7895c20dd41659", 0x5, 0x9a, 0x3, 0xa, 0x2000, 0x1, 0x2, 'syz0\x00'}) 1.553442947s ago: executing program 0 (id=1730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x84a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2040, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0xee5}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) r8 = syz_io_uring_setup(0xa37, &(0x7f0000000240)={0x0, 0x6dde, 0x1, 0x2, 0x3b6}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0xffff}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r12, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f40) sendmsg$tipc(r13, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r14}, 0x10) io_uring_enter(r8, 0x3b3d, 0x75d1, 0x40, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 1.534214339s ago: executing program 1 (id=1731): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x4000a7ff, 0x0, 0x0, 0x0, 0x0, 0x0) 1.338541758s ago: executing program 3 (id=1732): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x22, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fdffffff10000000180001801400020076657468315f746f5f68737200000000080011"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r10 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r10, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r11 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r11, &(0x7f00000003c0)=""/243, 0xf3, 0x8) 845.136567ms ago: executing program 3 (id=1733): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x25, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa06}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000009500"/65], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 699.340101ms ago: executing program 3 (id=1736): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x0, 0x18}, 0xc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001380)={"84347f50237ee67c0be12170b2a0cdf6", 0x0, 0x0, {0x800, 0x1}, {0x3, 0x5}, 0x10, [0x8, 0x8b, 0x8000000000000001, 0xfffffffffffffff8, 0x4, 0x1, 0x9, 0x1ff, 0x8, 0x80, 0x47a, 0x14d, 0x3, 0x8, 0x1, 0x40]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001480)={"e7077041e5cc8d34f5d32e346acb9dcd", 0x0, 0x0, {0x4, 0xfe}, {0x4, 0xd}, 0x7, [0x5, 0xfffffffffffffc01, 0x1, 0x0, 0x7, 0x7fffffffffffffff, 0x447e, 0xfffffffffffffff7, 0x2, 0x4, 0x3ff, 0x7fff, 0xe, 0xfff, 0xa03c, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001580)={"f50d9d201e0a00bfe5f9483e1524a29a", r1, r3, {0xfff}, {0xc0b, 0x3}, 0x8000000000000000, [0x6, 0x6, 0x8, 0x80, 0xff, 0x0, 0x48bfffde, 0x5, 0x2, 0x9, 0x8001, 0x7, 0x2, 0xfffffffffffffffc, 0x1000, 0x5]}) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000002c0)={0x32, 0x0, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) syncfs(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0xfffffe5d, 0x10}, 0xc) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001300)={0x0, &(0x7f0000000240)=""/62, &(0x7f0000001240)="2a17e7af46aa891d32fc2727d8f6f8f46860b584b3e5ecc0de9cbe34b6824f26f1239fcd991cd80131bc1c4cbc6cdd3092ce929531eae463afa6bebaaaff9fd10631755a1ad65fe3184ec2f339b71bfddd323552198990de58535787e76779c034c95d8c9b069a2105e9296cbe6bb52b0d30b8e9c4ad8d95c718fa10c002a153d68c85e2c11a73848ae3e3d7630bdd53e0a0dc379ad8", &(0x7f0000000340)="4957d6de149faaf63a489a39e04c9764909d50c255577d73e4fafb8fe489b7323c41cc62338659ec7282023b08dee35f90fe680429843455e736df3cba3ee40fe76768b8a116e8002191cc1a84004e98d9c951f5303468ec130864c0fe80a4bbabf87e87ac1db70c13b33ebe0ac52adaec99d4151c0c8b2d8925", 0xa, r7, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007bbfa200000000000007020000f8ffffffb703000008000000b704000000000000009500018000"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000940)='kfree\x00', 0xffffffffffffffff, 0x0, 0x94}, 0x69) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYRESHEX=r7, @ANYRES8=r2], 0x110}}, 0x0) 559.642035ms ago: executing program 0 (id=1740): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) 324.071118ms ago: executing program 5 (id=1741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409}) flock(r2, 0x5) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x29, 0x7, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x8a0, 0x30, 0x12f, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x4, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0xc, 0x8001, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x3, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0x8000fff, 0x1f2, 0x24000, 0x7, 0x8001, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x9, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0c, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x7, 0xbae5, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x72aad88, 0x8ec3, 0x0, 0x1, 0x4, 0xfffffffe, 0x2000000, 0x1ff, 0xfbd, 0x1, 0xb, 0x7, 0x5, 0x7a, 0x4c7c, 0x2782, 0x2, 0x1, 0x1, 0xfffffff3, 0x1ff, 0x3, 0x0, 0xffff, 0x8, 0xfffffbff, 0x9, 0x0, 0x3, 0x7ffe, 0x6, 0x9, 0x580, 0x8b1, 0x6, 0x3, 0x717, 0x8, 0x4, 0x450a, 0x0, 0x2, 0x7, 0x5, 0x4, 0x3, 0x8000, 0x0, 0x5, 0x1, 0x7fffffff, 0x5, 0x793, 0x6, 0x4, 0xfffffffc, 0x9, 0x8, 0x9, 0x5, 0xd0, 0x0, 0x311, 0x23e8, 0xd6de, 0x9, 0x5, 0xc, 0x7, 0x18, 0xa, 0x1, 0x8, 0x1, 0x400, 0x3e, 0x1, 0xf, 0x81, 0x3, 0x6, 0x7, 0x4, 0xb6a5, 0x37a, 0x6, 0x9, 0x0, 0x80000000, 0xbd72, 0x6, 0x5184, 0x1, 0x30000000, 0x9, 0x526, 0x3, 0x6c18, 0x6, 0x5, 0x1, 0x7, 0x3, 0xe, 0x3, 0x9, 0x4c8a, 0x1000, 0x100000, 0x0, 0x3, 0x14a, 0x5, 0x56ad2c07, 0x7fffffff, 0x3ff, 0xfffffbff, 0x8, 0x6, 0x6, 0x6658, 0x10001, 0xe, 0x4, 0x1, 0x10000, 0xfffffbff, 0x0, 0x8, 0x0, 0x3ff, 0x8001, 0x5, 0x6, 0x8000, 0xffff, 0x0, 0x4c05390b, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x2, 0x9, 0x9de, 0xfff, 0x0, 0x5, 0x80000001, 0x1000, 0x5, 0x1, 0x3, 0x7, 0x7, 0x3, 0x2, 0x1, 0x3, 0xff, 0xd3, 0x10000, 0x73, 0x1800000, 0x8, 0x0, 0x3, 0x2, 0x2, 0x0, 0x9, 0x6f32, 0xc, 0x7f, 0x5, 0xc, 0x883, 0x8, 0xc, 0x4, 0x5, 0x0, 0x7, 0x4, 0x3ff, 0x1, 0x2, 0x8, 0x9, 0x2, 0x4, 0xfffffffd, 0x7, 0x8, 0x5e4a, 0x8, 0x9, 0x800, 0x6, 0x7, 0xffff, 0x8, 0x0, 0x8001, 0xde, 0xc, 0x8ef, 0xffffffff, 0x9, 0x81, 0x0, 0x3, 0x0, 0x3, 0x8001, 0x0, 0x7, 0x4, 0x9, 0x9, 0x6, 0x1, 0x0, 0xfffffff8, 0x1ff, 0x80000000, 0x71, 0x8, 0x4, 0x80000000, 0x1eea, 0x81, 0x200, 0x10000, 0x4, 0x7ff, 0x7, 0xfffffff8, 0xa, 0x81, 0x2, 0x7, 0x8, 0x5, 0x640, 0x7, 0x947, 0x7, 0x0, 0x5, 0x1, 0x6, 0x8, 0x7fffffff]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x8a0}}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r9, 0x2) dup3(r9, r2, 0x0) 323.585419ms ago: executing program 0 (id=1742): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r2, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffffffffffffffd) 258.414575ms ago: executing program 1 (id=1744): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x0, 0x18}, 0xc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001380)={"84347f50237ee67c0be12170b2a0cdf6", 0x0, 0x0, {0x800, 0x1}, {0x3, 0x5}, 0x10, [0x8, 0x8b, 0x8000000000000001, 0xfffffffffffffff8, 0x4, 0x1, 0x9, 0x1ff, 0x8, 0x80, 0x47a, 0x14d, 0x3, 0x8, 0x1, 0x40]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001480)={"e7077041e5cc8d34f5d32e346acb9dcd", 0x0, 0x0, {0x4, 0xfe}, {0x4, 0xd}, 0x7, [0x5, 0xfffffffffffffc01, 0x1, 0x0, 0x7, 0x7fffffffffffffff, 0x447e, 0xfffffffffffffff7, 0x2, 0x4, 0x3ff, 0x7fff, 0xe, 0xfff, 0xa03c, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001580)={"f50d9d201e0a00bfe5f9483e1524a29a", r1, r2, {0xfff}, {0xc0b, 0x3}, 0x8000000000000000, [0x6, 0x6, 0x8, 0x80, 0xff, 0x0, 0x48bfffde, 0x5, 0x2, 0x9, 0x8001, 0x7, 0x2, 0xfffffffffffffffc, 0x1000, 0x5]}) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000002c0)={0x32, 0x0, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syncfs(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) 257.977555ms ago: executing program 4 (id=1745): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 257.478775ms ago: executing program 5 (id=1746): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r4, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r4, r0, 0x0, 0x3ffff) 256.924505ms ago: executing program 4 (id=1747): r0 = socket$inet6(0xa, 0x2, 0x40894af8) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) kcmp(0x0, r2, 0x3, r1, r0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000080)=[0xf, 0xfffffcb5, 0x8, 0xe, 0x1, 0xffffffff, 0x400, 0x94c]) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x10000, 0x0}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000003100)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000000, 0x200000000030, 0x200000000060], 0x0, 0x0, 0x0}, 0x108) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) sendmsg$inet(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="2f51fe118f6ce7a7e393310d826d1a0ca82daeca635e9fdd9742e328eb2fc2d29047f79295a2e0cc3579d34fc0356db15d41eae59c60dd1f0a49bac9ec96fa9d4edcbbd51c5a5485397f56b2b1448dce1d88ac183e046f77c532ba3169e3c936a8ec3844640f0ca98f704d5ac1b29358545d4de9e3fd3a536f", 0x79}, {&(0x7f0000001280)="abd545435e0dd3d298792c9f4c430788f90c361c4a47ee9c6c52b66f9d5dcff650203fa7cb251ff11b86b2476db45a7d248a7de020de46acde1ccbe991bd350c5a2ca11188e4b583e0c57071f0d1d15116ce87f4c8026bc769ab8e458dee68b26b2b577ef7e41a838264b1997557ab854ab0b5b66a868a0f98448a3de1ca0038817af3f02f066475ba015249ad99446e2b31105f006c4721a4442f370a7a1a5ffe8660d0a719315efdb5c1935433f49c8d11c7c9d3910971f84a67f48cb878ea76d83694b0451ce4f940843a4fda5e3db17ff3dad42a9d2c51b8a40733cf5c8fcf4d169c0d780dd417df79d798dd5854d4fae833fcbb2c46adb083b1d5c62eba56c2c7a48414f3e8dc0dbd750bb63f2b429bc65d14a165f96406234dcccb5299d9d39ef695663a75e91c2ec5a6b1d3616fa6024ed82a75f1ac8c692c2bae9e069e4f48706368038fa9551eae2f83298e9028b0c17a8260dd1c27c1cb568600261a3fd030c30fe1ee1bf8442b5f6075badd9b25ea870d2e861a42502bcd39adeced96f8ffeb48e9ec8b180ca5cbe8a0241a0a7a3964c045ad25773062239170ab86d779529783311b71c5e86d014a944fa2e300752eb86cfa9e276dcb8929e3eb501c49c81b519e5785fd3f0ad249c48d1fdaf194c6f3b9ba03afaafb5d0086f050abf8232bd33b2d993860879b64dcdffde95abfc9bb437032b6bd101a7b06448496cd797af44ec2e98d7db82aa815eff0c47425e56ffa8f49b92cc8bec67f2bc13d381439d0768253b88c5ccc227d04dd67a2bb7e427f78795894f4f760e33d4439ddab3a116fd901b835f89c79085fb832a89dcdb152e68ce4a98db50242d463d56c0ecf4e54f95749c60e0e5e0ffa33515c1a77b1ab4d40d167e1892e56c5da1c42f110a7fe4a0ccd8abedf28b7d1766a7618dd31f5c80856029d6201f4fa51bb1b021e1943257295e92133f4e3877a0dcb4154034a9bc6000b755c69fcff7bfa62f859483cef5f4fc1e32334af2d9c06d2b34ea560379b103b20d5d382460713ca209a2b6874bb56f95895a16eb121600af99073f4e071c86f6b02b5c3db665dba01d8fa1a4126f44a11430f1793554b5fa10a8465460d50820a71a2928cc72758246a0253f4d0cef37ca31c0331abb5180d3fd7fcc83bf8c0c02b29b24c51f303af348c169658f2302cd150b5b7382d6dda6667571c8a846a0bbecb345f2280d72db1c19a2ef34a59b543f52d84702a3380af3547b9ff7a9692d961f7e8ced147f181b12695696f970d935d8fc66cdd6b1b1c8598abd676f9b56c7d2e5521bfdbda81e0c19e1d270431218c8f8423027d96857ef6604c34613fa8331bfec64a3e8e5135f166930a2b6ad6d123d99ba1e5e90588ce5732af7a8e1dd0209dc49405befb3891eb50a8b5070875f79c51824c2fe0e0d88eececb81de9054df4889ab3a27dc28e66a6593670b5960566bf67d2e8ba45f5b86893c0d33b27fa68af9e147af2a9dceb444c5b55533530b266b8bb1f1724bc56a47ac9517c290d54dda4d944e07b0495009b7f5b240809af36abb3cc6b77fd494d15034ba8d794394e06a6e7ceb52940aa073d95b4d3ba242397a6bc9cac50e4e72012187bc321efc2a93e6d5126b89a718cd663b55765d54f708dc634002aa0edfd638f6e779bd4ff4a88a52c8b5e9a640c6e962f75dde687c95ca88cd3c64e83c7b4ba336361f35a8f104de4da774eaa1342709db72e4e4f2265b63ffc833238fbecb5992d97fef6dd92f59104d3db24bc6e5ab6d4a197083aade2eff1009a4252451808fd7049586c856a4824054b24d50deb11cd8cc70254dc07a6c75d5566b1cf92dab2968160225f2c30f73555082a76e307eb55976e8151622053e177fb7f6c3028d67c38c531d9564b809877ac9ed25ef3ebdb2eb4e79d69b8d45c765e70078211e8e46f0cf1ad8bc785b8233e9827475abf6aea85aea7b16c34fb36902c11ae384660824b7cbb10bfefa021b2db9cb5357ff4cca5dab67e444eeef392324c018c67a3b6c9521fc1524b9782931e2a35e0242ed3026c24ef0d84a8e81ece172c6163d500675ef60e692602ba98dd7cf8b061e8d11d8e10c0832c9377c841a61cd195a0fc1f9614e7676691eca1d0097f1228f303db61f9af7a29b0a9511d72dad8e429c357e3152ec2b1901ec1478367a59882934bd6030be93f85527f8515b61f2ccb521240e22e3d982ef15f921ca564fe8c3122450b65b5ff4e670582b994b42888192c733f4d9bb23f311fb18775a52072cdba1260ba36230e846465bbbc6340df64c9678a1b2b463a03d095e1bc18164fa3d6ded968d1bd3e21b6fe6b636e55281a8899299a5b48204082eb8165e468f9c63a079cd3357b46459b7b2d19df42d3d1717e1f96f949e3ef8e128d71099517da627c1f8a394f94e598976ad20c755e7dd9a854f2a436c553f05b63cbff1c88f8970d1b92baba0aeadaabf6f8bbd150aa7a5cfb61e73bc605049ea45c73366af06cac5c49e792077fea056077f6adfdf24d6407263bd9c414b6bfb4a150b5cbb18cb38ca102890013e67601b7ca068bdc235c23e8e5618d2f65c2f5b26e4d7a1a7578f6222ac0ca67ec4c47b5d2fbfc820fb53b9c6988db722473dd6f6856c09054d9552f3e9c4d818365c98f72166acb3a3f7da8df3b6f325a7250cc89f008e2b8a66f30e2889ba0b5a028bb6faf98afc5360b0a5f0612464b2de2734ec4ed969cdafc49ee3cc01bc0ef1caa3b60a0bff7145de753cef3f3e36dda2004bb7188b90fe7d76b55c0426096959e5aed0423cb0f07e610f173d27dbfdfc492775fe42b815ac127a06c567f010a9b125f9ed475531eda815bdbbcc577612c78b09ef58530db40afd62e5937519f30c417ed33438c6eaf947f159a9e143a409c2581ff5f725314aae3c2e3e2cdec150525b6330f83c2f5c8044398f1626eb219b2d7a96a341ca71479d955710cdfc7480e4a9ab18a5f5e89bcad6c37f5cb5adec5ffd8e40864b5c61a322c90964db55491191773690818e1cebb0ec807cc6e27f4aab5a13e4a66e8648eeeb86f2870f955421a239bd4acc8117afb33d1458cb9fbe0baf5d19bc009ad6d17c804c1969cd6dd1909dc2898fc2d6ddfcc4764c2caae2d5bd158ce940b615357589e2a3e61e41f3bf0442a121ea55891d84152aeb5a991db02a477d9a44e1329d1e9234e1aba92e87e551bb50947e0ef420167ee040c26d9db11265456c7a07738f290416f4c811074a4c7d48993c5bd6cc5c3a9c5dbf24faf6217a7fe2964ad3109e747b5faa35ba8b365f74b7036b23e4699ec328d1e4e402b157cb0d2ee1d44e75b29846a5d5106669503e2db7fdef3156853fdb2ffb6460ed447f1903c9771976dc207dcb84d3dec2f9f8f8b2ee8ec45389d6a2043a5cbff0a0ba1e1e2a184cabe9774b3d1cd11c52630c87594f4b1ad2296bd7470b89319beff6c937866477a861888b67eef6f306e0548e420928ba57429ec5d6731f35f0c673449aff14596d6d7d83579689b4e01add07a94adc9a96bb42e6ac6d8e15f750d9bb9460d3100fcc15d4d5957120daed7dfb7945f57b35c711208502ec37b9f09f2ca63a0de5eaba34fa5cb1eed39f9792249bb84e5131395fce0d43b1f5b7c322a4ad6255301641d97cafebd5eb749279971fce26d11cd79bf14dfcfdc03748c97b8c6b6b449e2ac4cd06293a15f0697d88c8fb494a613d3d92360e382e1a645da1135b62f93452c6aeae64243b4bd69c6062adbacacd709e889db17c09001da83516e11b6d85a3ec2215352288df5d210e47ad303f37cd7494c5d3b012e6d3baaa2cb050090756aa5080e2243f27847bc1900b05b13d465de888f63f8d4e6351f7a11b128d85bc9bb0574db9bfc78ed36ef5877f81205fdcb82ea1ba6e6b5e9115e684c1df21964097185e974b60c3e1e15b579df768db6bd3d084e28adcdb8844cce5d641949f947ef215a0aeb139b3760a92fe7432076517d009c76bbce04db75a113220f52757a1b1cc580496e9ad883dbae66a6b01ac729a60062d690ee76ac9bcdcb905fe83451fd5d24f8b87ed478a708b71b37e6b872aa3ea5c7b35c5f7903c8a725e7831f5b33d4884ab630d9a0cfa17cf23d0b075c3996a55a5cbc922bb45ce494f48d048ce484ca25884c4aba04ac5750c48dcce16f947e3e0aa6a5ff02bfbb5f1c0042a79e63a197324f162980bf1a68e3721da4be5530173969d8f9b17247c8d6dc4196d6cc4f277475c04e63fdf66176c5eafeab40daa50819cf1891dd42b7a97ab19c4ffce1cd167d5fa6521afa4088d7d87a2a180332b579d1977bfdf4668f156c3b2d787f97b3159ca5de5903d8433656af2115ba165348e5e651efc6bd1af8abcbe59cea78689e7e6f236abc8dc380df41f4fe25f5560a531f910cae63680d672180b80d11ad70a50a0cf380280271f08480c0d8c302aa483718866763be868c839197779e41d6a51afee9dcbbbae363f4975230047de07aafc622a3e010d5d6051a984eef82f52e8e0d226db20db3a2e35bc0873fb220041170b8f63afc115d2e7410f484d6e33235b49765cf32f623a28a214547dd0c614ce0b05360944e5d03e7020aed80007003d45e1e1fd2bf661dae965c5102f7c72e5f19d651a039e73e51d4cdd07818fe49ec94d0be8ff3c60ed8512a4e08c11f2aab52aa6faa2edfe79c6d0a7c7a7293d247d710c9cb6d9efb9e264c65cdd390ae5607325ea2ff3ccb8abc12320489383d5d4a01cbbbe67b96e78b829f627afce7bb405dd5f2cdf2642b68b43133751f099870833b19254b706fa966dbc932bc7468700cca214a6012df8aaceb5f390af267ffca87da10048c20085246a21c4b462d20f82e3035ff7fba179b9e9e5564555e2dc954fad8fe7d067d6fdfdef8a2ca5bd8b2cc9b41059f4080b940be8698ac1928d42d21b583086c1ad8a7e0355c36fe5bbc4c5252525676126bfc78b6ac30ed5ca2906c9cab969a8d5d66aa132b245fb9f212acd74b4aa179bce59e4cb1cbdbb7699bde6c1a56d3d013d7761e180008a8f4edbfd19a64727ae95c9e1feaa0e9c6bb8ee1c8d29e3ccc8544e5526b44448ea0e7a60c0475c8ee4ec0db8d21f3ab4d69a9248cfde70b64621a4cd3a2c91aa001aa456d82ca92c858991dc1214f01b680e5adca471c7c2e9a6aab050c9b068dd61251856179e8ef4019f166d79bce6b494f0177f982289aa1ff34441f5ce12dbde48086dce9280b80bbe4208c6fb1eaaebcae1076f37ddf0df2a8f275f6620c90316162f97e35148e1c4f8303aebddc00b53e8bc685601943bbeb06bdb032818c93b4ad39149fe4b8197d85505b1fda177730b647e9a9a617e9ddf2667253913cb36642a2c62fe87ddf5cd8a13846cd6b00c64ebaa70b29b86e05a35d2284d1f166ac3c9b8f66c754e9baa953cc986e7726e3e2732585b8c2c768ff6bca503d2750dc3fcbbaa046ba064456553fa362ad73a60c29b20c253f50b8a2bc800d829e09e20bcb4fbcd835da334a1d8e5eeb5e919d0b7b5b1cbc16615a3deccca2ab252b138cb2e38a87ab15dc3ed753731756a17ff081ff9f34550ded81142ea301caeb4e3d42833e3acca6886c827da6e3f979cbfb1dc375ababe236e00748b00ebfa089a175a15b32114067c8fb0d66e548a957add269279bef584f0cf76b1ecaa722ff9e9ea6100c05a3f4f6f925b0fc0967a4b83a591cf22a5a36c9cc7d7b180848ac2f3601014544b53f4148c49f1ce5378b64bfa8439ec75bd8fea2fd11f99a0642cbeefb27c4", 