last executing test programs: 2m20.349361424s ago: executing program 3 (id=982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0xb, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000680), 0x2000006c, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) r8 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r9 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r9, 0x0, 0xbf5, 0x2000402) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000075b0"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70200080000eaffb6030000000000008500000083000000bf090000000000145509010000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES8=r11, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES8=r13, @ANYRESHEX=r10, @ANYRES16=r15, @ANYRES16=0x0, @ANYRESOCT=r15, @ANYRESDEC=r9, @ANYRES64=r14, @ANYRES32=r8, @ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r17 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r16, 0x0, 0x3}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d23abff0feef91bfa0f76b74635fc9f9de9ca3c0ec8cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000007b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc9d6ddb88d2f313c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r18, 0xffff0004, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="b201e8be94fbc52d52faf11d59afda4e838f8494e1d3d244afa622c21ff415809b25742e95eac6a9a2fd53c69f9793e3c309ffffffff843ffb78b2e5c5a7c7f7f5b35e71c12389c5d4f373220100ff5537274af83fdd9f10f0b34e3378eff989d29f49563b0a3acf8a745d9e98d5882e246a18e20f4d9543b4fad9a6a99fab8030dad1f92f7032b79bb203a036cb53730347f5f9b5440bf7ef28c5f1d59b4daa0ceabe24ab34de233caf74db26a897c4d731a143da43a4c2913ae880673d7974ca2b182e7bf8565f016c7b4d05ec69dc3f0136f2575b434b81283ace699fdc4acd8576c43b040c6c7021bb5beb7d70051dc374082d77b5098991754fdf3bb0762c9299901e3fa59dbcc660458f42a78d018c0bb8469d50ff6cc62201260666d0df898cabf1fae0daf4897f7cc7edebeea70eaaf47b46badeefd9a116955c37b6fc9ba49cd018e8d7baa408e4c9d17cc287612c7ceadf000d00"/358, @ANYRES8=r6, @ANYBLOB="0100000000000000000001000000dc0008804c0000800400098024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e210000000700000000000000000000000000000001d20600003c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e230a01010100000000000000005000008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a0000ee0ef749d259ddff0000000000000000000000000003000000060005000400000024000300b08073e8d44e7ff0bfca0f771dbe44bb885c69e269c8e9d835b114293a4ddc6e14000200776732"], 0x128}, 0x1, 0x0, 0x0, 0x4004040}, 0x40884) r19 = gettid() process_vm_writev(r19, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0x8, 0xca, 0x5, 0x7, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x73, 0x7fffffffffffffff}, 0x493177c15965dfe9, 0x0, 0x5, 0x0, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0x7}, r19, 0xf, r17, 0x0) 2m19.924231783s ago: executing program 3 (id=989): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1200004, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) socket$netlink(0x10, 0x3, 0x0) close(r5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='xs_stream_read_request\x00', r0, 0x0, 0x8}, 0x18) 2m19.303070745s ago: executing program 3 (id=997): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, 0x0, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x48040) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x64, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb46}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x705}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7c1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x37d}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1c2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x20004080) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) timer_delete(0x0) 2m19.127838268s ago: executing program 3 (id=1002): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0) (async) mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="10"], 0x20}, 0x40000000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="10"], 0x20}, 0x40000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfedb, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x81, 0x0) pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) (async) pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 2m19.100103929s ago: executing program 3 (id=1003): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r4, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [{0x8, 0x2}], {0x10, 0x6}, {0x20, 0x1}}, 0x2c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x8}, 0x8) 2m18.758449905s ago: executing program 3 (id=1009): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) preadv(r0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=""/128, 0x80}], 0x1, 0x1131, 0x8b4) 2m18.713946036s ago: executing program 32 (id=1009): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) preadv(r0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=""/128, 0x80}], 0x1, 0x1131, 0x8b4) 36.382207121s ago: executing program 1 (id=2422): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4b, 0x800, 0x1, 0x144}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x68, r7, 0x909, 0x20000000, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r3, 0x1a7a, 0x4c0, 0x43, 0x0, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000000540)={0x23, 0x2, 0x8, 0x6}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x2}, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r12, @ANYBLOB="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"], 0x1c8}}, 0x0) r13 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r6) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000001600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000015c0)={&(0x7f0000000580)={0x34, r13, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8c0) read(r9, &(0x7f00000005c0)=""/4096, 0x1000) io_uring_enter(r2, 