0x1000}, {&(0x7f0000000280)="9e4f774b58ff131b304407a93f6f341e17e0512854baca793639e938f1b43a7e15305927f3ce93ec88d66648fdad64196f7ab5f895755a4af257ca2bc80ade9c696e9838761e7d76fd619e1fcfb0acf84b4b263652d81d623870edd50619b58045ded6935d3907f3e62beeb00fcb916848821be213fffdae846549eeedf5309b0e75c07b0daaee784c244ee8a054197a2a359c1da88d3ee64ec6af8cce44c8a4573008fe31f46d6bd0bdf2d0f69dbc467364029b3df89a2fb826ba5868b5e0bf27a7c5d76819a899f821c640b20b39e71452db526de189ee80a263649dae0e7bc2397d672ad4b7582323b4e00e37eda7b437aad1", 0xf4}, {&(0x7f0000000380)="9985e3f5bdd1bb16dfdbac5fda11aed89209504e146a7f547db24e82f9d7ecb4c15444e3ec6158edba6e73002b3fccea80c020e3904fda912ce48883eb63a634d68f4e054ec6dd", 0x47}], 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/376], 0x178}, 0x200d8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) clock_getres(0xeaffffff, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r7, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0xfffa, 0x2}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffff00}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}]}}]}, 0x4c}}, 0x24004000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 142.317517ms ago: executing program 4 (id=1748): syz_emit_ethernet(0xb0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) 119.684739ms ago: executing program 3 (id=1749): semget$private(0x0, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x110, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xfc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x0, 0x3, 0x1000, {0x0, 0x2, 0x0, 0x0, 0x5}, {0x2, 0x0, 0xff, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3ff, 0x9, 0x2, 0x7, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x110}}, 0x0) syz_open_dev$usbfs(0x0, 0x800000001fe, 0x82) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r3, 0x0, 0x6}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=0x0, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r7, r7, 0x20, 0x0, @val=@perf_event={0x3}}, 0x18) lseek(r8, 0x2, 0x4) fcntl$setlease(r7, 0x400, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000370400000040ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83450500000000002000128009000100697069700000000010000280040013000500090089000000e02734e49316398eab6910a6feebc6b04c0ab3784fc9b6409bc6f49332967ab9bddf67ab6db29e4d8d12298fb1a3f4455b633d953bd7c7bf76d2b50d133277baaa354f4769ff48f363fe306ee74e6831d855d884511372cb81b88e80707b34b0df066b5de69affbc51f9316354e0bbd3"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x4, @remote, 0x7af}}}, &(0x7f0000000080)=0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) fchdir(0xffffffffffffffff) 104.58104ms ago: executing program 4 (id=1750): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) 72.793583ms ago: executing program 4 (id=1751): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0200000004000000050000004301000014100000", @ANYRES32, @ANYBLOB="0000000000000000000000800000000000000000c49b7dede9364485d2097e0e867a7b27d8b393019e97fcf6b6b621b1fbbdf3138a52a2e3654490316017b855160aa1dbc826fcd33ac193c8e9406f18e5bb909162ff4a181ae58df8e2bfbbafa2bb6ddad3246ee42816f36431aebc4074cecbe00382faa0be7a6353d8b075220d251b2845e258d24dfedd0cfa4d4cc7de0348b3508443f9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2, 0x0, 0x8}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) r8 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000f00)=""/183, 0xb7}, {&(0x7f0000000e40)=""/135, 0x87}], 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x20800, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000280)=""/73, 0x49}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/82, 0x52}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/67, 0x43}], &(0x7f00000001c0)=[0x10001, 0x18c, 0x1, 0x101, 0x5, 0xa], 0x5}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) 588.54µs ago: executing program 3 (id=1752): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7c}, 0x94) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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", @ANYBLOB="ff0b16c16445a382ef61aafd223522805b76c4", @ANYRESOCT, @ANYRESHEX=r0, @ANYRES8=r1], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x175, &(0x7f0000000bc0)=ANY=[@ANYRES64=r4, @ANYRES8=r0, @ANYBLOB="d830144927b76f98d64c4752b94a36f636eebc19cc58ce9b4a236d801c27aff97405ab3f3ffabacfc4ad2867ee47f377e34e6161063220b25786e97b3d59c1e784bfe33da6fa5f10c083a480dc7f793ce476f208ddc7162c763e71541634042096789e", @ANYRES64=r2, @ANYBLOB="5d604ed807095291ebb31c2ff6c86a00fdd91a22040befe8402ccc2515189a48f18d43851c685ded6dc8300612d0d91f8e6a28b4a4dda2366c2e8e8d119e90644c4ce003213270278908160491bc3230957f67fd73fa2d133925c374690dee30c1007928e14c10930dd8733ded15d77807d3ffa965e4addc8524849c3f88d9cfa6daf2df10dcf8a22a713632d5e9ee0903a91206778dd408783f2c97ae82dfcecada15a89fc321aae66e1c64a91687612401b9623fee306bbd0ac14a4f5af786ad6c999c096f7a626a79acd3e09101ead28134762d626bc1", @ANYRES64=r3, @ANYRESOCT=r4, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022}]}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r11 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r11, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r13 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r13, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r14 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r14, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) r15 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='cachefiles_lookup\x00', r10}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYBLOB="3ef5550a814069094bbaef927e2fa8cab8b8d941bfb067219cdd085e7594ce76eba7b0227f3b863d37cb5378751e60560c874aa1fd327eef6a448b6a6016b2ad24137cfc5bfc478ad65c14def1575ad0d5af14e4", @ANYRES64=r15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 0s ago: executing program 4 (id=1753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffef4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) fchmod(0xffffffffffffffff, 0xa) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): 00000000 r/w without journal. Quota mode: writeback. [ 108.623833][ T7077] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.712435][ T7088] 9pnet_fd: Insufficient options for proto=fd [ 108.732102][ T7086] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 108.744160][ T7086] SELinux: failed to load policy [ 108.863076][ T7093] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 108.869909][ T7093] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 108.877738][ T7093] vhci_hcd vhci_hcd.0: Device attached [ 108.911837][ T7093] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 108.918547][ T7093] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.926212][ T7093] vhci_hcd vhci_hcd.0: Device attached [ 108.943036][ T7093] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 108.947177][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.949816][ T7093] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.966929][ T7093] vhci_hcd vhci_hcd.0: Device attached [ 108.981949][ T7093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 108.992176][ T7104] loop3: detected capacity change from 0 to 128 [ 108.999636][ T7093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.015010][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.026971][ T4262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.037991][ T7100] vhci_hcd: connection closed [ 109.038230][ T37] vhci_hcd: stop threads [ 109.038389][ T7097] vhci_hcd: connection closed [ 109.044229][ T37] vhci_hcd: release socket [ 109.044253][ T37] vhci_hcd: disconnect device [ 109.064296][ T7094] vhci_hcd: connection closed [ 109.073675][ T37] vhci_hcd: stop threads [ 109.083174][ T37] vhci_hcd: release socket [ 109.087814][ T37] vhci_hcd: disconnect device [ 109.103144][ T6863] vhci_hcd: vhci_device speed not set [ 109.116847][ T7111] x_tables: unsorted underflow at hook 3 [ 109.126132][ T37] vhci_hcd: stop threads [ 109.130508][ T37] vhci_hcd: release socket [ 109.133488][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 109.135357][ T37] vhci_hcd: disconnect device [ 109.161817][ T7102] macvlan8: entered allmulticast mode [ 109.209616][ T7119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7119 comm=syz.5.1039 [ 109.233534][ T23] usb usb10-port1: unable to enumerate USB device [ 109.242909][ T7122] 9pnet_fd: Insufficient options for proto=fd [ 109.243700][ T7120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1040'. [ 109.287620][ T7119] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.289856][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'. [ 109.412708][ T7130] loop0: detected capacity change from 0 to 1024 [ 109.423711][ T7130] EXT4-fs: Ignoring removed orlov option [ 109.449152][ T7130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.482961][ T7135] loop4: detected capacity change from 0 to 1024 [ 109.490238][ T7136] loop5: detected capacity change from 0 to 1024 [ 109.492801][ T7135] EXT4-fs: Ignoring removed orlov option [ 109.501972][ T7136] EXT4-fs: Ignoring removed orlov option [ 109.512321][ T7136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.544193][ T7135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.655611][ T7104] syz.3.1034: attempt to access beyond end of device [ 109.655611][ T7104] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 109.669485][ T7104] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 109.778286][ T7148] x_tables: unsorted underflow at hook 3 [ 109.809049][ T7154] 9pnet_fd: Insufficient options for proto=fd [ 109.844437][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 109.895662][ T7158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7158 comm=syz.1.1053 [ 109.980405][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.992788][ T7158] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.994108][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.109685][ T7174] loop0: detected capacity change from 0 to 128 [ 110.160530][ T7178] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 110.167220][ T7178] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 110.175136][ T7178] vhci_hcd vhci_hcd.0: Device attached [ 110.210487][ T7186] 9pnet_fd: Insufficient options for proto=fd [ 110.219900][ T7178] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 110.226621][ T7178] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 110.234764][ T7178] vhci_hcd vhci_hcd.0: Device attached [ 110.253901][ T7178] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 110.260616][ T7178] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 110.268308][ T7178] vhci_hcd vhci_hcd.0: Device attached [ 110.270535][ T4262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.300790][ T7190] x_tables: unsorted underflow at hook 3 [ 110.306574][ T7196] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.340225][ T7178] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.341693][ T7195] loop1: detected capacity change from 0 to 1024 [ 110.350747][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 110.397166][ T7191] vhci_hcd: connection closed [ 110.397424][ T7180] vhci_hcd: connection closed [ 110.400422][ T7195] EXT4-fs: Ignoring removed orlov option [ 110.402536][ T7187] vhci_hcd: connection closed [ 110.414579][ T37] vhci_hcd: stop threads [ 110.418204][ T7204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7204 comm=syz.3.1069 [ 110.419399][ T37] vhci_hcd: release socket [ 110.419416][ T37] vhci_hcd: disconnect device [ 110.438454][ T7202] loop5: detected capacity change from 0 to 1024 [ 110.448568][ T37] vhci_hcd: stop threads [ 110.456672][ T37] vhci_hcd: release socket [ 110.457029][ T7202] EXT4-fs: Ignoring removed orlov option [ 110.461216][ T37] vhci_hcd: disconnect device [ 110.472697][ T23] usb 10-1: enqueue for inactive port 0 [ 110.472836][ T37] vhci_hcd: stop threads [ 110.479563][ T3400] usb usb12-port1: attempt power cycle [ 110.483636][ T37] vhci_hcd: release socket [ 110.495286][ T37] vhci_hcd: disconnect device [ 110.504577][ T7195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.518732][ T7204] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 110.530566][ T7202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.693988][ T23] usb 10-1: enqueue for inactive port 0 [ 110.798057][ T7174] syz.0.1061: attempt to access beyond end of device [ 110.798057][ T7174] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.811668][ T7174] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 110.821510][ T7185] syz.0.1061: attempt to access beyond end of device [ 110.821510][ T7185] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.835689][ T7185] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 110.847264][ T7185] syz.0.1061: attempt to access beyond end of device [ 110.847264][ T7185] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.861289][ T7185] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 110.962475][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.984460][ T4262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.017379][ T7227] 9pnet_fd: Insufficient options for proto=fd [ 111.026315][ T7230] x_tables: unsorted underflow at hook 3 [ 111.039790][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1080'. [ 111.074581][ T7230] macvlan9: entered allmulticast mode [ 111.082219][ T7235] loop1: detected capacity change from 0 to 1024 [ 111.093503][ T7237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7237 comm=syz.4.1081 [ 111.108390][ T7235] EXT4-fs: Ignoring removed orlov option [ 111.117015][ T7235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.192614][ T7249] loop5: detected capacity change from 0 to 128 [ 111.201210][ T7237] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 111.270994][ T7254] loop3: detected capacity change from 0 to 1024 [ 111.288352][ T7258] vhci_hcd vhci_hcd.0: port 0 already used [ 111.295584][ T7254] EXT4-fs: Ignoring removed orlov option [ 111.305121][ T7258] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 111.311819][ T7258] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 111.319637][ T7258] vhci_hcd vhci_hcd.0: Device attached [ 111.329748][ T7254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.345932][ T7258] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 111.352628][ T7258] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 111.360407][ T7258] vhci_hcd vhci_hcd.0: Device attached [ 111.368001][ T7258] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.378048][ T7258] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.401938][ T7264] vhci_hcd: connection closed [ 111.402219][ T3344] vhci_hcd: stop threads [ 111.411238][ T3344] vhci_hcd: release socket [ 111.415868][ T3344] vhci_hcd: disconnect device [ 111.421474][ T7261] vhci_hcd: connection closed [ 111.439342][ T37] vhci_hcd: stop threads [ 111.448570][ T37] vhci_hcd: release socket [ 111.453012][ T37] vhci_hcd: disconnect device [ 111.470255][ T7268] loop4: detected capacity change from 0 to 1024 [ 111.482673][ T7268] EXT4-fs: Ignoring removed orlov option [ 111.494114][ T7268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.553603][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.673342][ T1043] usb usb4-port1: attempt power cycle [ 111.757351][ T7257] syz.5.1086: attempt to access beyond end of device [ 111.757351][ T7257] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 111.771165][ T7257] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 111.786048][ T7281] 9pnet_fd: Insufficient options for proto=fd [ 111.844605][ T23] usb usb10-port1: attempt power cycle [ 111.878149][ T7285] x_tables: unsorted underflow at hook 3 [ 111.889787][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'. [ 111.902045][ T7285] macvlan15: entered