0x11c7, 0xa3f7, 0x41, &(0x7f0000000040)={[0x100000001]}, 0x6) accept$phonet_pipe(r2, &(0x7f0000000200), &(0x7f0000000280)=0x10) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000000)={0x10, 0x7f, 0x8}) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000300)={0x3, 0x3, 0x0, 0x7, 0x6, 0x4, 0x3, 0x800, 0xfffffffd, 0x0, 0x9, 0x2, 0x7b24, 0x3ff}) 36.107629727s ago: executing program 1 (id=2425): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) setitimer(0x0, 0x0, 0x0) 35.983401939s ago: executing program 1 (id=2427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e412f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed554d59300"}, 0x48, 0xffffffffffffffff) 35.92357899s ago: executing program 1 (id=2428): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x7, &(0x7f0000000080)=[{0x7, 0xb, 0x10, 0xbf}, {0x81, 0xb, 0xb4, 0x4006211}, {0xa, 0x9, 0x6, 0x400}, {0x0, 0x5, 0x1, 0x9}, {0x64da, 0x9, 0x9, 0x7}, {0x6fba, 0x1d, 0x2, 0x7}, {0x2, 0x9, 0x4, 0x10}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xd858cff6a05612c4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x101000, 0x10000, 0x1, 0x1, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000b80)='ext2\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000001a00)={[], [{@appraise}, {@measure}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x21}}, {@uid_gt}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000003c0)=@sr0, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') fcntl$notify(r2, 0x402, 0xc0000001) getdents(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000400)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r6, 0x9, 0xfffffffe}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000002c0)={r6, @in6={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x79}}}, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fdff020006000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="170000000300000006000000e900000002000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f9fbd500"/19], 0x50) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000440)=0xe8) getgroups(0x3, &(0x7f0000000480)=[0xee01, 0xffffffffffffffff, 0xee00]) lchown(&(0x7f0000000380)='./file0/file0\x00', r8, r9) 35.068534217s ago: executing program 1 (id=2447): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="093ab94fcf844d63e0417f9574d93245", 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xd8, &(0x7f0000000800)=[@in6={0xa, 0x4e22, 0x5, @local, 0x4d42}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x4, @loopback, 0xfffffff8}, @in6={0xa, 0x4e1f, 0x0, @empty, 0x8001}, @in6={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x40000003}, @in6={0xa, 0x4e20, 0x4, @mcast2, 0x3}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0xfffff000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa1}]}, &(0x7f0000000300)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) socket(0x2, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$caif_stream(0x25, 0x1, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r8, 0x0, 0x401}, 0x18) syz_extract_tcp_res(&(0x7f0000000080), 0x43b6, 0x2) 34.328909641s ago: executing program 1 (id=2458): syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000380)={0x2, 0x1, @empty}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500bde5c064", 0x7}, {&(0x7f0000000100)="174640b6d80fb2020000d38fcc", 0xd}], 0x2}}], 0x1, 0x20000860) 34.328803221s ago: executing program 33 (id=2458): syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000380)={0x2, 0x1, @empty}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500bde5c064", 0x7}, {&(0x7f0000000100)="174640b6d80fb2020000d38fcc", 0xd}], 0x2}}], 0x1, 0x20000860) 3.931360464s ago: executing program 4 (id=2866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xc}) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 3.874210305s ago: executing program 4 (id=2867): io_setup(0x2, &(0x7f0000000000)=0x0) iopl(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xb8}}, 0x20050800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a30000000000800"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x125080, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000000180)="0100fd", 0x3, 0x38}, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000007, 0x0, 0x1}]) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000181, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000020000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0x2, 0x300) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) 3.758168677s ago: executing program 4 (id=2871): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x0, 0x1, 0x100000}, 0x20) r1 = memfd_secret(0x80000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x800000000006}, 0x18) fcntl$setlease(r1, 0x400, 0x0) close(r1) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000680)=@urb_type_iso={0x0, {0xd}, 0xde0, 0x20, &(0x7f0000000040)="ad5ef70d200a9a392e12699cc20e1c2f2a7c8f5efd6191ec24eac1e4775396cc4a123214c37aac1a262fb5ce09", 0x2d, 0xcc, 0x8, 0x61, 0x401, 0x7, &(0x7f0000000140)="88db626873ce02c3d921273a630251b92ea8a7a04834eff1e8737a660e9fdcaf6738bf6eb510124eb045f300cd1b402603dd7cd9395f9f5b7c243537e9d8998862dd90caded883896c1104dfde7a79b00b23d6c0039d339913b4098625f476c0f7e3c9141864c6de6ebd53130ee6200c881287fd0955576d9297bd047c006fd4002edc5e6e334d5ff2e98702d0c87e6298c90a16edf3069f2ff46846bf06d121629f43", [{0x80000001, 0x4, 0xb}, {0x0, 0xef4, 0xfffffffa}, {0x3, 0x0, 0x9}, {0x68, 0x3ff, 0x5}, {0x9, 0xd8cd, 0x8}, {0x6, 0x9, 0x401}, {0x1, 0x0, 0x6}, {0x9, 0x7, 0x8001}, {0x5, 0x101, 0x4}, {0x9, 0x8, 0x4}, {0x5, 0xffffffff, 0x8}, {0x0, 0x7, 0x4}, {0x5, 0xb, 0xa13e}, {0x0, 0xcd, 0x8}, {0xffffffff, 0xb, 0xe}, {0x0, 0x7, 0x5}, {0x0, 0xaa, 0xc}, {0x5, 0x7}, {0x6, 0x9, 0x8}, {0x9, 0x8, 0x1ff}, {0x9, 0x9, 0x6}, {0x3, 0xb, 0x3}, {0x1000, 0x4, 0x3}, {0x9, 0x8000, 0x7}, {0x3, 