allmulticast mode [ 111.913132][ T6863] vhci_hcd: vhci_device speed not set [ 111.969759][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.979728][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.000965][ T7292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7292 comm=syz.1.1100 [ 112.027241][ T7296] loop5: detected capacity change from 0 to 1024 [ 112.046880][ T7296] EXT4-fs: Ignoring removed orlov option [ 112.063414][ T7296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.106599][ T7292] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 112.148077][ T7311] loop3: detected capacity change from 0 to 128 [ 112.239214][ T7318] loop0: detected capacity change from 0 to 1024 [ 112.251324][ T7322] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 112.254123][ T7318] EXT4-fs: Ignoring removed orlov option [ 112.257978][ T7322] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 112.271442][ T7322] vhci_hcd vhci_hcd.0: Device attached [ 112.290259][ T7320] x_tables: unsorted underflow at hook 3 [ 112.297347][ T7322] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 112.303913][ T7322] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.304756][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 112.311615][ T7322] vhci_hcd vhci_hcd.0: Device attached [ 112.328674][ T7318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.343660][ T3400] usb usb12-port1: unable to enumerate USB device [ 112.352450][ T7329] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 112.354619][ T7320] macvlan16: entered allmulticast mode [ 112.359180][ T7329] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.372427][ T7329] vhci_hcd vhci_hcd.0: Device attached [ 112.397017][ T7322] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.407436][ T7322] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.424536][ T7325] vhci_hcd: connection closed [ 112.424744][ T7323] vhci_hcd: connection closed [ 112.429627][ T7330] vhci_hcd: connection closed [ 112.429738][ T3344] vhci_hcd: stop threads [ 112.443428][ T3344] vhci_hcd: release socket [ 112.448053][ T3344] vhci_hcd: disconnect device [ 112.464894][ T3344] vhci_hcd: stop threads [ 112.469208][ T3344] vhci_hcd: release socket [ 112.473735][ T3344] vhci_hcd: disconnect device [ 112.479823][ T3344] vhci_hcd: stop threads [ 112.484280][ T3344] vhci_hcd: release socket [ 112.488755][ T3344] vhci_hcd: disconnect device [ 112.518374][ T7334] loop1: detected capacity change from 0 to 1024 [ 112.550192][ T7334] EXT4-fs: Ignoring removed orlov option [ 112.560237][ T7334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.607328][ T4262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.623137][ T6863] vhci_hcd: vhci_device speed not set [ 112.759039][ T7311] bio_check_eod: 1 callbacks suppressed [ 112.759059][ T7311] syz.3.1106: attempt to access beyond end of device [ 112.759059][ T7311] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 112.778318][ T7311] buffer_io_error: 1 callbacks suppressed [ 112.778338][ T7311] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 112.796841][ T7328] syz.3.1106: attempt to access beyond end of device [ 112.796841][ T7328] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 112.810450][ T7328] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 112.887924][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.978279][ T7349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7349 comm=syz.0.1118 [ 113.038659][ T7361] x_tables: unsorted underflow at hook 3 [ 113.049301][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1122'. [ 113.054496][ T7365] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.062023][ T7361] macvlan7: entered allmulticast mode [ 113.089130][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.109527][ T29] kauditd_printk_skb: 796 callbacks suppressed [ 113.109546][ T29] audit: type=1326 audit(1760582350.922:12184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b05f3eec9 code=0x7ffc0000 [ 113.125984][ T7367] loop4: detected capacity change from 0 to 1024 [ 113.147644][ T7367] EXT4-fs: Ignoring removed orlov option [ 113.185638][ T29] audit: type=1326 audit(1760582350.922:12185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f4b05f3eec9 code=0x7ffc0000 [ 113.209417][ T29] audit: type=1326 audit(1760582350.922:12186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b05f3eec9 code=0x7ffc0000 [ 113.233243][ T29] audit: type=1326 audit(1760582350.922:12187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b05f3eec9 code=0x7ffc0000 [ 113.252669][ T7374] loop0: detected capacity change from 0 to 128 [ 113.256901][ T29] audit: type=1326 audit(1760582350.922:12188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b05f3eec9 code=0x7ffc0000 [ 113.286980][ T29] audit: type=1326 audit(1760582350.922:12189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4b05f3eec9 code=0x7ffc0000 [ 113.309025][ T7377] loop5: detected capacity change from 0 to 1024 [ 113.311898][ T29] audit: type=1326 audit(1760582350.922:12190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4b05f3ef03 code=0x7ffc0000 [ 113.335478][ T7377] EXT4-fs: Ignoring removed orlov option [ 113.342348][ T29] audit: type=1326 audit(1760582350.942:12191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4b05f3d97f code=0x7ffc0000 [ 113.372122][ T29] audit: type=1326 audit(1760582350.942:12192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4b05f3ef57 code=0x7ffc0000 [ 113.374003][ T7377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.395979][ T29] audit: type=1326 audit(1760582350.942:12193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.4.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b05f3d710 code=0x7ffc0000 [ 113.467772][ T7367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.523344][ T1043] usb usb4-port1: unable to enumerate USB device [ 113.545769][ T7385] vhci_hcd vhci_hcd.0: port 0 already used [ 113.572134][ T7385] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 113.578712][ T7385] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 113.586398][ T7385] vhci_hcd vhci_hcd.0: Device attached [ 113.618939][ T7385] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 113.625591][ T7385] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 113.633314][ T7385] vhci_hcd vhci_hcd.0: Device attached [ 113.643670][ T7385] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.652657][ T7385] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.763229][ T3757] vhci_hcd: vhci_device speed not set [ 113.809726][ T4262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.823181][ T3757] usb 7-1: new full-speed USB device number 6 using vhci_hcd [ 113.882152][ T7404] loop5: detected capacity change from 0 to 1024 [ 113.890154][ T7374] syz.0.1128: attempt to access beyond end of device [ 113.890154][ T7374] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 113.903744][ T7374] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 113.914224][ T7404] EXT4-fs: Ignoring removed orlov option [ 113.922770][ T7374] syz.0.1128: attempt to access beyond end of device [ 113.922770][ T7374] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 113.936617][ T7374] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 113.947679][ T7404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.963197][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.013029][ T7410] x_tables: unsorted underflow at hook 3 [ 114.020050][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 114.032547][ T7410] macvlan9: entered allmulticast mode [ 114.050821][ T7413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7413 comm=syz.1.1139 [ 114.125792][ T7420] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 114.135943][ T7420] SELinux: failed to load policy [ 114.142157][ T7413] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.160305][ T7422] loop0: detected capacity change from 0 to 2048 [ 114.199758][ T7427] loop1: detected capacity change from 0 to 1024 [ 114.206634][ T7427] EXT4-fs: Ignoring removed orlov option [ 114.214073][ T7422] loop0: p1 < > p4 [ 114.218310][ T7427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.224293][ T7422] loop0: p4 size 8388608 extends beyond EOD, truncated [ 114.312872][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 114.324236][ T7394] vhci_hcd: connection closed [ 114.324387][ T7390] vhci_hcd: connection reset by peer [ 114.325307][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 114.345139][ T31] vhci_hcd: stop threads [ 114.349513][ T31] vhci_hcd: release socket [ 114.354298][ T31] vhci_hcd: disconnect device [ 114.368384][ T31] vhci_hcd: stop threads [ 114.372696][ T31] vhci_hcd: release socket [ 114.377361][ T31] vhci_hcd: disconnect device [ 114.403675][ T7437] loop4: detected capacity change from 0 to 1024 [ 114.417477][ T7437] EXT4-fs: Ignoring removed orlov option [ 114.563268][ T7445] loop0: detected capacity change from 0 to 128 [ 114.710150][ T7451] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 114.720645][ T7451] SELinux: failed to load policy [ 114.739436][ T7454] loop1: detected capacity change from 0 to 128 [ 114.773586][ T7456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7456 comm=syz.5.1156 [ 114.852213][ T7456] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.124176][ T7473] loop5: detected capacity change from 0 to 512 [ 115.141475][ T7473] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 115.162831][ T7473] EXT4-fs (loop5): orphan cleanup on readonly fs [ 115.177351][ T7473] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.1163: corrupted inode contents [ 115.193502][ T23] usb usb10-port1: unable to enumerate USB device [ 115.203113][ T7473] EXT4-fs (loop5): Remounting filesystem read-only [ 115.211904][ T7483] loop3: detected capacity change from 0 to 1024 [ 115.218579][ T7473] EXT4-fs (loop5): 1 truncate cleaned up [ 115.223846][ T7452] syz.0.1151: attempt to access beyond end of device [ 115.223846][ T7452] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 115.224684][ T7483] EXT4-fs: Ignoring removed orlov option [ 115.238307][ T7452] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 115.254060][ T57] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 115.264892][ T57] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 115.276215][ T57] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 115.290533][ T7445] syz.0.1151: attempt to access beyond end of device [ 115.290533][ T7445] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 115.304276][ T7445] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 115.311620][ T7479] loop4: detected capacity change from 0 to 512 [ 115.322761][ T7445] syz.0.1151: attempt to access beyond end of device [ 115.322761][ T7445] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 115.336437][ T7445] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 115.354195][ T7479] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm ÿ: ea_inode file size=0 entry size=6 [ 115.369496][ T7479] EXT4-fs (loop4): 1 orphan inode deleted [ 115.384756][ T7454] syz.1.1155: attempt to access beyond end of device [ 115.384756][ T7454] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 115.399424][ T7454] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 115.432181][ T7457] syz.1.1155: attempt to access beyond end of device [ 115.432181][ T7457] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 115.446285][ T7457] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 115.473278][ T7454] syz.1.1155: attempt to access beyond end of device [ 115.473278][ T7454] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 115.486885][ T7454] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 115.524473][ T7493] vhci_hcd vhci_hcd.0: port 0 already used [ 115.530855][ T7492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7492 comm=syz.5.1168 [ 115.555130][ T7493] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 115.561701][ T7493] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.569434][ T7493] vhci_hcd vhci_hcd.0: Device attached [ 115.587235][ T7493] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 115.594078][ T7493] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.601919][ T7493] vhci_hcd vhci_hcd.0: Device attached [ 115.628151][ T7493] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.637843][ T7492] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.637972][ T7493] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.809630][ T7507] loop5: detected capacity change from 0 to 8192 [ 115.836000][ T7521] loop4: detected capacity change from 0 to 128 [ 115.875420][ T4731] loop5: p2 p3 p4[EZD] [ 115.881553][ T4731] loop5: p3 start 360447 is beyond EOD, truncated [ 115.884003][ T7523] loop3: detected capacity change from 0 to 512 [ 115.888210][ T4731] loop5: p4 size 264072 extends beyond EOD, truncated [ 115.897617][ T7526] loop1: detected capacity change from 0 to 2048 [ 115.914166][ T7523] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 115.918895][ T7507] loop5: p2 p3 p4[EZD] [ 115.922738][ T7523] EXT4-fs (loop3): orphan cleanup on readonly fs [ 115.935631][ T7523] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.1179: corrupted inode contents [ 115.937732][ T7507] loop5: p3 start 360447 is beyond EOD, truncated [ 115.954149][ T7507] loop5: p4 size 264072 extends beyond EOD, truncated [ 115.963775][ T7523] EXT4-fs (loop3): Remounting filesystem read-only [ 115.972799][ T7523] EXT4-fs (loop3): 1 truncate cleaned up [ 115.973235][ T3304] loop1: p1 < > p4 [ 115.984301][ T3344] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 115.995106][ T3344] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 116.006644][ T3344] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 116.017342][ T3304] loop1: p4 size 8388608 extends beyond EOD, truncated [ 116.051579][ T7526] loop1: p1 < > p4 [ 116.057452][ T7526] loop1: p4 size 8388608 extends beyond EOD, truncated [ 116.118132][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 116.129759][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 116.153439][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 116.163406][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 116.230882][ T7536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7536 comm=syz.3.1183 [ 116.245559][ T7537] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 116.252121][ T7537] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 116.260018][ T7537] vhci_hcd vhci_hcd.0: Device attached [ 116.266622][ T7498] vhci_hcd: connection closed [ 116.266799][ T7500] vhci_hcd: connection closed [ 116.271796][ T3344] vhci_hcd: stop threads [ 116.274555][ T7537] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 116.276583][ T3344] vhci_hcd: release socket [ 116.280765][ T7537] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 116.287346][ T3344] vhci_hcd: disconnect device [ 116.291847][ T7537] vhci_hcd vhci_hcd.0: Device attached [ 116.309746][ T3344] vhci_hcd: stop threads [ 116.314258][ T3344] vhci_hcd: release socket [ 116.318770][ T3344] vhci_hcd: disconnect device [ 116.319898][ T7537] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 116.330388][ T7537] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 116.338057][ T7537] vhci_hcd vhci_hcd.0: Device attached [ 116.346201][ T7537] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 116.355180][ T7536] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.374427][ T7537] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 116.409906][ T7546] loop4: detected capacity change from 0 to 1024 [ 116.426146][ T7546] EXT4-fs: Ignoring removed orlov option [ 116.433810][ T7542] vhci_hcd: connection closed [ 116.433966][ T7538] vhci_hcd: connection closed [ 116.433975][ T7540] vhci_hcd: connection closed [ 116.444045][ T3344] vhci_hcd: stop threads [ 116.453281][ T3344] vhci_hcd: release socket [ 116.457802][ T3344] vhci_hcd: disconnect device [ 116.467365][ T7550] 9pnet: Could not find request transport: fd0x0000000000000003 [ 116.475868][ T3344] vhci_hcd: stop threads [ 116.480251][ T3344] vhci_hcd: release socket [ 116.484735][ T3344] vhci_hcd: disconnect device [ 116.489487][ T23] vhci_hcd: vhci_device speed not set [ 116.495432][ T3344] vhci_hcd: stop threads [ 116.499699][ T3344] vhci_hcd: release socket [ 116.504239][ T3344] vhci_hcd: disconnect device [ 116.620635][ T7562] loop3: detected capacity change from 0 to 1024 [ 116.631201][ T7562] EXT4-fs: Ignoring removed orlov option [ 116.700415][ T7566] loop5: detected capacity change from 0 to 2048 [ 116.743793][ T7566] loop5: p1 < > p4 [ 116.754008][ T7566] loop5: p4 size 8388608 extends beyond EOD, truncated [ 116.825825][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1192'. [ 116.846152][ T7572] x_tables: unsorted underflow at hook 3 [ 116.870467][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 116.882010][ T7581] loop4: detected capacity change from 0 to 128 [ 116.889874][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 116.890120][ T7579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7579 comm=syz.5.1195 [ 116.903238][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 116.919967][ T7572] macvlan10: entered allmulticast mode [ 116.977269][ T7579] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 117.005080][ T7587] loop1: detected capacity change from 0 to 1024 [ 117.014648][ T7587] EXT4-fs: Ignoring removed orlov option [ 117.057567][ T7584] 9pnet: Could not find request transport: fd0x0000000000000003 [ 117.363558][ T7609] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 117.384125][ T7612] x_tables: unsorted underflow at hook 3 [ 117.391302][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'. [ 117.393588][ T7609] SELinux: failed to load policy [ 117.404828][ T7612] macvlan11: entered allmulticast mode [ 117.444061][ T7617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7617 comm=syz.3.1210 [ 117.462279][ T7618] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 117.468934][ T7618] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.476750][ T7618] vhci_hcd vhci_hcd.0: Device attached [ 117.491546][ T7618] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 117.498125][ T7618] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.505939][ T7618] vhci_hcd vhci_hcd.0: Device attached [ 117.518332][ T7629] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 117.528928][ T7618] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9) [ 117.535670][ T7618] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.543929][ T7618] vhci_hcd vhci_hcd.0: Device attached [ 117.556405][ T7618] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 117.569016][ T7627] 9pnet_fd: Insufficient options for proto=fd [ 117.572469][ T7618] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 117.590961][ T7633] loop4: detected capacity change from 0 to 1024 [ 117.608961][ T7630] vhci_hcd: connection closed [ 117.609096][ T7619] vhci_hcd: connection closed [ 117.609216][ T7623] vhci_hcd: connection closed [ 117.614431][ T31] vhci_hcd: stop threads [ 117.628620][ T31] vhci_hcd: release socket [ 117.633060][ T31] vhci_hcd: disconnect device [ 117.639913][ T7633] EXT4-fs: Ignoring removed orlov option [ 117.666208][ T31] vhci_hcd: stop threads [ 117.670579][ T31] vhci_hcd: release socket [ 117.675151][ T31] vhci_hcd: disconnect device [ 117.680077][ T31] vhci_hcd: stop threads [ 117.684378][ T31] vhci_hcd: release socket [ 117.688908][ T31] vhci_hcd: disconnect device [ 117.713153][ T3574] vhci_hcd: vhci_device speed not set [ 117.854643][ T7650] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 117.873441][ T7650] SELinux: failed to load policy [ 117.879074][ T7652] x_tables: unsorted underflow at hook 3 [ 117.910169][ T7658] loop0: detected capacity change from 0 to 128 [ 117.913144][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 118.000494][ T7662] 9pnet_fd: Insufficient options for proto=fd [ 118.014177][ T7664] loop1: detected capacity change from 0 to 1024 [ 118.029204][ T7664] EXT4-fs: Ignoring removed orlov option [ 118.085331][ T7668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7668 comm=syz.3.1227 [ 118.139909][ T29] kauditd_printk_skb: 725 callbacks suppressed [ 118.139929][ T29] audit: type=1326 audit(1760582355.952:12907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 118.178324][ T7668] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 118.188765][ T29] audit: type=1326 audit(1760582355.952:12908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 118.212380][ T29] audit: type=1326 audit(1760582355.952:12909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 118.236023][ T29] audit: type=1326 audit(1760582355.952:12910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 118.259688][ T29] audit: type=1326 audit(1760582355.952:12911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 118.283526][ T29] audit: type=1326 audit(1760582355.952:12912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 118.307314][ T29] audit: type=1326 audit(1760582355.952:12913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 118.331007][ T29] audit: type=1326 audit(1760582355.972:12914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 118.355179][ T29] audit: type=1326 audit(1760582355.972:12915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 118.379368][ T29] audit: type=1326 audit(1760582355.972:12916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 118.517235][ T7658] bio_check_eod: 4 callbacks suppressed [ 118.517326][ T7658] syz.0.1223: attempt to access beyond end of device [ 118.517326][ T7658] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 118.525558][ T7682] loop3: detected capacity change from 0 to 1024 [ 118.536572][ T7658] buffer_io_error: 4 callbacks suppressed [ 118.536597][ T7658] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 118.562456][ T7682] EXT4-fs: Ignoring removed orlov option [ 118.569156][ T7658] syz.0.1223: attempt to access beyond end of device [ 118.569156][ T7658] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 118.582959][ T7658] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 118.661162][ T7694] 9pnet_fd: Insufficient options for proto=fd [ 118.699204][ T7692] x_tables: unsorted underflow at hook 3 [ 118.709006][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1237'. [ 118.733615][ T7692] macvlan10: entered allmulticast mode [ 118.749293][ T7697] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 118.759272][ T7697] SELinux: failed to load policy [ 118.776528][ T7703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7703 comm=syz.4.1241 [ 118.812074][ T7705] loop0: detected capacity change from 0 to 1024 [ 118.819771][ T7705] EXT4-fs: Ignoring removed orlov option [ 118.852224][ T7703] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 118.875886][ T3757] usb 7-1: enqueue for inactive port 0 [ 118.892412][ T3757] usb 7-1: enqueue for inactive port 0 [ 118.949631][ T7716] loop4: detected capacity change from 0 to 1024 [ 118.956624][ T7716] EXT4-fs: Ignoring removed orlov option [ 118.973311][ T3757] vhci_hcd: vhci_device speed not set [ 119.013452][ T7720] loop1: detected capacity change from 0 to 128 [ 119.043312][ T6863] usb usb4-port1: attempt power cycle [ 119.113175][ T36] usb 2-1: device descriptor read/8, error -110 [ 119.227082][ T36] usb usb2-port1: attempt power cycle [ 119.293122][ T3808] vhci_hcd: vhci_device speed not set [ 119.298943][ T7730] x_tables: unsorted underflow at hook 3 [ 119.332025][ T7733] 9pnet_fd: Insufficient options for proto=fd [ 119.352825][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 119.462990][ T7739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7739 comm=syz.0.1254 [ 119.547019][ T7750] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.582470][ T7720] syz.1.1247: attempt to access beyond end of device [ 119.582470][ T7720] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 119.596121][ T7720] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 119.605627][ T7723] syz.1.1247: attempt to access beyond end of device [ 119.605627][ T7723] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 119.619188][ T7723] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 119.636223][ T7758] vhci_hcd vhci_hcd.0: port 0 already used [ 119.643312][ T7758] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 119.643770][ T7720] syz.1.1247: attempt to access beyond end of device [ 119.643770][ T7720] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 119.649922][ T7758] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 119.649982][ T7758] vhci_hcd vhci_hcd.0: Device attached [ 119.663433][ T7720] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 119.694893][ T7758] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 119.701654][ T7758] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 119.709420][ T7758] vhci_hcd vhci_hcd.0: Device attached [ 119.723770][ T7762] loop4: detected capacity change from 0 to 1024 [ 119.739106][ T7769] loop5: detected capacity change from 0 to 1024 [ 119.746392][ T7762] EXT4-fs: Ignoring removed orlov option [ 119.753929][ T7769] EXT4-fs: Ignoring removed orlov option [ 119.764173][ T7758] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 119.789296][ T7758] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 119.820361][ T7766] vhci_hcd: connection closed [ 119.820369][ T7763] vhci_hcd: connection closed [ 119.836569][ T57] vhci_hcd: stop threads [ 119.845788][ T57] vhci_hcd: release socket [ 119.850299][ T57] vhci_hcd: disconnect device [ 119.856535][ T7775] 9pnet_fd: Insufficient options for proto=fd [ 119.885771][ T7780] x_tables: unsorted underflow at hook 3 [ 119.891554][ T57] vhci_hcd: stop threads [ 119.895888][ T57] vhci_hcd: release socket [ 119.900331][ T57] vhci_hcd: disconnect device [ 119.905268][ T3757] vhci_hcd: vhci_device speed not set [ 119.911286][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 119.924304][ T7780] macvlan12: entered allmulticast mode [ 120.024114][ T7787] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 120.034488][ T7787] SELinux: failed to load policy [ 120.080911][ T7790] loop1: detected capacity change from 0 to 1024 [ 120.088281][ T7790] EXT4-fs: Ignoring removed orlov option [ 120.123282][ T36] usb 2-1: SetAddress Request (12) to port 0 [ 120.130330][ T36] usb 2-1: new SuperSpeed USB device number 12 using vhci_hcd [ 120.172971][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7795 comm=syz.4.1272 [ 120.250916][ T7795] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.282751][ T7802] loop4: detected capacity change from 0 to 128 [ 120.343424][ T1043] usb usb12-port1: attempt power cycle [ 120.388468][ T7809] 9pnet_fd: Insufficient options for proto=fd [ 120.484789][ T7814] x_tables: unsorted underflow at hook 3 [ 120.501896][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'. [ 120.537130][ T7814] macvlan13: entered allmulticast mode [ 120.567355][ T7823] loop3: detected capacity change from 0 to 1024 [ 120.581359][ T7825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7825 comm=syz.5.1285 [ 120.590140][ T7823] EXT4-fs: Ignoring removed orlov option [ 120.681731][ T7832] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.753418][ T7836] loop1: detected capacity change from 0 to 1024 [ 120.764813][ T7836] EXT4-fs: Ignoring removed orlov option [ 120.789541][ T7842] vhci_hcd vhci_hcd.0: port 0 already used [ 120.804784][ T7842] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 120.811354][ T7842] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 120.819082][ T7842] vhci_hcd vhci_hcd.0: Device attached [ 120.827656][ T7842] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 120.834391][ T7842] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 120.842032][ T7842] vhci_hcd vhci_hcd.0: Device attached [ 120.851168][ T7842] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 120.860285][ T7842] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 120.873808][ T6863] usb usb4-port1: unable to enumerate USB device [ 120.892525][ T7848] vhci_hcd: connection closed [ 120.892793][ T52] vhci_hcd: stop threads [ 120.892847][ T7845] vhci_hcd: connection closed [ 120.902197][ T52] vhci_hcd: release socket [ 120.911449][ T52] vhci_hcd: disconnect device [ 120.917330][ T52] vhci_hcd: stop threads [ 120.921761][ T52] vhci_hcd: release socket [ 120.926227][ T52] vhci_hcd: disconnect device [ 120.953347][ T7852] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 120.963604][ T7852] SELinux: failed to load policy [ 120.979899][ T7805] syz.4.1274: attempt to access beyond end of device [ 120.979899][ T7805] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 120.993443][ T7805] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 121.014185][ T7802] syz.4.1274: attempt to access beyond end of device [ 121.014185][ T7802] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 121.027681][ T7802] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 121.036963][ T7802] syz.4.1274: attempt to access beyond end of device [ 121.036963][ T7802] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 121.050511][ T7802] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 121.130687][ T7860] loop4: detected capacity change from 0 to 2048 [ 121.154772][ T4731] loop4: p1 < > p4 [ 121.165478][ T4731] loop4: p4 size 8388608 extends beyond EOD, truncated [ 121.184256][ T7860] loop4: p1 < > p4 [ 121.188826][ T7860] loop4: p4 size 8388608 extends beyond EOD, truncated [ 121.237205][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 121.248466][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 121.262427][ T7865] loop3: detected capacity change from 0 to 1024 [ 121.269633][ T7862] x_tables: unsorted underflow at hook 3 [ 121.273574][ T7865] EXT4-fs: Ignoring removed orlov option [ 121.280418][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1297'. [ 121.296993][ T7862] macvlan11: entered allmulticast mode [ 121.304158][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 121.315696][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 121.442171][ T7874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7874 comm=syz.1.1300 [ 121.543747][ T7874] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.575667][ T7889] loop4: detected capacity change from 0 to 128 [ 121.597029][ T7891] loop1: detected capacity change from 0 to 1024 [ 121.608794][ T7891] EXT4-fs: Ignoring removed orlov option [ 121.660869][ T7894] loop0: detected capacity change from 0 to 1024 [ 121.684910][ T7894] EXT4-fs: Ignoring removed orlov option [ 121.722401][ T7897] x_tables: unsorted underflow at hook 3 [ 121.759614][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'. [ 121.803418][ T7904] loop3: detected capacity change from 0 to 2048 [ 121.833738][ T4731] loop3: p1 < > p4 [ 121.838731][ T4731] loop3: p4 size 8388608 extends beyond EOD, truncated [ 121.849576][ T7904] loop3: p1 < > p4 [ 121.855354][ T7904] loop3: p4 size 8388608 extends beyond EOD, truncated [ 121.912332][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 121.923837][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 121.938539][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 121.947687][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 121.980830][ T7907] vhci_hcd vhci_hcd.0: port 0 already used [ 121.989353][ T7907] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 121.995982][ T7907] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 122.003801][ T7907] vhci_hcd vhci_hcd.0: Device attached [ 122.025397][ T7907] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 122.032097][ T7907] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 122.039871][ T7907] vhci_hcd vhci_hcd.0: Device attached [ 122.049057][ T7907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 122.058990][ T7907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 122.093096][ T7914] vhci_hcd: connection closed [ 122.093560][ T7912] vhci_hcd: connection closed [ 122.098410][ T52] vhci_hcd: stop threads [ 122.107709][ T52] vhci_hcd: release socket [ 122.112156][ T52] vhci_hcd: disconnect device [ 122.117624][ T52] vhci_hcd: stop threads [ 122.122125][ T52] vhci_hcd: release socket [ 122.126891][ T52] vhci_hcd: disconnect device [ 122.146438][ T7889] syz.4.1306: attempt to access beyond end of device [ 122.146438][ T7889] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 122.159950][ T7889] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 122.170720][ T7895] syz.4.1306: attempt to access beyond end of device [ 122.170720][ T7895] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 122.184199][ T7895] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 122.192763][ T6863] vhci_hcd: vhci_device speed not set [ 122.198747][ T1043] usb usb12-port1: unable to enumerate USB device [ 122.295959][ T7927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7927 comm=syz.4.1318 [ 122.340439][ T7929] loop1: detected capacity change from 0 to 128 [ 122.369720][ T7931] loop0: detected capacity change from 0 to 1024 [ 122.370114][ T7927] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.388494][ T7931] EXT4-fs: Ignoring removed orlov option [ 122.485356][ T7942] loop5: detected capacity change from 0 to 128 [ 122.680011][ T7946] loop3: detected capacity change from 0 to 1024 [ 122.694720][ T7946] EXT4-fs: Ignoring removed orlov option [ 122.907123][ T7955] loop0: detected capacity change from 0 to 1024 [ 122.927318][ T7955] EXT4-fs: Ignoring removed orlov option [ 123.003661][ T7958] loop1: detected capacity change from 0 to 128 [ 123.143103][ T29] kauditd_printk_skb: 902 callbacks suppressed [ 123.143121][ T29] audit: type=1326 audit(1760582360.952:13819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 123.183877][ T7963] loop5: detected capacity change from 0 to 1024 [ 123.213249][ T29] audit: type=1326 audit(1760582360.962:13820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 123.236907][ T29] audit: type=1326 audit(1760582360.962:13821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 123.260554][ T29] audit: type=1326 audit(1760582360.962:13822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 123.284343][ T29] audit: type=1326 audit(1760582360.962:13823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 123.307997][ T29] audit: type=1326 audit(1760582360.962:13824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 123.331654][ T29] audit: type=1326 audit(1760582360.962:13825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 123.355192][ T29] audit: type=1326 audit(1760582360.962:13826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 123.378710][ T29] audit: type=1326 audit(1760582360.962:13827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 123.402299][ T29] audit: type=1326 audit(1760582360.992:13828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.5.