0x6c}, {0x2, 0x8, 0x2a}, {0x9, 0x4, 0x7}, {0xa, 0xe, 0xc4}, {0x401}, {0x1, 0x3ff, 0x10000}, {0x1, 0x6, 0x7}, {0x1, 0x64d}, {0x800, 0x7fffffff, 0x3}, {0x8, 0x7, 0x101}, {0x0, 0x8, 0xae1c}, {0x8, 0x7, 0xb8e}, {0x18000000, 0x81, 0xffff}, {0x2a9, 0x7, 0x8}, {0xba, 0x7fffffff, 0x1}, {0x9, 0xb708, 0x3a}, {0x8, 0xb557, 0xd}, {0x7, 0x200, 0x6}, {0x98d, 0xe, 0xf69b}, {0x10, 0x1, 0x3}, {0x6, 0x2, 0x81}, {0xda6, 0x0, 0x4}, {0x0, 0xfffffffc, 0x5b}, {0x40, 0x6}, {0x2, 0x9, 0x10000}, {0x101, 0x7, 0x8000}, {0x8001, 0x1dc9, 0xbc}, {0x8, 0xffffffff, 0x4}, {0xfffffff9, 0x8, 0x8}, {0x7, 0x4, 0x7}, {0xd37, 0x7, 0xebd}, {0xdf, 0x511, 0xc}, {0xeb, 0x7, 0x8}, {0x24, 0x15f3, 0xb249}, {0x154f9880, 0x8, 0xf}, {0x7, 0x7, 0x621}, {0x7, 0x3, 0x7}, {0x8, 0xffffffff, 0x1}, {0x5, 0x4, 0x4}, {0x5, 0x8, 0x6}, {0x7f, 0x4, 0x6}, {0x6, 0xf1, 0x7}, {0x2, 0x9b5, 0x1}, {0x2, 0x7f, 0xfffffff7}, {0x3, 0x4, 0x4}, {0x5, 0xffffffbc, 0x5}, {0x7, 0x5, 0x40}, {0xfffffff8, 0x800, 0x8}, {0x5, 0x10, 0x5341}, {0xff, 0x3, 0x4}, {0x2, 0x1, 0xa}, {0xfffffff8, 0x8, 0x62f2}, {0x5, 0xffffffff, 0x3}, {0x101, 0xfffffffc, 0x3}, {0xf0000}, {0x8, 0x9, 0xe}, {0xff, 0x9}, {0x6, 0x3, 0x6}, {0x5, 0x50753b57, 0x9}, {0x800, 0x1, 0x200}, {0x7fffffff, 0x1, 0x2}, {0x913, 0x7fffffff}, {0x2, 0x4, 0x6}, {0x808c, 0x1000, 0x6}, {0xd, 0x7, 0x10001}, {0x0, 0x8, 0x845f}, {0x8, 0xe, 0x5}, {0x4, 0x3, 0x6}, {0x2, 0x7, 0x1000}, {0x7fffffff, 0xffffffff, 0x1}, {0x9, 0x2, 0x6}, {0x7, 0x7ff, 0xc}, {0x8, 0xbf8, 0x6}]}) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) fchdir(r0) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x0, 0x1, 0x100000}, 0x20) (async) memfd_secret(0x80000) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x800000000006}, 0x18) (async) fcntl$setlease(r1, 0x400, 0x0) (async) close(r1) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000680)=@urb_type_iso={0x0, {0xd}, 0xde0, 0x20, &(0x7f0000000040)="ad5ef70d200a9a392e12699cc20e1c2f2a7c8f5efd6191ec24eac1e4775396cc4a123214c37aac1a262fb5ce09", 0x2d, 0xcc, 0x8, 0x61, 0x401, 0x7, &(0x7f0000000140)="88db626873ce02c3d921273a630251b92ea8a7a04834eff1e8737a660e9fdcaf6738bf6eb510124eb045f300cd1b402603dd7cd9395f9f5b7c243537e9d8998862dd90caded883896c1104dfde7a79b00b23d6c0039d339913b4098625f476c0f7e3c9141864c6de6ebd53130ee6200c881287fd0955576d9297bd047c006fd4002edc5e6e334d5ff2e98702d0c87e6298c90a16edf3069f2ff46846bf06d121629f43", [{0x80000001, 0x4, 0xb}, {0x0, 0xef4, 0xfffffffa}, {0x3, 0x0, 0x9}, {0x68, 0x3ff, 0x5}, {0x9, 0xd8cd, 0x8}, {0x6, 0x9, 0x401}, {0x1, 0x0, 0x6}, {0x9, 0x7, 0x8001}, {0x5, 0x101, 0x4}, {0x9, 0x8, 0x4}, {0x5, 0xffffffff, 0x8}, {0x0, 0x7, 0x4}, {0x5, 0xb, 0xa13e}, {0x0, 0xcd, 0x8}, {0xffffffff, 0xb, 0xe}, {0x0, 0x7, 0x5}, {0x0, 0xaa, 0xc}, {0x5, 0x7}, {0x6, 0x9, 0x8}, {0x9, 0x8, 0x1ff}, {0x9, 0x9, 0x6}, {0x3, 0xb, 0x3}, {0x1000, 0x4, 0x3}, {0x9, 0x8000, 0x7}, {0x3, 0x6c}, {0x2, 0x8, 0x2a}, {0x9, 0x4, 0x7}, {0xa, 0xe, 0xc4}, {0x401}, {0x1, 0x3ff, 0x10000}, {0x1, 0x6, 0x7}, {0x1, 0x64d}, {0x800, 0x7fffffff, 0x3}, {0x8, 0x7, 0x101}, {0x0, 0x8, 0xae1c}, {0x8, 0x7, 0xb8e}, {0x18000000, 0x81, 0xffff}, {0x2a9, 0x7, 0x8}, {0xba, 0x7fffffff, 0x1}, {0x9, 0xb708, 0x3a}, {0x8, 0xb557, 0xd}, {0x7, 0x200, 0x6}, {0x98d, 0xe, 0xf69b}, {0x10, 0x1, 0x3}, {0x6, 0x2, 0x81}, {0xda6, 0x0, 0x4}, {0x0, 0xfffffffc, 0x5b}, {0x40, 0x6}, {0x2, 0x9, 0x10000}, {0x101, 0x7, 0x8000}, {0x8001, 0x1dc9, 0xbc}, {0x8, 0xffffffff, 0x4}, {0xfffffff9, 0x8, 0x8}, {0x7, 0x4, 0x7}, {0xd37, 0x7, 0xebd}, {0xdf, 0x511, 0xc}, {0xeb, 0x7, 0x8}, {0x24, 0x15f3, 0xb249}, {0x154f9880, 0x8, 0xf}, {0x7, 0x7, 0x621}, {0x7, 0x3, 0x7}, {0x8, 0xffffffff, 0x1}, {0x5, 0x4, 0x4}, {0x5, 0x8, 0x6}, {0x7f, 0x4, 0x6}, {0x6, 0xf1, 0x7}, {0x2, 0x9b5, 0x1}, {0x2, 0x7f, 0xfffffff7}, {0x3, 0x4, 0x4}, {0x5, 0xffffffbc, 0x5}, {0x7, 0x5, 0x40}, {0xfffffff8, 0x800, 0x8}, {0x5, 0x10, 0x5341}, {0xff, 0x3, 0x4}, {0x2, 0x1, 0xa}, {0xfffffff8, 0x8, 0x62f2}, {0x5, 0xffffffff, 0x3}, {0x101, 0xfffffffc, 0x3}, {0xf0000}, {0x8, 0x9, 0xe}, {0xff, 0x9}, {0x6, 0x3, 0x6}, {0x5, 0x50753b57, 0x9}, {0x800, 0x1, 0x200}, {0x7fffffff, 0x1, 0x2}, {0x913, 0x7fffffff}, {0x2, 0x4, 0x6}, {0x808c, 0x1000, 0x6}, {0xd, 0x7, 0x10001}, {0x0, 0x8, 0x845f}, {0x8, 0xe, 0x5}, {0x4, 0x3, 0x6}, {0x2, 0x7, 0x1000}, {0x7fffffff, 0xffffffff, 0x1}, {0x9, 0x2, 0x6}, {0x7, 0x7ff, 0xc}, {0x8, 0xbf8, 0x6}]}) (async) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) (async) 3.660965419s ago: executing program 4 (id=2875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYBLOB="fdffffff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000d00000400"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000400)=""/270, 0x10e}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xf}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x98}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000340)=""/165, 0xa5, 0x22, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x4, 0x4, {0xa, 0x4e23, 0x3, @mcast2, 0x354}}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r8, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) close(r1) 2.793884806s ago: executing program 4 (id=2887): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x2, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, &(0x7f0000000100)={{0x0, 0x3ffffffe}}, 0x0) 2.745901087s ago: executing program 4 (id=2888): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x4) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 2.06031076s ago: executing program 2 (id=2902): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) syz_io_uring_setup(0x7585, &(0x7f0000000140)={0x0, 0xafed, 0x3c00, 0x2, 0x261}, &(0x7f0000000000), 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000040)={0x0, r2, 0x31, {0x5, 0x10001}, 0x6}, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010300000000fbdbdf251c1000001800018014000200626f6e6430"], 0x2c}}, 0x40006) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r12, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 