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 123.441431][ T7963] EXT4-fs: Ignoring removed orlov option [ 123.482321][ T7969] loop4: detected capacity change from 0 to 128 [ 123.595094][ T7974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7974 comm=syz.1.1334 [ 123.675222][ T7977] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.824606][ T7983] loop1: detected capacity change from 0 to 128 [ 123.882621][ T7972] bio_check_eod: 8 callbacks suppressed [ 123.882640][ T7972] syz.4.1333: attempt to access beyond end of device [ 123.882640][ T7972] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 123.902039][ T7972] buffer_io_error: 8 callbacks suppressed [ 123.902060][ T7972] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 123.927717][ T7969] syz.4.1333: attempt to access beyond end of device [ 123.927717][ T7969] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 123.941678][ T7969] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 123.995322][ T7969] syz.4.1333: attempt to access beyond end of device [ 123.995322][ T7969] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 124.008807][ T7969] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 124.067529][ T7997] loop5: detected capacity change from 0 to 128 [ 124.167821][ T8002] loop4: detected capacity change from 0 to 1024 [ 124.183322][ T8002] EXT4-fs: Ignoring removed orlov option [ 124.218933][ T8005] loop0: detected capacity change from 0 to 128 [ 124.387694][ T8011] x_tables: unsorted underflow at hook 3 [ 124.423966][ T7988] syz.1.1337: attempt to access beyond end of device [ 124.423966][ T7988] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 124.437480][ T7988] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 124.446720][ T7983] syz.1.1337: attempt to access beyond end of device [ 124.446720][ T7983] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 124.455999][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 124.460323][ T7983] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 124.478881][ T7983] syz.1.1337: attempt to access beyond end of device [ 124.478881][ T7983] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 124.492430][ T7983] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 124.685761][ T7997] syz.5.1342: attempt to access beyond end of device [ 124.685761][ T7997] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 124.699298][ T7997] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 124.727122][ T8003] syz.5.1342: attempt to access beyond end of device [ 124.727122][ T8003] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 124.738860][ T8020] loop3: detected capacity change from 0 to 128 [ 124.740610][ T8003] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 124.761932][ T8003] syz.5.1342: attempt to access beyond end of device [ 124.761932][ T8003] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 124.775523][ T8003] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 124.885770][ T8027] loop4: detected capacity change from 0 to 1024 [ 124.893639][ T8027] EXT4-fs: Ignoring removed orlov option [ 124.927876][ T8031] loop5: detected capacity change from 0 to 1024 [ 124.935065][ T8031] EXT4-fs: Ignoring removed orlov option [ 124.937354][ T8033] loop1: detected capacity change from 0 to 128 [ 124.987311][ T8005] syz.0.1345: attempt to access beyond end of device [ 124.987311][ T8005] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 125.000897][ T8005] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 125.204216][ T36] usb 2-1: device descriptor read/8, error -110 [ 125.313185][ T36] usb 2-1: new SuperSpeed USB device number 12 using vhci_hcd [ 125.321857][ T8044] loop0: detected capacity change from 0 to 128 [ 125.593480][ T8051] x_tables: unsorted underflow at hook 3 [ 125.604015][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 125.616378][ T8051] macvlan12: entered allmulticast mode [ 125.635848][ T8050] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 125.688378][ T8050] SELinux: failed to load policy [ 125.733576][ T8060] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 125.740133][ T8060] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 125.747901][ T8060] vhci_hcd vhci_hcd.0: Device attached [ 125.754225][ T8062] loop3: detected capacity change from 0 to 128 [ 125.794802][ T8060] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 125.801411][ T8060] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 125.809086][ T8060] vhci_hcd vhci_hcd.0: Device attached [ 125.826735][ T8060] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10) [ 125.833562][ T8060] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 125.841371][ T8060] vhci_hcd vhci_hcd.0: Device attached [ 125.848552][ T8060] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 125.860156][ T8075] loop1: detected capacity change from 0 to 128 [ 125.874525][ T8060] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 125.905772][ T8072] vhci_hcd: connection closed [ 125.905814][ T8063] vhci_hcd: connection closed [ 125.905877][ T8069] vhci_hcd: connection closed [ 125.915962][ T12] vhci_hcd: stop threads [ 125.924990][ T12] vhci_hcd: release socket [ 125.929434][ T12] vhci_hcd: disconnect device [ 125.945200][ T12] vhci_hcd: stop threads [ 125.949603][ T12] vhci_hcd: release socket [ 125.954149][ T12] vhci_hcd: disconnect device [ 125.959459][ T12] vhci_hcd: stop threads [ 125.963851][ T12] vhci_hcd: release socket [ 125.968307][ T12] vhci_hcd: disconnect device [ 126.194742][ T8083] loop0: detected capacity change from 0 to 1024 [ 126.204749][ T8083] EXT4-fs: Ignoring removed orlov option [ 126.317119][ T8087] loop3: detected capacity change from 0 to 1024 [ 126.326527][ T8087] EXT4-fs: Ignoring removed orlov option [ 126.455408][ T8092] x_tables: unsorted underflow at hook 3 [ 126.462115][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1371'. [ 126.475638][ T8092] macvlan8: entered allmulticast mode [ 126.507092][ T8095] loop5: detected capacity change from 0 to 128 [ 126.658659][ T8105] loop1: detected capacity change from 0 to 1024 [ 126.666693][ T8099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8099 comm=syz.0.1374 [ 126.680840][ T8105] EXT4-fs: Ignoring removed orlov option [ 126.742777][ T8107] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.743164][ T3808] vhci_hcd: vhci_device speed not set [ 127.071590][ T8127] x_tables: unsorted underflow at hook 3 [ 127.083312][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'. [ 127.099409][ T8127] macvlan13: entered allmulticast mode [ 127.202038][ T8132] loop4: detected capacity change from 0 to 1024 [ 127.211482][ T8132] EXT4-fs: Ignoring removed orlov option [ 127.239581][ T8136] loop3: detected capacity change from 0 to 1024 [ 127.248480][ T8136] EXT4-fs: Ignoring removed orlov option [ 127.271252][ T8138] loop5: detected capacity change from 0 to 1024 [ 127.290410][ T8138] EXT4-fs: Ignoring removed orlov option [ 127.571846][ T8150] loop4: detected capacity change from 0 to 128 [ 127.667379][ T8157] loop1: detected capacity change from 0 to 128 [ 127.717372][ T8161] x_tables: unsorted underflow at hook 3 [ 127.736853][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1395'. [ 127.757109][ T8161] macvlan9: entered allmulticast mode [ 127.780327][ T8167] loop3: detected capacity change from 0 to 1024 [ 127.789164][ T8167] EXT4-fs: Ignoring removed orlov option [ 127.820674][ T8170] loop5: detected capacity change from 0 to 128 [ 127.929046][ T8172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8172 comm=syz.0.1399 [ 128.003243][ T8172] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.096411][ T8180] loop0: detected capacity change from 0 to 128 [ 128.408650][ T8183] loop4: detected capacity change from 0 to 1024 [ 128.444223][ T8183] EXT4-fs: Ignoring removed orlov option [ 128.511803][ T29] kauditd_printk_skb: 565 callbacks suppressed [ 128.511822][ T29] audit: type=1326 audit(1760582366.322:14394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406715eec9 code=0x7ffc0000 [ 128.542910][ T29] audit: type=1326 audit(1760582366.332:14395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406715eec9 code=0x7ffc0000 [ 128.566471][ T29] audit: type=1326 audit(1760582366.352:14396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f406715eec9 code=0x7ffc0000 [ 128.566578][ T29] audit: type=1326 audit(1760582366.352:14397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406715eec9 code=0x7ffc0000 [ 128.613504][ T29] audit: type=1326 audit(1760582366.352:14398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406715eec9 code=0x7ffc0000 [ 128.638354][ T29] audit: type=1326 audit(1760582366.362:14399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f406715d710 code=0x7ffc0000 [ 128.662556][ T29] audit: type=1326 audit(1760582366.472:14400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406715eec9 code=0x7ffc0000 [ 128.686261][ T29] audit: type=1326 audit(1760582366.472:14401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406715eec9 code=0x7ffc0000 [ 128.694567][ T8188] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 128.723429][ T29] audit: type=1326 audit(1760582366.512:14402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f406715eec9 code=0x7ffc0000 [ 128.753640][ T8188] SELinux: failed to load policy [ 128.762897][ T29] audit: type=1326 audit(1760582366.572:14403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.3.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406715eec9 code=0x7ffc0000 [ 128.842423][ T8198] loop5: detected capacity change from 0 to 1024 [ 128.849748][ T8198] EXT4-fs: Ignoring removed orlov option [ 128.863202][ T8200] loop1: detected capacity change from 0 to 1024 [ 128.872081][ T8200] EXT4-fs: Ignoring removed orlov option [ 128.915857][ T8205] x_tables: unsorted underflow at hook 3 [ 128.977557][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 129.000206][ T8213] loop0: detected capacity change from 0 to 128 [ 129.039672][ T8215] loop3: detected capacity change from 0 to 1024 [ 129.053562][ T8215] EXT4-fs: Ignoring removed orlov option [ 129.322824][ T8224] loop4: detected capacity change from 0 to 128 [ 129.602967][ T8229] loop1: detected capacity change from 0 to 1024 [ 129.635233][ T8229] EXT4-fs: Ignoring removed orlov option [ 129.729030][ T8217] bio_check_eod: 21 callbacks suppressed [ 129.729051][ T8217] syz.0.1409: attempt to access beyond end of device [ 129.729051][ T8217] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 129.748202][ T8217] buffer_io_error: 21 callbacks suppressed [ 129.748223][ T8217] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 129.777386][ T8239] loop3: detected capacity change from 0 to 128 [ 129.884902][ T8224] syz.4.1412: attempt to access beyond end of device [ 129.884902][ T8224] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 129.898425][ T8224] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 129.944512][ T8244] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 129.946191][ T8248] x_tables: unsorted underflow at hook 3 [ 129.971709][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1421'. [ 129.982762][ T8244] SELinux: failed to load policy [ 130.009001][ T8248] macvlan10: entered allmulticast mode [ 130.076537][ T8255] loop0: detected capacity change from 0 to 128 [ 130.087635][ T8252] x_tables: unsorted underflow at hook 3 [ 130.094334][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1422'. [ 130.107776][ T8252] macvlan11: entered allmulticast mode [ 130.308738][ T8239] syz.3.1418: attempt to access beyond end of device [ 130.308738][ T8239] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 130.322353][ T8239] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 130.356786][ T8266] loop4: detected capacity change from 0 to 128 [ 130.363891][ T8242] syz.3.1418: attempt to access beyond end of device [ 130.363891][ T8242] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 130.377734][ T8242] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 130.403324][ T8267] loop5: detected capacity change from 0 to 1024 [ 130.413389][ T8267] EXT4-fs: Ignoring removed orlov option [ 130.419393][ T8242] syz.3.1418: attempt to access beyond end of device [ 130.419393][ T8242] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 130.432861][ T8242] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 130.594072][ T8277] loop3: detected capacity change from 0 to 1024 [ 130.603479][ T8277] EXT4-fs: Ignoring removed orlov option [ 130.645779][ T8280] 9pnet: Could not find request transport: fd0x0000000000000003 [ 130.759829][ T8285] x_tables: unsorted underflow at hook 3 [ 130.771048][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1434'. [ 130.780727][ T8259] syz.0.1423: attempt to access beyond end of device [ 130.780727][ T8259] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 130.794191][ T8259] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 130.806908][ T8285] macvlan17: entered allmulticast mode [ 130.813434][ T8256] syz.0.1423: attempt to access beyond end of device [ 130.813434][ T8256] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 130.826935][ T8256] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 130.929008][ T8290] loop1: detected capacity change from 0 to 2048 [ 130.984125][ T8290] loop1: p1 < > p4 [ 130.993961][ T8290] loop1: p4 size 8388608 extends beyond EOD, truncated [ 131.049966][ T8266] syz.4.1427: attempt to access beyond end of device [ 131.049966][ T8266] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 131.063962][ T8266] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 131.090642][ T8271] syz.4.1427: attempt to access beyond end of device [ 131.090642][ T8271] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 131.104235][ T8271] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 131.110312][ T8295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8295 comm=syz.1.1438 [ 131.143989][ T8271] syz.4.1427: attempt to access beyond end of device [ 131.143989][ T8271] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 131.157632][ T8271] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 131.177399][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 131.178671][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 131.193418][ T8298] x_tables: unsorted underflow at hook 3 [ 131.205227][ T8299] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 131.217818][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 131.233799][ T8296] macvlan14: entered allmulticast mode [ 131.268838][ T8303] loop1: detected capacity change from 0 to 128 [ 131.349730][ T8308] loop5: detected capacity change from 0 to 128 [ 131.365973][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 131.379838][ T8313] loop3: detected capacity change from 0 to 1024 [ 131.396025][ T8313] EXT4-fs: Ignoring removed orlov option [ 131.535733][ T8322] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 131.545860][ T8322] SELinux: failed to load policy [ 131.651618][ T8331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8331 comm=syz.0.1449 [ 131.761606][ T8327] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 131.888852][ T8336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8336 comm=syz.0.1451 [ 131.963960][ T8336] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.023153][ T8342] loop3: detected capacity change from 0 to 128 [ 132.141595][ T8346] loop1: detected capacity change from 0 to 1024 [ 132.152764][ T8346] EXT4-fs: Ignoring removed orlov option [ 132.228712][ T8350] x_tables: unsorted underflow at hook 3 [ 132.272948][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'. [ 132.343999][ T8369] loop0: detected capacity change from 0 to 128 [ 132.344440][ T8366] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 132.360367][ T8366] SELinux: failed to load policy [ 132.429602][ T8373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8373 comm=syz.5.1464 [ 132.464544][ T8375] loop3: detected capacity change from 0 to 2048 [ 132.516459][ T8375] loop3: p1 < > p4 [ 132.524710][ T8375] loop3: p4 size 8388608 extends beyond EOD, truncated [ 132.735325][ T8393] loop3: detected capacity change from 0 to 512 [ 132.785393][ T8393] EXT4-fs mount: 89 callbacks suppressed [ 132.785412][ T8393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.785680][ T8400] loop4: detected capacity change from 0 to 128 [ 132.803212][ T8393] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.809476][ T8395] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 132.830222][ T8395] SELinux: failed to load policy [ 132.848267][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.866231][ T8393] netlink: 'syz.3.1473': attribute type 27 has an invalid length. [ 132.926445][ T8393] bridge0: left allmulticast mode [ 132.932369][ T8393] $Hÿ: left promiscuous mode [ 132.937326][ T8393] bond_slave_0: left promiscuous mode [ 132.942784][ T8393] bond_slave_1: left promiscuous mode [ 132.952320][ T8407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8407 comm=syz.1.1477 [ 133.052273][ T8393] bridge1: left promiscuous mode [ 133.058847][ T8403] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1478'. [ 133.124356][ T8406] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 133.149238][ T8406] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.168536][ T8406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.171147][ T8417] loop5: detected capacity change from 0 to 1024 [ 133.199942][ T31] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.213850][ T8419] loop1: detected capacity change from 0 to 128 [ 133.231920][ T31] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.236431][ T8417] EXT4-fs: Ignoring removed orlov option [ 133.258202][ T8417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.281527][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.291640][ T31] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.323278][ T31] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.543915][ T8441] loop0: detected capacity change from 0 to 1024 [ 133.550900][ T8441] EXT4-fs: Ignoring removed orlov option [ 133.560981][ T8441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.642861][ T29] kauditd_printk_skb: 622 callbacks suppressed [ 133.642879][ T29] audit: type=1326 audit(1760582371.452:15026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b05f3eec9 code=0x7ffc0000 [ 133.649584][ T8449] loop4: detected capacity change from 0 to 1024 [ 133.686377][ T8449] EXT4-fs: Ignoring removed orlov option [ 133.700598][ T8450] loop3: detected capacity change from 0 to 128 [ 133.703922][ T8449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.738419][ T8450] FAT-fs (loop3): bogus number of FAT sectors [ 133.740355][ T29] audit: type=1326 audit(1760582371.452:15027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f4b05f3eec9 code=0x7ffc0000 [ 133.744673][ T8450] FAT-fs (loop3): Can't find a valid FAT filesystem [ 133.768250][ T29] audit: type=1326 audit(1760582371.462:15028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b05f3eec9 code=0x7ffc0000 [ 133.798542][ T29] audit: type=1326 audit(1760582371.462:15029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b05f3eec9 code=0x7ffc0000 [ 133.822156][ T29] audit: type=1326 audit(1760582371.462:15030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b05f3eec9 code=0x7ffc0000 [ 133.845788][ T29] audit: type=1326 audit(1760582371.462:15031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4b05f3eec9 code=0x7ffc0000 [ 133.869364][ T29] audit: type=1326 audit(1760582371.462:15032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4b05f3ef03 code=0x7ffc0000 [ 133.892739][ T29] audit: type=1326 audit(1760582371.462:15033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4b05f3d97f code=0x7ffc0000 [ 133.904485][ T8450] loop3: detected capacity change from 0 to 512 [ 133.916097][ T29] audit: type=1326 audit(1760582371.462:15034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4b05f3ef57 code=0x7ffc0000 [ 133.916139][ T29] audit: type=1326 audit(1760582371.462:15035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8448 comm="syz.4.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b05f3d710 code=0x7ffc0000 [ 133.973577][ T8457] loop1: detected capacity change from 0 to 128 [ 133.997670][ T8450] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.1491: ea_inode file size=0 entry size=6 [ 134.012318][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.023275][ T4262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.053651][ T8450] EXT4-fs (loop3): 1 orphan inode deleted [ 134.060680][ T8450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.126862][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.189658][ T8464] x_tables: unsorted underflow at hook 3 [ 134.191481][ T8469] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1500'. [ 134.207859][ T8469] netlink: 'syz.4.1500': attribute type 2 has an invalid length. [ 134.215716][ T8469] netlink: 'syz.4.1500': attribute type 8 has an invalid length. [ 134.223576][ T8469] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1500'. [ 134.226717][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1497'. [ 134.247172][ T8464] macvlan12: entered allmulticast mode [ 134.367133][ T8476] loop5: detected capacity change from 0 to 128 [ 134.432844][ T8479] bridge0: entered allmulticast mode [ 134.467418][ T8479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8479 comm=syz.3.1504 [ 134.554131][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.556420][ T8481] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 134.694200][ T8484] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 134.702212][ T8490] loop0: detected capacity change from 0 to 128 [ 134.733456][ T8484] SELinux: failed to load policy [ 134.763231][ T8492] loop1: detected capacity change from 0 to 1024 [ 134.777572][ T8492] EXT4-fs: Ignoring removed orlov option [ 134.792649][ T8492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.934111][ T8503] loop3: detected capacity change from 0 to 1024 [ 134.942374][ T8476] bio_check_eod: 8 callbacks suppressed [ 134.942393][ T8476] syz.5.1503: attempt to access beyond end of device [ 134.942393][ T8476] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 134.942880][ T8503] EXT4-fs: Ignoring removed orlov option [ 134.948114][ T8476] buffer_io_error: 8 callbacks suppressed [ 134.948127][ T8476] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 134.991161][ T8503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.993479][ T8476] syz.5.1503: attempt to access beyond end of device [ 134.993479][ T8476] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 135.017088][ T8476] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 135.101564][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1515'. [ 135.110537][ T8509] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1515'. [ 135.119763][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1515'. [ 135.128730][ T8509] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1515'. [ 135.138558][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1515'. [ 135.202359][ T8513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8513 comm=syz.4.1516 [ 135.279175][ T8517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.311561][ T8496] syz.0.1509: attempt to access beyond end of device [ 135.311561][ T8496] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 135.325160][ T8496] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 135.339075][ T8520] loop4: detected capacity change from 0 to 1024 [ 135.347475][ T8520] EXT4-fs: Ignoring removed orlov option [ 135.353427][ T8490] syz.0.1509: attempt to access beyond end of device [ 135.353427][ T8490] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 135.366897][ T8490] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 135.382482][ T8490] syz.0.1509: attempt to access beyond end of device [ 135.382482][ T8490] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 135.396101][ T8490] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 135.405830][ T8520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.456596][ T8522] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 135.472742][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.482111][ T8522] SELinux: failed to load policy [ 135.579193][ T8530] loop5: detected capacity change from 0 to 128 [ 135.606074][ T8532] loop4: detected capacity change from 0 to 128 [ 135.614784][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.660672][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.688480][ T8537] loop1: detected capacity change from 0 to 512 [ 135.729152][ T8537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.742389][ T8537] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.788168][ T8545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8545 comm=syz.0.1529 [ 135.809672][ T8537] netlink: 'syz.1.1525': attribute type 27 has an invalid length. [ 135.848696][ T8551] loop5: detected capacity change from 0 to 1024 [ 135.861891][ T8537] bridge0: left allmulticast mode [ 135.868002][ T8551] EXT4-fs: Ignoring removed orlov option [ 135.881594][ T8551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.886561][ T8537] $Hÿ: left promiscuous mode [ 135.898966][ T8537] bond_slave_0: left promiscuous mode [ 135.904917][ T8537] bond_slave_1: left promiscuous mode [ 135.999371][ T8537] macsec0: left allmulticast mode [ 136.005965][ T4262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.021187][ T8537] macvlan2: left allmulticast mode [ 136.037765][ T8558] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 136.047782][ T8558] SELinux: failed to load policy [ 136.055972][ T8537] macvlan3: left allmulticast mode [ 136.066715][ T8559] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 136.080307][ T8537] macvlan4: left allmulticast mode [ 136.094208][ T8559] SELinux: failed to load policy [ 136.099295][ T8537] macvlan5: left allmulticast mode [ 136.113131][ T8537] macvlan6: left allmulticast mode [ 136.123784][ T8537] macvlan7: left allmulticast mode [ 136.141354][ T8537] macvlan8: left allmulticast mode [ 136.169789][ T8537] macvlan9: left allmulticast mode [ 136.179860][ T8572] loop3: detected capacity change from 0 to 1024 [ 136.188116][ T8532] syz.4.1524: attempt to access beyond end of device [ 136.188116][ T8532] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 136.188632][ T8575] loop5: detected capacity change from 0 to 128 [ 136.201730][ T8532] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 136.201771][ T8537] macvlan10: left allmulticast mode [ 136.223086][ T8572] EXT4-fs: Ignoring removed orlov option [ 136.230482][ T8539] syz.4.1524: attempt to access beyond end of device [ 136.230482][ T8539] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 136.244055][ T8539] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 136.254825][ T8537] macvlan11: left allmulticast mode [ 136.255541][ T8572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.275767][ T8539] syz.4.1524: attempt to access beyond end of device [ 136.275767][ T8539] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 136.289267][ T8539] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 136.296284][ T8576] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.307584][ T8537] macvlan12: left allmulticast mode [ 136.319856][ T8537] macvlan13: left allmulticast mode [ 136.344577][ T8537] macvlan14: left allmulticast mode [ 136.352264][ T8537] macvlan15: left allmulticast mode [ 136.358257][ T8581] FAULT_INJECTION: forcing a failure. [ 136.358257][ T8581] name failslab, interval 1, probability 0, space 0, times 0 [ 136.371065][ T8581] CPU: 1 UID: 0 PID: 8581 Comm: Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 136.371131][ T8581] Tainted: [W]=WARN [ 136.371140][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 136.371157][ T8581] Call Trace: [ 136.371166][ T8581] [ 136.371188][ T8581] __dump_stack+0x1d/0x30 [ 136.371273][ T8581] dump_stack_lvl+0xe8/0x140 [ 136.371294][ T8581] dump_stack+0x15/0x1b [ 136.371311][ T8581] should_fail_ex+0x265/0x280 [ 136.371429][ T8581] should_failslab+0x8c/0xb0 [ 136.371472][ T8581] __kvmalloc_node_noprof+0x12e/0x670 [ 136.371664][ T8581] ? io_ring_ctx_alloc+0xb5/0x670 [ 136.371764][ T8581] io_ring_ctx_alloc+0xb5/0x670 [ 136.371801][ T8581] io_uring_create+0x134/0x630 [ 136.371839][ T8581] __se_sys_io_uring_setup+0x1f7/0x210 [ 136.371928][ T8581] __x64_sys_io_uring_setup+0x31/0x40 [ 136.371974][ T8581] x64_sys_call+0x2b25/0x3000 [ 136.372001][ T8581] do_syscall_64+0xd2/0x200 [ 136.372078][ T8581] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.372156][ T8581] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 136.372254][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.372284][ T8581] RIP: 0033:0x7f4b05f3eec9 [ 136.372306][ T8581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.372325][ T8581] RSP: 002b:00007f4b0499efc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 136.372345][ T8581] RAX: ffffffffffffffda RBX: 00007f4b06195fa0 RCX: 00007f4b05f3eec9 [ 136.372362][ T8581] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 136.372379][ T8581] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 136.372450][ T8581] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 136.372470][ T8581] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 136.372496][ T8581] [ 136.372625][ T8537] macvlan16: left allmulticast mode [ 136.565495][ T8537] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 136.572794][ T8537] macvlan17: left allmulticast mode [ 136.629002][ T8552] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 136.637646][ T8552] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.649592][ T8552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.667245][ T3448] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.693435][ T8615] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.714081][ T8615] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.758477][ T8644] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.790972][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.792436][ T8645] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1540'. [ 136.854327][ T8645] netlink: 'syz.0.1540': attribute type 2 has an invalid length. [ 136.862134][ T8645] netlink: 'syz.0.1540': attribute type 8 has an invalid length. [ 136.870141][ T8645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1540'. [ 136.969564][ T8651] bridge0: entered allmulticast mode [ 136.981245][ T8651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8651 comm=syz.1.1543 [ 137.054839][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.133977][ T8653] loop3: detected capacity change from 0 to 1024 [ 137.151851][ T8653] EXT4-fs: Ignoring removed orlov option [ 