2.04551663s ago: executing program 0 (id=2903): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r3, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [{0x8, 0x2}], {0x10, 0x6}, {0x20, 0x1}}, 0x2c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 2.020751201s ago: executing program 0 (id=2904): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) (fail_nth: 8) 1.910551323s ago: executing program 0 (id=2906): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x67, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="93b39d5b2fb6faca5b654297bc5b59479cc52fb9378f07c7fa10b759dc994223811cda0c9c717cfbf7fa6ed00778289d1f3ea1bb6f6f94918709f8f29d530757d0e13bfda636ecaa611ceb99e7cc1938c5d340bb6ce15b8df25d186bf614ce4420053caccea719d6a95bb2fff64918190e851a044f47a5bdf488e62cf0c04cedca447ea5d3839e1f17826b9c3d638011581bf91130aa04dea89514e39e3ff8a2e8bfdae42bf8ca10fd810de12826ba5efdbd881d481ac2f7d7a033597d8f"], 0x48) fadvise64(r5, 0x5, 0x3ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x87, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x65, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x0, @void}, "a48f0b1a6ce64ac3edc7137edf44fa5078dc44552b075213169048fc8048d3d534a40f6c458d17241a2f472eb8491f2c720958e666f2c8e4e107f87a0c3c1ba09259131f751cde7ecbe2fbb0e5b8de46fe3eb733cf7c04642e"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 1.273203855s ago: executing program 5 (id=2912): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0xfffffffffffffe02, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="05000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000008bfe87006c325f64726f70730000000005008e0001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r4}, 0x38) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000001280)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 1.230752216s ago: executing program 5 (id=2913): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)) r2 = syz_open_pts(r1, 0x101000) r3 = dup3(r2, r1, 0x0) ioctl$TIOCEXCL(r3, 0x540c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', r4, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xe8, 0xa0, 0x4, 0x3, 0x0, 0x3, 0x6, 0x1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={r7, 0x3b6}, 0xc) r8 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b80)=',-\x10*\xc8+\x14\xc6@\xcf\xb1;\xb5\xee;\x00\xee7\x9f\x9b\x17\x8dv\xed\x96M\xc1\x0ezw\xea\xccgl{\xa9I\xe6\xe6G\x8e2\xb6\xc2\"$0=\x89\xe6\tt\xaf\xea\xfc_<(]\xf6kFNE}\xd6\x13\xc8idz\xff\xff\x00\x00\x89y\xc1b\x9d\x818\xaa0D\xaf\xa1\x82\xa5.\xa3\"\xe5\x19{!\xc6\xa5\xb4\xddw3\t\x00\x00\xd0\x9b\x81`{R9A$z\x90\x90\x80\x8euj\xb4P\x96\x9b\x1f\xc5^\xc0\xf3\xa5\xd1\xf2\x02\xa5Z^c\xef2E\x1f\xf3 \xcc\xd0P3\x12\xe0\xefv\xaf\xe1.\xea\xebgF\xa5\x92|\x9b\xba\xc4\x1c\x8a\xf6\v\x94\n\xb9\x7f3YR\xc3wMd\xd2\xdf\xd2\xbb\xff\xe3\xb6\xd8\xd0r\xc0\xca\xc7\xfa\x0efX\x85\xcde\xc7\x88L\x1c\x9bw\x15!!\xb8\x06l\xb9\xf7\x82%sb\xc0\x89m\x16\b4\x87\x8a\xb0\x02\xd8\xc5\xbc\xc3\x9c\xabF\xd1x\xc4\xc2b\x1b\xb1\xbc\xb5*\xd7\x19\xe2\xc6\x04\xfa\xf0Hbk\xc7\xce\xbdQ\x06\x84\x04Dc\x81\x02\'\x95\xe9\xb2*s\xf9\xe0\x14\x88\xea\x85\x01\xed\v\x05\xe1P\xef\xf3^\x10s\xa3\xce\xd2/\xd3>w\x8d\x11\x00\xb2\xff\x88\xa9\xe7\x8c\xf0\xcf\xd6u\xff\xc1%N\xe7\xc3T\x19\x93\xd0\b\xd3K\xb1\r\xd0DXN\x98\x01\x88\xcc\xdc\xf2\x12\xaf\xa0o?wg\xb0\xf4-p\xa9-\v\t\x04\x15\xf6\xecOp\xfd`\x1bu}1x\x99\x88\xaaA\xb9 \xbeB3^\xa1\x9e\xa2\x1cz\x8a\xe4\xf9\xa0\xd9\xc5\xben;\x1aLGZ\xf4\xdapbH.\xc4\x12\xf0\x94\x943\xe8r\x89\x8cy\x02d\xe5B\x16\xe3\xb8dnP]\xc2\xfe\xd6D\x92\x1df\xe7\xdb\x9e(\x7f\a\xac\x19X\xd7GK\xb8M\x1c#\x94\xc7&\xda\xc2\xb1\xf3\x1a\xecI}1M\x9b\x9f\xcb\xa3v\x9f\x89\xd2Q\x8b\"\x8d\x98E\xa5\x8bT\xfb\"\xa8\xe5X\xac\xd2\xd3k\xefd;>\xf9\xb1O\x13L#\xe0\x01\x9a\x90\xd9\xc6\x8d\xcb!\xbeZ\x8b\x90\b\xf5\xc2\nA\x06\xd8O\xa7}E\xb47\xb9@\xcc\x8c\x06\xfe\x81EH\x84\xb6\xbe\x19\xa3\xbao!', &(0x7f0000000a40)='$\x00-<\x00-\xc7\xf2\xd74!\xdc\x97{%-\x9c\x1eY\xd2\x9a\x86\xa6\xa6\xf8Og\x1d\xff\x1f\x86\xeb\x9f\xad-\xa5\xf5 \'\xa8W\xef\xc6=\xfc\xa7\xb0$Hs\xcf!\xe9\'t\b\x14\xa2\xc9\xc6\xb4}\xea\x05\xc5\xba}W\x1b3\xdcE\x90\x85\x1d\x1a`\xb9\x06\xd2tRy\xdd\x8c\x9a\f\x11[\x86 \xa34g\x1f\xfap\x84.\x81\xd1\xced\xc9$\xeb\xe4\xd9}\x84\x8d\x18\xd0\xc6|3\xbd\x92u_\xbel\v\xd6\xb5\xd4E\xcf\xce\x93\xe5e\xecn\x0eEz\xb0@\x8d_m/\x1a\xec\xbc\xe0\xb2\x8eW\x14\xca\xf1\t\xda\xba\xec\x19\x0fTc\xd0\xf7\xdc\xf02\x04`\x18M\xfc\r\xaa\xef\xc7', 0x0) close(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7c}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x6f}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100)) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x7, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="a72b13f6b94d38", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) 1.108505809s ago: executing program 2 (id=2914): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r3, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [{0x8, 0x2}], {0x10, 0x6}, {0x20, 0x1}}, 0x2c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 1.104923588s ago: executing program 0 (id=2915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000003080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="01000100fe00000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8, 0x80000) 1.060206409s ago: executing program 0 (id=2916): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_clone3(&(0x7f0000004300)={0x4004000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f0000002d00)=[0x0], 0x1}, 0x58) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r0, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"0000000000007b460100ff00"}}}}, 0x118) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60010002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020603000000000000000000000000001400078008001240000000000500150001000000050001000600000005aec4b43900000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274000000"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c0001809303fb1870f108000140a9ffffffffff0500070084000000060004404e2200000c000280080001407f000001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fdatasync(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x7fffffff, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 918.753192ms ago: executing program 6 (id=2918): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) io_setup(0x3, &(0x7f0000000340)=0x0) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x58a, r0, &(0x7f0000000500)="31c29075ddfa959ff93fa313cb9496aea4ca95b431f71d371214ed8a7cff9547787e5fec4e064beef6894fc30a56aa3292e8da7d6477048b1911011ca767decb4b276f4a812a17bc789796ae74f235e6bc0a90e741acd5cde9834d5d2d5c4dfb969b30590433e4a229252dd23201951cfc14a1a758ca1bd57b09683535c68521", 0x80, 0x3a, 0x0, 0x3}, &(0x7f0000000740)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080), &(0x7f0000000780)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x58a, r0, &(0x7f0000000500)="31c29075ddfa959ff93fa313cb9496aea4ca95b431f71d371214ed8a7cff9547787e5fec4e064beef6894fc30a56aa3292e8da7d6477048b1911011ca767decb4b276f4a812a17bc789796ae74f235e6bc0a90e741acd5cde9834d5d2d5c4dfb969b30590433e4a229252dd23201951cfc14a1a758ca1bd57b09683535c68521", 0x80, 0x3a, 0x0, 0x3}, &(0x7f0000000740)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001478659e6060000008000910e81f836a99b7a396f085dd3ef5c704974e10d75449e1d7e9efdc8bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080), &(0x7f0000000780)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x58a, r0, &(0x7f0000000500)="31c29075ddfa959ff93fa313cb9496aea4ca95b431f71d371214ed8a7cff9547787e5fec4e064beef6894fc30a56aa3292e8da7d6477048b1911011ca767decb4b276f4a812a17bc789796ae74f235e6bc0a90e741acd5cde9834d5d2d5c4dfb969b30590433e4a229252dd23201951cfc14a1a758ca1bd57b09683535c68521", 0x80, 0x3a, 0x0, 0x3}, &(0x7f0000000740)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001478659e6060000008000910e81f836a99b7a396f085dd3ef5c704974e10d75449e1d7e9efdc8bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080), &(0x7f0000000780)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="93b39d5b2fb6faca5b654297bc5b59479cc52fb9378f07c7fa10b759dc994223811cda0c9c717cfbf7fa6ed00778289d1f3ea1bb6f6f94918709f8f29d530757d0e13bfda636ecaa611ceb99e7cc1938c5d340bb6ce15b8df25d186bf614ce4420053caccea719d6a95bb2fff64918190e851a044f47a5bdf488e62cf0c04cedca447ea5d3839e1f17826b9c3d638011581bf91130aa04dea89514e39e3ff8a2e8bfdae42bf8ca10fd810de12826ba5efdbd881d481ac2f7d7a033597d8f"], 0x48) fadvise64(r5, 0x5, 0x3ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x87, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x65, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x0, @void}, "a48f0b1a6ce64ac3edc7137edf44fa5078dc44552b075213169048fc8048d3d534a40f6c458d17241a2f472eb8491f2c720958e666f2c8e4e107f87a0c3c1ba09259131f751cde7ecbe2fbb0e5b8de46fe3eb733cf7c04642e"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 381.999723ms ago: executing program 5 (id=2926): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe", 0x39}], 0x1}}], 0x2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d900000080c10000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000e87f00000800", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000010000800000", @ANYRES32=r3, @ANYBLOB="0000000000000008b70383ec72f3bbdd2a49b112000000000000850000001b000052b7000000cc5b0000c2aa35eb00c3e533592f69d1c7c87e307a87197600000000000000002cfbd13b09fa83e9635240c49f42705d09c57b1b9fe87acb20b3665b22f09e5577ec9e809aeaf6ddc3898fa538985f7dc7d92855914a26fa485297a0e3c9d1cdc416bc40d198a3f8940de21a34792171331825eb94e48fd472", @ANYRES16, @ANYRESHEX=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='io.stat\x00', 0x275a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utimes(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r9, 0x1, &(0x7f0000000480)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x8, 0x0, r8, &(0x7f0000000600)="6d2868544c9431cff63a37c148582d6c244f58708e20e6", 0x17, 0x3, 0x0, 0x1}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x8010000, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x25, r8}, 0x94) 334.034423ms ago: executing program 6 (id=2927): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="a82ecb075843f72a00000000000039c98919f2f1421deb12e207728ce0b0244b7f8494f1ca5dfc22b324aa86d3233fb0a0996797a547c4c596689b449332b2bb000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702d00dee0aa64b1c3c000000000000b7040000000000018500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x43, 0x0, 0x0, 0x0, 0x0, 0x10100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xffffffff, 0x6, 0xbcc, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t&0&<\t') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r4 = msgget$private(0x0, 0xfffffffffffffffd) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync() ustat(0x3, &(0x7f0000000000)) sync() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) msgrcv(r4, 0x0, 0x0, 0x2, 0x3000) msgsnd(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000087fd285c63e41580364e19e4423073e6d20800000065dc40917dc07ae5a100c1570700d09e41cacbf4a5"], 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) 190.685956ms ago: executing program 5 (id=2928): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfff, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xfffffffffffffffe, 0x0, 0x9}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet(r6, &(0x7f0000000280)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x2, 0x7, {{0x13, 0x4, 0x2, 0x6, 0x4c, 0x66, 0x0, 0xa, 0x2f, 0x0, @rand_addr=0x6, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x27, 0x4c, [@private=0xa010100, @broadcast, @private=0xa010102, @private=0xa010100, @private=0xa010101, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1]}, @generic={0x7, 