137.200366][ T8653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.222881][ T8655] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 137.232694][ T8655] SELinux: failed to load policy [ 137.259040][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.317793][ T8661] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 137.328967][ T8661] SELinux: failed to load policy [ 137.346199][ T8667] x_tables: unsorted underflow at hook 3 [ 137.370704][ T8665] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 137.370704][ T8665] program syz.1.1550 not setting count and/or reply_len properly [ 137.379029][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'. [ 137.509160][ T8683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8683 comm=syz.0.1556 [ 137.536593][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 137.545536][ T8691] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1558'. [ 137.558892][ T8688] loop3: detected capacity change from 0 to 1024 [ 137.567345][ T8688] EXT4-fs: Ignoring removed orlov option [ 137.577480][ T8688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.594458][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.610102][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.645040][ T8698] loop0: detected capacity change from 0 to 1024 [ 137.651898][ T8698] EXT4-fs: Ignoring removed orlov option [ 137.673281][ T8698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.708243][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.783827][ T8701] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 137.793967][ T8701] SELinux: failed to load policy [ 137.929671][ T8705] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 137.956368][ T8714] netlink: 'syz.1.1567': attribute type 2 has an invalid length. [ 137.964400][ T8714] netlink: 'syz.1.1567': attribute type 8 has an invalid length. [ 137.983869][ T8716] loop0: detected capacity change from 0 to 128 [ 138.113520][ T8721] loop5: detected capacity change from 0 to 128 [ 138.153190][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.276456][ T8728] loop3: detected capacity change from 0 to 1024 [ 138.283610][ T8728] EXT4-fs: Ignoring removed orlov option [ 138.314139][ T8728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.373799][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.424991][ T8734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8734 comm=syz.3.1573 [ 138.515669][ T8738] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 138.558666][ T8738] SELinux: failed to load policy [ 138.622313][ T8750] loop1: detected capacity change from 0 to 1024 [ 138.631373][ T8750] EXT4-fs: Ignoring removed orlov option [ 138.636626][ T8751] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 138.647450][ T8716] syz.0.1568: attempt to access beyond end of device [ 138.647450][ T8716] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 138.661238][ T8716] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 138.671502][ T8722] syz.0.1568: attempt to access beyond end of device [ 138.671502][ T8722] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 138.685066][ T8722] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 138.699986][ T8750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.729329][ T29] kauditd_printk_skb: 636 callbacks suppressed [ 138.729346][ T29] audit: type=1326 audit(1760582376.542:15672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8749 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe12302d710 code=0x7ffc0000 [ 138.789828][ T29] audit: type=1326 audit(1760582376.542:15673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8749 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe12302dc17 code=0x7ffc0000 [ 138.813391][ T29] audit: type=1326 audit(1760582376.542:15674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8749 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe12302d710 code=0x7ffc0000 [ 138.837020][ T29] audit: type=1326 audit(1760582376.542:15675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8749 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12302eec9 code=0x7ffc0000 [ 138.860559][ T29] audit: type=1326 audit(1760582376.542:15676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8749 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12302eec9 code=0x7ffc0000 [ 138.887651][ T29] audit: type=1326 audit(1760582376.542:15677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8749 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe12302eec9 code=0x7ffc0000 [ 138.911209][ T29] audit: type=1326 audit(1760582376.542:15678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8749 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12302eec9 code=0x7ffc0000 [ 138.925221][ T8757] loop3: detected capacity change from 0 to 1024 [ 138.934719][ T29] audit: type=1326 audit(1760582376.542:15679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8749 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12302eec9 code=0x7ffc0000 [ 138.934765][ T29] audit: type=1326 audit(1760582376.542:15680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8749 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe12302eec9 code=0x7ffc0000 [ 138.970791][ T8757] EXT4-fs: Ignoring removed orlov option [ 138.988048][ T29] audit: type=1326 audit(1760582376.542:15681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8749 comm="syz.1.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12302eec9 code=0x7ffc0000 [ 139.048621][ T8761] loop5: detected capacity change from 0 to 1024 [ 139.056027][ T8761] EXT4-fs: Ignoring removed orlov option [ 139.067836][ T8757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.080683][ T8761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.089606][ T8759] x_tables: unsorted underflow at hook 3 [ 139.119060][ T8759] macvlan15: entered allmulticast mode [ 139.139974][ T4262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.184449][ T8768] loop5: detected capacity change from 0 to 128 [ 139.229862][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.455993][ T8789] loop4: detected capacity change from 0 to 128 [ 139.473811][ T8791] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 139.557389][ T8794] loop1: detected capacity change from 0 to 1024 [ 139.565211][ T8796] loop0: detected capacity change from 0 to 128 [ 139.572033][ T8794] EXT4-fs: Ignoring removed orlov option [ 139.603862][ T8794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.640919][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.706400][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.800497][ T8805] loop3: detected capacity change from 0 to 1024 [ 139.817611][ T8805] EXT4-fs: Ignoring removed orlov option [ 139.837088][ T8805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.839787][ T8807] loop1: detected capacity change from 0 to 1024 [ 139.861506][ T8807] EXT4-fs: Ignoring removed orlov option [ 139.870514][ T8807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.967334][ T8815] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 139.977237][ T8815] SELinux: failed to load policy [ 140.125192][ T8797] bio_check_eod: 5 callbacks suppressed [ 140.125210][ T8797] syz.4.1595: attempt to access beyond end of device [ 140.125210][ T8797] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 140.144313][ T8797] buffer_io_error: 5 callbacks suppressed [ 140.144332][ T8797] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 140.229962][ T8803] syz.0.1598: attempt to access beyond end of device [ 140.229962][ T8803] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 140.243449][ T8803] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 140.260760][ T8803] syz.0.1598: attempt to access beyond end of device [ 140.260760][ T8803] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 140.274370][ T8803] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 140.351943][ T8830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8830 comm=syz.5.1607 [ 140.384983][ T8824] infiniband syz!: set active [ 140.389772][ T8824] infiniband syz!: added team_slave_0 [ 140.396515][ T8830] netlink: 'syz.5.1607': attribute type 7 has an invalid length. [ 140.404421][ T8830] __nla_validate_parse: 6 callbacks suppressed [ 140.404438][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1607'. [ 140.431344][ T8824] RDS/IB: syz!: added [ 140.474836][ T36] usb 2-1: device descriptor read/8, error -110 [ 140.483327][ T8837] loop0: detected capacity change from 0 to 128 [ 140.546859][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.559333][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.654927][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 140.663879][ T8845] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1613'. [ 140.672947][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 140.681907][ T8845] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1613'. [ 140.691698][ T8848] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 140.716714][ T8848] SELinux: failed to load policy [ 140.743167][ T36] usb 2-1: SetAddress Request (13) to port 0 [ 140.744333][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 140.749324][ T36] usb 2-1: new SuperSpeed USB device number 13 using vhci_hcd [ 140.776966][ T8847] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.808648][ T8850] loop4: detected capacity change from 0 to 1024 [ 140.826691][ T8850] EXT4-fs: Ignoring removed orlov option [ 140.851054][ T8850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.919737][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.952950][ T8861] loop4: detected capacity change from 0 to 1024 [ 140.960539][ T8861] EXT4-fs: Ignoring removed orlov option [ 140.997071][ T8861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.049007][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.105731][ T8872] loop1: detected capacity change from 0 to 1024 [ 141.120735][ T8872] EXT4-fs: Ignoring removed orlov option [ 141.137158][ T8872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.161301][ T8874] loop4: detected capacity change from 0 to 1024 [ 141.169110][ T8874] EXT4-fs: Ignoring removed orlov option [ 141.177767][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.188413][ T8837] syz.0.1612: attempt to access beyond end of device [ 141.188413][ T8837] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 141.202061][ T8837] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 141.220295][ T8874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.268613][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 141.277552][ T8883] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1629'. [ 141.286640][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 141.288661][ T8884] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 141.295542][ T8883] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1629'. [ 141.305537][ T8884] SELinux: failed to load policy [ 141.402816][ T8894] loop3: detected capacity change from 0 to 1024 [ 141.411395][ T8894] EXT4-fs: Ignoring removed orlov option [ 141.422505][ T8886] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.435111][ T8894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.440128][ T8896] loop1: detected capacity change from 0 to 1024 [ 141.465515][ T8896] EXT4-fs: Ignoring removed orlov option [ 141.474095][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.474922][ T8896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.620046][ T8909] loop0: detected capacity change from 0 to 1024 [ 141.639014][ T8909] EXT4-fs: Ignoring removed orlov option [ 141.668002][ T8909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.766630][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.816600][ T8916] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 141.826411][ T8916] SELinux: failed to load policy [ 141.942481][ T8930] loop4: detected capacity change from 0 to 128 [ 141.994601][ T8932] loop3: detected capacity change from 0 to 128 [ 142.014396][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.094253][ T8937] loop5: detected capacity change from 0 to 1024 [ 142.116362][ T8937] EXT4-fs: Ignoring removed orlov option [ 142.137720][ T8937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.200905][ T8945] x_tables: unsorted underflow at hook 3 [ 142.210459][ T8945] macvlan18: entered allmulticast mode [ 142.216083][ T8945] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 142.282735][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.288224][ T8949] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 142.302210][ T8949] SELinux: failed to load policy [ 142.423694][ T8955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8955 comm=syz.0.1658 [ 142.499444][ T8959] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 142.593672][ T8935] syz.4.1648: attempt to access beyond end of device [ 142.593672][ T8935] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 142.607257][ T8935] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 142.616698][ T8930] syz.4.1648: attempt to access beyond end of device [ 142.616698][ T8930] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 142.630160][ T8930] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 142.660809][ T8967] loop0: detected capacity change from 0 to 1024 [ 142.668176][ T8967] EXT4-fs: Ignoring removed orlov option [ 142.680804][ T8967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.757190][ T8940] syz.3.1649: attempt to access beyond end of device [ 142.757190][ T8940] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 142.770715][ T8940] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 142.793727][ T8940] syz.3.1649: attempt to access beyond end of device [ 142.793727][ T8940] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 142.807239][ T8940] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 142.845457][ T4262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.872137][ T8975] loop4: detected capacity change from 0 to 128 [ 142.941532][ T8977] x_tables: unsorted underflow at hook 3 [ 142.956954][ T8977] macvlan13: entered allmulticast mode [ 142.987916][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.073758][ T8983] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 143.082841][ T8981] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 143.093390][ T8981] SELinux: failed to load policy [ 143.099414][ T8983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8983 comm=syz.3.1668 [ 143.115585][ T8987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8987 comm=syz.5.1670 [ 143.129259][ T8983] netlink: 'syz.3.1668': attribute type 7 has an invalid length. [ 143.207334][ T8996] loop5: detected capacity change from 0 to 128 [ 143.227162][ T8997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8997 comm=syz.0.1671 [ 143.240948][ T8999] FAULT_INJECTION: forcing a failure. [ 143.240948][ T8999] name failslab, interval 1, probability 0, space 0, times 0 [ 143.253671][ T8999] CPU: 0 UID: 0 PID: 8999 Comm: syz.3.1675 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 143.253716][ T8999] Tainted: [W]=WARN [ 143.253724][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.253741][ T8999] Call Trace: [ 143.253750][ T8999] [ 143.253760][ T8999] __dump_stack+0x1d/0x30 [ 143.253788][ T8999] dump_stack_lvl+0xe8/0x140 [ 143.253840][ T8999] dump_stack+0x15/0x1b [ 143.253863][ T8999] should_fail_ex+0x265/0x280 [ 143.253996][ T8999] should_failslab+0x8c/0xb0 [ 143.254033][ T8999] kmem_cache_alloc_noprof+0x50/0x480 [ 143.254072][ T8999] ? security_file_alloc+0x32/0x100 [ 143.254099][ T8999] security_file_alloc+0x32/0x100 [ 143.254154][ T8999] init_file+0x5c/0x1d0 [ 143.254196][ T8999] alloc_empty_file+0x8b/0x200 [ 143.254238][ T8999] alloc_file_pseudo+0xc6/0x160 [ 143.254274][ T8999] __shmem_file_setup+0x1de/0x210 [ 143.254341][ T8999] shmem_file_setup+0x3b/0x50 [ 143.254383][ T8999] __se_sys_memfd_create+0x2c3/0x590 [ 143.254415][ T8999] __x64_sys_memfd_create+0x31/0x40 [ 143.254464][ T8999] x64_sys_call+0x2ac2/0x3000 [ 143.254556][ T8999] do_syscall_64+0xd2/0x200 [ 143.254592][ T8999] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.254643][ T8999] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.254740][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.254767][ T8999] RIP: 0033:0x7f406715eec9 [ 143.254868][ T8999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.254894][ T8999] RSP: 