0x4, "81b3"}, @timestamp_addr={0x44, 0xc, 0xe1, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}]}, @end]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@bridge_newvlan={0x18, 0x76, 0x1, 0x0, 0x0, {0x7, 0x2, 0x0, r7}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) (async) flistxattr(r0, &(0x7f0000000240)=""/10, 0xa) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014, 0xa2041}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffff8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 123.241608ms ago: executing program 0 (id=2929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x16, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x16, 0x0, @opaque="65ef83f7775bcf0ddbfa95cc714f"}}}}}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/bnep\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r3, 0x0, 0x4000015) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) fcntl$setpipe(r5, 0x407, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f00000000c0)={0x3, 0x5, 0x6, 0x5, 0x2, 0x7f}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) 122.690788ms ago: executing program 6 (id=2930): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) io_setup(0x3, &(0x7f0000000340)=0x0) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x58a, r0, &(0x7f0000000500)="31c29075ddfa959ff93fa313cb9496aea4ca95b431f71d371214ed8a7cff9547787e5fec4e064beef6894fc30a56aa3292e8da7d6477048b1911011ca767decb4b276f4a812a17bc789796ae74f235e6bc0a90e741acd5cde9834d5d2d5c4dfb969b30590433e4a229252dd23201951cfc14a1a758ca1bd57b09683535c68521", 0x80, 0x3a, 0x0, 0x3}, &(0x7f0000000740)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080), &(0x7f0000000780)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00 [ 206.099965][T11243] __dump_stack+0x1d/0x30 [ 206.100060][T11243] dump_stack_lvl+0xe8/0x140 [ 206.100076][T11243] dump_stack+0x15/0x1b [ 206.100089][T11243] should_fail_ex+0x265/0x280 [ 206.100177][T11243] should_fail+0xb/0x20 [ 206.100197][T11243] should_fail_usercopy+0x1a/0x20 [ 206.100221][T11243] _copy_from_user+0x1c/0xb0 [ 206.100323][T11243] ___sys_sendmsg+0xc1/0x1d0 [ 206.100411][T11243] __x64_sys_sendmsg+0xd4/0x160 [ 206.100434][T11243] x64_sys_call+0x191e/0x2ff0 [ 206.100532][T11243] do_syscall_64+0xd2/0x200 [ 206.100561][T11243] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.100589][T11243] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 206.100621][T11243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.100644][T11243] RIP: 0033:0x7f9008ccebe9 [ 206.100659][T11243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.100679][T11243] RSP: 002b:00007f9007737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.100726][T11243] RAX: ffffffffffffffda RBX: 00007f9008f05fa0 RCX: 00007f9008ccebe9 [ 206.100788][T11243] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 206.100802][T11243] RBP: 00007f9007737090 R08: 0000000000000000 R09: 0000000000000000 [ 206.100815][T11243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.100972][T11243] R13: 00007f9008f06038 R14: 00007f9008f05fa0 R15: 00007ffde343da48 [ 206.100993][T11243] [ 206.285146][T11249] loop5: detected capacity change from 0 to 1024 [ 206.287348][T11223] lo speed is unknown, defaulting to 1000 [ 206.313419][ T6749] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.327501][T11249] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 206.338471][T11249] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 206.348641][T11223] lo speed is unknown, defaulting to 1000 [ 206.398924][T11249] JBD2: no valid journal superblock found [ 206.404710][T11249] EXT4-fs (loop5): Could not load journal inode [ 206.440210][ T6749] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.461318][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2541'. [ 206.487103][T11223] chnl_net:caif_netlink_parms(): no params data found [ 206.505410][T11249] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 206.532066][ T6749] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.552337][T11256] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 206.600312][T11261] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2541'. [ 206.614957][T11256] team2: entered promiscuous mode [ 206.620727][T11256] team2: entered allmulticast mode [ 206.679322][ T6749] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.714652][T11271] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2544'. [ 206.767220][T11223] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.774382][T11223] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.793898][T11265] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2542'. [ 206.855298][T11223] bridge_slave_0: entered allmulticast mode [ 206.870933][T11223] bridge_slave_0: entered promiscuous mode [ 206.904470][T11223] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.911855][T11223] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.924915][T11223] bridge_slave_1: entered allmulticast mode [ 206.931767][T11223] bridge_slave_1: entered promiscuous mode [ 206.943658][ T6749] tipc: Resetting bearer [ 206.949573][T11293] loop4: detected capacity change from 0 to 512 [ 206.976063][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2552'. [ 206.988904][T11291] loop5: detected capacity change from 0 to 512 [ 206.996284][T11293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.012700][T11291] EXT4-fs: Ignoring removed oldalloc option [ 207.037390][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.047945][T11291] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.2550: Parent and EA inode have the same ino 15 [ 207.071705][T11303] loop2: detected capacity change from 0 to 1024 [ 207.094612][T11291] EXT4-fs (loop5): Remounting filesystem read-only [ 207.100699][T11308] SELinux: Context system_u:object_r:v4l_device_t:s0 is not valid (left unmapped). [ 207.103987][T11291] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 207.121712][T11303] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 207.132619][T11303] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 207.144103][T11291] EXT4-fs (loop5): 1 orphan inode deleted [ 207.150508][T11291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.163863][T11303] JBD2: no valid journal superblock found [ 207.169616][T11303] EXT4-fs (loop2): Could not load journal inode [ 207.190565][T11303] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 207.210374][ T6522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.228386][ T6749] tipc: Disabling bearer [ 207.259660][ T6749] bond0 (unregistering): Released all slaves [ 207.269639][ T6749] bond1 (unregistering): Released all slaves [ 207.322400][T11223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.331588][ T6749] tipc: Disabling bearer [ 207.336553][ T6749] tipc: Left network mode [ 207.343804][T11223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.354303][ T6749] IPVS: stopping master sync thread 9122 ... [ 207.398704][T11330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2564'. [ 207.416078][T11223] team0: Port device team_slave_0 added [ 207.441221][ T6749] hsr_slave_0: left promiscuous mode [ 207.450778][ T6749] hsr_slave_1: left promiscuous mode [ 207.458841][ T6749] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 207.466021][ T6749] batman_adv: batadv0: Removing interface: veth1_vlan [ 207.476888][T11326] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2563'. [ 207.490157][ T6749] veth1_macvtap: left promiscuous mode [ 207.495642][ T6749] veth0_macvtap: left promiscuous mode [ 207.508201][ T6749] veth1_vlan: left promiscuous mode [ 207.514934][ T6749] veth0_vlan: left promiscuous mode [ 207.532026][T11337] loop4: detected capacity change from 0 to 1024 [ 207.551015][T11337] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 207.561936][T11337] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 207.598871][T11337] JBD2: no valid journal superblock found [ 207.604649][T11337] EXT4-fs (loop4): Could not load journal inode [ 207.624210][T11337] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 207.684434][ T6753] smc: removing ib device sz1 [ 207.694269][T11223] team0: Port device team_slave_1 added [ 207.820504][T11223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.827542][T11223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.853470][T11223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.903403][T11223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.910398][T11223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.936838][T11223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.077106][T11223] hsr_slave_0: entered promiscuous mode [ 208.086921][T11370] loop5: detected capacity change from 0 to 1024 [ 208.095072][T11223] hsr_slave_1: entered promiscuous mode [ 208.108138][T11223] debugfs: 'hsr0' already exists in 'hsr' [ 208.113875][T11223] Cannot create hsr debugfs directory [ 208.119895][T11372] dummy0: entered allmulticast mode [ 208.135689][T11372] lo speed is unknown, defaulting to 1000 [ 208.147963][T11370] EXT4-fs: Ignoring removed orlov option [ 208.153638][T11370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.179533][T11372] lo speed is unknown, defaulting to 1000 [ 208.229239][T11370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.256706][T11371] dummy0: left allmulticast mode [ 208.307548][ T6522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.321867][T11380] loop4: detected capacity change from 0 to 1024 [ 208.346188][T11380] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 208.357455][T11380] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 208.384294][T11380] JBD2: no valid journal superblock found [ 208.390164][T11380] EXT4-fs (loop4): Could not load journal inode [ 208.408341][T11392] loop6: detected capacity change from 0 to 1024 [ 208.417413][T11380] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 208.440255][T11392] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 208.451190][T11392] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 208.490355][T11392] JBD2: no valid journal superblock found [ 208.496131][T11392] EXT4-fs (loop6): Could not load journal inode [ 208.545658][T11223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.561718][T11392] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 208.577810][T11223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.605251][T11223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.619263][T11223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.690160][T11415] loop4: detected capacity change from 0 to 512 [ 208.703045][T11223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.736360][T11223] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.749002][T11415] journal_path: Non-blockdev passed as './bus' [ 208.755193][T11415] EXT4-fs: error: could not find journal device path [ 208.769237][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.776350][ T6753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.805417][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.812486][ T6753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.849446][T11422] loop6: detected capacity change from 0 to 512 [ 208.854594][T11223] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.866090][T11223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.989986][ T29] kauditd_printk_skb: 729 callbacks suppressed [ 208.990001][ T29] audit: type=1326 audit(208.968:21278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4856ebe9 code=0x7ffc0000 [ 209.058513][T11422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.069996][T11223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.082109][ T29] audit: type=1326 