002b:00007f4065bc6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 143.254991][ T8999] RAX: ffffffffffffffda RBX: 0000000000000466 RCX: 00007f406715eec9 [ 143.255010][ T8999] RDX: 00007f4065bc6ef0 RSI: 0000000000000000 RDI: 00007f40671e2960 [ 143.255028][ T8999] RBP: 0000200000000f40 R08: 00007f4065bc6bb7 R09: 00007f4065bc6e40 [ 143.255045][ T8999] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 143.255063][ T8999] R13: 00007f4065bc6ef0 R14: 00007f4065bc6eb0 R15: 0000200000000180 [ 143.255089][ T8999] [ 143.342458][ T8979] syz.4.1666: attempt to access beyond end of device [ 143.342458][ T8979] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 143.419530][ T8990] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 143.426091][ T8979] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 143.524812][ T9008] loop3: detected capacity change from 0 to 128 [ 143.547312][ T9005] loop1: detected capacity change from 0 to 1024 [ 143.561039][ T8975] syz.4.1666: attempt to access beyond end of device [ 143.561039][ T8975] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 143.574607][ T8975] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 143.602521][ T9005] EXT4-fs: Ignoring removed orlov option [ 143.624518][ T9005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.705493][ T9020] FAULT_INJECTION: forcing a failure. [ 143.705493][ T9020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.718816][ T9020] CPU: 1 UID: 0 PID: 9020 Comm: syz.5.1683 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 143.718855][ T9020] Tainted: [W]=WARN [ 143.718862][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.718874][ T9020] Call Trace: [ 143.718881][ T9020] [ 143.718890][ T9020] __dump_stack+0x1d/0x30 [ 143.718917][ T9020] dump_stack_lvl+0xe8/0x140 [ 143.718946][ T9020] dump_stack+0x15/0x1b [ 143.718963][ T9020] should_fail_ex+0x265/0x280 [ 143.719067][ T9020] should_fail+0xb/0x20 [ 143.719154][ T9020] should_fail_usercopy+0x1a/0x20 [ 143.719220][ T9020] strncpy_from_user+0x25/0x230 [ 143.719331][ T9020] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 143.719365][ T9020] getname_flags+0x230/0x3b0 [ 143.719399][ T9020] user_path_at+0x28/0x130 [ 143.719464][ T9020] __se_sys_quotactl+0xb6/0x670 [ 143.719488][ T9020] ? __secure_computing+0x82/0x150 [ 143.719517][ T9020] __x64_sys_quotactl+0x55/0x70 [ 143.719576][ T9020] x64_sys_call+0x15d6/0x3000 [ 143.719602][ T9020] do_syscall_64+0xd2/0x200 [ 143.719633][ T9020] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.719683][ T9020] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.719707][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.719743][ T9020] RIP: 0033:0x7f53fbbaeec9 [ 143.719763][ T9020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.719788][ T9020] RSP: 002b:00007f53fa60f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 143.719813][ T9020] RAX: ffffffffffffffda RBX: 00007f53fbe05fa0 RCX: 00007f53fbbaeec9 [ 143.719862][ T9020] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000201 [ 143.719879][ T9020] RBP: 00007f53fa60f090 R08: 0000000000000000 R09: 0000000000000000 [ 143.719895][ T9020] R10: 0000200000001800 R11: 0000000000000246 R12: 0000000000000001 [ 143.719912][ T9020] R13: 00007f53fbe06038 R14: 00007f53fbe05fa0 R15: 00007fff2bfdc4c8 [ 143.719936][ T9020] [ 143.918283][ T29] kauditd_printk_skb: 742 callbacks suppressed [ 143.918297][ T29] audit: type=1326 audit(1760582381.742:16424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.5.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f53fbbad8dc code=0x7ffc0000 [ 143.981563][ T9027] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 143.986245][ T29] audit: type=1326 audit(1760582381.742:16425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.5.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f53fbbad97f code=0x7ffc0000 [ 143.993950][ T9027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9027 comm=syz.4.1686 [ 144.011643][ T29] audit: type=1326 audit(1760582381.742:16426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.5.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f53fbbadb2a code=0x7ffc0000 [ 144.044573][ T9031] netlink: 'syz.4.1686': attribute type 7 has an invalid length. [ 144.047490][ T29] audit: type=1326 audit(1760582381.742:16427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.5.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 144.078738][ T29] audit: type=1326 audit(1760582381.742:16428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.5.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 144.078779][ T29] audit: type=1326 audit(1760582381.792:16429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9025 comm="syz.5.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f53fbba5d67 code=0x7ffc0000 [ 144.078948][ T29] audit: type=1326 audit(1760582381.792:16430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9025 comm="syz.5.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53fbb4af79 code=0x7ffc0000 [ 144.078982][ T29] audit: type=1326 audit(1760582381.792:16431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9025 comm="syz.5.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f53fbba5d67 code=0x7ffc0000 [ 144.079023][ T29] audit: type=1326 audit(1760582381.792:16432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9025 comm="syz.5.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f53fbb4af79 code=0x7ffc0000 [ 144.079056][ T29] audit: type=1326 audit(1760582381.792:16433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9025 comm="syz.5.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53fbbaeec9 code=0x7ffc0000 [ 144.160613][ T9033] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 144.279262][ T9037] loop0: detected capacity change from 0 to 1024 [ 144.289096][ T9037] EXT4-fs: Ignoring removed orlov option [ 144.299807][ T9033] SELinux: failed to load policy [ 144.339512][ T9037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.362752][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.430595][ T9041] loop4: detected capacity change from 0 to 1024 [ 144.442788][ T9045] ip6gre1: entered promiscuous mode [ 144.461741][ T9041] EXT4-fs: Ignoring removed orlov option [ 144.553870][ T9054] loop3: detected capacity change from 0 to 128 [ 144.649734][ T9062] FAULT_INJECTION: forcing a failure. [ 144.649734][ T9062] name failslab, interval 1, probability 0, space 0, times 0 [ 144.662590][ T9062] CPU: 1 UID: 0 PID: 9062 Comm: syz.1.1699 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.662632][ T9062] Tainted: [W]=WARN [ 144.662640][ T9062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.662654][ T9062] Call Trace: [ 144.662662][ T9062] [ 144.662673][ T9062] __dump_stack+0x1d/0x30 [ 144.662706][ T9062] dump_stack_lvl+0xe8/0x140 [ 144.662731][ T9062] dump_stack+0x15/0x1b [ 144.662752][ T9062] should_fail_ex+0x265/0x280 [ 144.662798][ T9062] should_failslab+0x8c/0xb0 [ 144.662857][ T9062] kmem_cache_alloc_noprof+0x50/0x480 [ 144.662888][ T9062] ? alloc_empty_file+0x76/0x200 [ 144.663049][ T9062] alloc_empty_file+0x76/0x200 [ 144.663087][ T9062] path_openat+0x68/0x2170 [ 144.663119][ T9062] ? mntput+0x4b/0x80 [ 144.663172][ T9062] ? terminate_walk+0x27f/0x2a0 [ 144.663279][ T9062] ? path_openat+0x1bf8/0x2170 [ 144.663305][ T9062] ? _parse_integer_limit+0x170/0x190 [ 144.663399][ T9062] do_filp_open+0x109/0x230 [ 144.663474][ T9062] do_open_execat+0xd8/0x260 [ 144.663503][ T9062] alloc_bprm+0x25/0x350 [ 144.663545][ T9062] do_execveat_common+0x12e/0x750 [ 144.663572][ T9062] __x64_sys_execve+0x5c/0x70 [ 144.663601][ T9062] x64_sys_call+0x271a/0x3000 [ 144.663630][ T9062] do_syscall_64+0xd2/0x200 [ 144.663674][ T9062] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.663724][ T9062] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.663755][ T9062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.663823][ T9062] RIP: 0033:0x7fe12302eec9 [ 144.663839][ T9062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.663864][ T9062] RSP: 002b:00007fe121a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 144.663890][ T9062] RAX: ffffffffffffffda RBX: 00007fe123285fa0 RCX: 00007fe12302eec9 [ 144.663907][ T9062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000019140 [ 144.663927][ T9062] RBP: 00007fe121a97090 R08: 0000000000000000 R09: 0000000000000000 [ 144.663943][ T9062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.664001][ T9062] R13: 00007fe123286038 R14: 00007fe123285fa0 R15: 00007fff8e8380d8 [ 144.664036][ T9062] [ 144.946980][ T9065] loop5: detected capacity change from 0 to 512 [ 144.975284][ T9065] EXT4-fs: Mount option(s) incompatible with ext2 [ 145.025660][ T9069] loop1: detected capacity change from 0 to 1024 [ 145.054911][ T9069] EXT4-fs: Ignoring removed orlov option [ 145.130685][ T9072] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 145.151317][ T9072] SELinux: failed to load policy [ 145.331994][ T9083] FAULT_INJECTION: forcing a failure. [ 145.331994][ T9083] name failslab, interval 1, probability 0, space 0, times 0 [ 145.344700][ T9083] CPU: 0 UID: 0 PID: 9083 Comm: syz.4.1707 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.344740][ T9083] Tainted: [W]=WARN [ 145.344748][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 145.344784][ T9083] Call Trace: [ 145.344793][ T9083] [ 145.344803][ T9083] __dump_stack+0x1d/0x30 [ 145.344829][ T9083] dump_stack_lvl+0xe8/0x140 [ 145.344855][ T9083] dump_stack+0x15/0x1b [ 145.344944][ T9083] should_fail_ex+0x265/0x280 [ 145.344990][ T9083] should_failslab+0x8c/0xb0 [ 145.345081][ T9083] __kmalloc_noprof+0xa5/0x570 [ 145.345119][ T9083] ? security_prepare_creds+0x52/0x120 [ 145.345221][ T9083] security_prepare_creds+0x52/0x120 [ 145.345284][ T9083] prepare_creds+0x34a/0x4c0 [ 145.345376][ T9083] lookup_user_key+0x1fa/0xd10 [ 145.345405][ T9083] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 145.345438][ T9083] __se_sys_add_key+0x268/0x350 [ 145.345478][ T9083] __x64_sys_add_key+0x67/0x80 [ 145.345589][ T9083] x64_sys_call+0x28c8/0x3000 [ 145.345620][ T9083] do_syscall_64+0xd2/0x200 [ 145.345674][ T9083] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.345780][ T9083] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 145.345877][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.345940][ T9083] RIP: 0033:0x7f4b05f3eec9 [ 145.345961][ T9083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.345986][ T9083] RSP: 002b:00007f4b0499f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 145.346011][ T9083] RAX: ffffffffffffffda RBX: 00007f4b06195fa0 RCX: 00007f4b05f3eec9 [ 145.346028][ T9083] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000200000000300 [ 145.346045][ T9083] RBP: 00007f4b0499f090 R08: fffffffffffffffe R09: 0000000000000000 [ 145.346061][ T9083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.346118][ T9083] R13: 00007f4b06196038 R14: 00007f4b06195fa0 R15: 00007fff6b2757e8 [ 145.346141][ T9083] [ 145.781012][ T9094] x_tables: unsorted underflow at hook 3 [ 145.835149][ T36] usb 2-1: device descriptor read/8, error -110 [ 145.862880][ T9101] __nla_validate_parse: 21 callbacks suppressed [ 145.862914][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 145.889838][ T9099] loop5: detected capacity change from 0 to 1024 [ 145.897866][ T9099] EXT4-fs: Ignoring removed orlov option [ 145.957470][ T36] usb 2-1: new SuperSpeed USB device number 13 using vhci_hcd [ 146.274716][ T9116] loop3: detected capacity change from 0 to 128 [ 146.488611][ T9127] loop4: detected capacity change from 0 to 1024 [ 146.502302][ T9127] EXT4-fs: Ignoring removed orlov option [ 146.522863][ T9129] x_tables: unsorted underflow at hook 3 [ 146.531952][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1725'. [ 146.546096][ T9129] macvlan14: entered allmulticast mode [ 146.740581][ T9138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.766541][ T9138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.782128][ T9138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.817537][ T9138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.973532][ T9123] syz.3.1720: attempt to access beyond end of device [ 146.973532][ T9123] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 146.986999][ T9123] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 147.027005][ T9123] syz.3.1720: attempt to access beyond end of device [ 147.027005][ T9123] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 147.040472][ T9123] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 147.683232][ T9156] serio: Serial port ptm0 [ 147.761482][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 147.770461][ T9163] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1735'. [ 147.779610][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 147.788700][ T9163] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1735'. [ 147.806063][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 147.857958][ T9165] loop3: detected capacity change from 0 to 1024 [ 147.874462][ T9165] EXT4-fs: Ignoring removed orlov option [ 148.075286][ T9181] loop0: detected capacity change from 0 to 128 [ 148.114731][ T9186] loop1: detected capacity change from 0 to 1024 [ 148.125388][ T9183] x_tables: unsorted underflow at hook 3 [ 148.128240][ T9186] EXT4-fs: Ignoring removed orlov option [ 148.137824][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'. [ 148.167919][ T9183] macvlan14: entered allmulticast mode [ 148.233034][ T9193] loop5: detected capacity change from 0 to 128 [ 148.436591][ T9200] ipip0: entered promiscuous mode [ 148.523114][ T9181] ================================================================== [ 148.531350][ T9181] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 148.539740][ T9181] [ 148.542075][ T9181] write to 0xffff88811a013a28 of 4 bytes by task 9191 on cpu 0: [ 148.549737][ T9181] writeback_single_inode+0x150/0x3f0 [ 148.555311][ T9181] sync_inode_metadata+0x5b/0x90 [ 148.560267][ T9181] __generic_file_fsync+0xf8/0x140 [ 148.565424][ T9181] fat_file_fsync+0x49/0x100 [ 148.570033][ T9181] vfs_fsync_range+0x10d/0x130 [ 148.574814][ T9181] generic_file_write_iter+0x1b8/0x2f0 [ 148.580284][ T9181] iter_file_splice_write+0x666/0xa60 [ 148.585667][ T9181] direct_splice_actor+0x156/0x2a0 [ 148.590785][ T9181] splice_direct_to_actor+0x312/0x680 [ 148.596181][ T9181] do_splice_direct+0xda/0x150 [ 148.600953][ T9181] do_sendfile+0x380/0x650 [ 148.605404][ T9181] __x64_sys_sendfile64+0x105/0x150 [ 148.610653][ T9181] x64_sys_call+0x2bb4/0x3000 [ 148.615365][ T9181] do_syscall_64+0xd2/0x200 [ 148.619879][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.625836][ T9181] [ 148.628176][ T9181] read to 0xffff88811a013a28 of 4 bytes by task 9181 on cpu 1: [ 148.635732][ T9181] __mark_inode_dirty+0x191/0x750 [ 148.640783][ T9181] fat_update_time+0x1ec/0x200 [ 148.645569][ T9181] touch_atime+0x148/0x340 [ 148.650006][ T9181] filemap_splice_read+0x6ba/0x740 [ 148.655152][ T9181] splice_direct_to_actor+0x26f/0x680 [ 148.660535][ T9181] do_splice_direct+0xda/0x150 [ 148.665307][ T9181] do_sendfile+0x380/0x650 [ 148.669734][ T9181] __x64_sys_sendfile64+0x105/0x150 [ 148.674938][ T9181] x64_sys_call+0x2bb4/0x3000 [ 148.679622][ T9181] do_syscall_64+0xd2/0x200 [ 148.684145][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.690049][ T9181] [ 148.692369][ T9181] value changed: 0x00000070 -> 0x00000002 [ 148.698099][ T9181] [ 148.700432][ T9181] Reported by Kernel Concurrency Sanitizer on: [ 148.706598][ T9181] CPU: 1 UID: 0 PID: 9181 Comm: syz.0.1742 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.717898][ T9181] Tainted: [W]=WARN [ 148.721701][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.731770][ T9181] ================================================================== [ 148.900082][ T9191] syz.0.1742: attempt to access beyond end of device [ 148.900082][ T9191] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 148.913547][ T9191] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 148.922620][ T9181] syz.0.1742: attempt to access beyond end of device [ 148.922620][ T9181] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 148.936163][ T9181] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 149.026155][ T9193] syz.5.1746: attempt to access beyond end of device [ 149.026155][ T9193] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 149.039681][ T9193] Buffer I/O error on dev loop5, logical block 128, lost async page write