audit(208.968:21279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4856ebe9 code=0x7ffc0000 [ 209.105104][ T29] audit: type=1326 audit(208.968:21280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f5c4856ebe9 code=0x7ffc0000 [ 209.162393][T11433] __nla_validate_parse: 2 callbacks suppressed [ 209.162407][T11433] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2594'. [ 209.241462][T11438] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.2593: iget: bad i_size value: 2533274857506816 [ 209.264124][ T29] audit: type=1326 audit(209.208:21281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4856ebe9 code=0x7ffc0000 [ 209.287290][ T29] audit: type=1326 audit(209.208:21282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4856ebe9 code=0x7ffc0000 [ 209.311186][ T29] audit: type=1326 audit(209.288:21283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f5c4856ebe9 code=0x7ffc0000 [ 209.334102][ T29] audit: type=1326 audit(209.288:21284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4856ebe9 code=0x7ffc0000 [ 209.334168][ T29] audit: type=1326 audit(209.288:21285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4856ebe9 code=0x7ffc0000 [ 209.348809][T11422] syzkaller1: entered promiscuous mode [ 209.348827][T11422] syzkaller1: entered allmulticast mode [ 209.388903][T11223] veth0_vlan: entered promiscuous mode [ 209.422598][T11422] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.2593: iget: bad i_size value: 2533274857506816 [ 209.451831][ T29] audit: type=1400 audit(209.428:21286): avc: denied { ioctl } for pid=11441 comm="gtp" path="socket:[31066]" dev="sockfs" ino=31066 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.506479][T11438] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.2593: iget: bad i_size value: 2533274857506816 [ 209.542483][T11223] veth1_vlan: entered promiscuous mode [ 209.549785][T11454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2596'. [ 209.559339][T11452] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.2593: iget: bad i_size value: 2533274857506816 [ 209.598367][T11223] veth0_macvtap: entered promiscuous mode [ 209.612498][T11223] veth1_macvtap: entered promiscuous mode [ 209.642535][T11422] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.2593: iget: bad i_size value: 2533274857506816 [ 209.658926][T11223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.682944][T11223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.729037][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.823141][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.843405][ T29] audit: type=1326 audit(209.818:21287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.0.2532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7151febe9 code=0x7ffc0000 [ 209.877962][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.886864][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.950466][T10945] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.094057][T11482] loop5: detected capacity change from 0 to 1024 [ 210.101338][T11482] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 210.112233][T11482] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 210.199549][T11482] JBD2: no valid journal superblock found [ 210.205285][T11482] EXT4-fs (loop5): Could not load journal inode [ 210.229461][T11482] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 210.305745][T11497] loop6: detected capacity change from 0 to 1024 [ 210.353821][T11497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 210.521077][T11507] loop5: detected capacity change from 0 to 1024 [ 210.533173][T11512] lo speed is unknown, defaulting to 1000 [ 210.538403][T10945] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 210.547731][T11512] lo speed is unknown, defaulting to 1000 [ 210.618468][T11507] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 210.629365][T11507] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 210.733557][T11507] JBD2: no valid journal superblock found [ 210.739350][T11507] EXT4-fs (loop5): Could not load journal inode [ 210.800815][T11524] 9pnet_fd: Insufficient options for proto=fd [ 210.815832][T11524] netlink: 'syz.6.2616': attribute type 10 has an invalid length. [ 210.823719][T11524] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2616'. [ 210.841708][T11507] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 211.002645][T11524] batman_adv: batadv0: Adding interface: veth1_vlan [ 211.009442][T11524] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.078819][T11524] batman_adv: batadv0: Interface activated: veth1_vlan [ 211.328928][T11537] tipc: Started in network mode [ 211.333926][T11537] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 211.342859][T11537] tipc: Enabling of bearer rejected, failed to enable media [ 211.384522][T11537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11537 comm=syz.0.2621 [ 211.431420][T11551] loop6: detected capacity change from 0 to 1024 [ 211.445835][T11551] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 211.456868][T11551] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 211.508383][T11551] JBD2: no valid journal superblock found [ 211.514209][T11551] EXT4-fs (loop6): Could not load journal inode [ 211.535619][T11551] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 211.571994][T11560] sctp: [Deprecated]: syz.5.2628 (pid 11560) Use of int in max_burst socket option. [ 211.571994][T11560] Use struct sctp_assoc_value instead [ 211.601879][T11560] loop5: detected capacity change from 0 to 512 [ 211.619658][T11560] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.648027][T11560] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 211.708218][T11570] loop6: detected capacity change from 0 to 1024 [ 211.715597][T11570] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 211.726579][T11570] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 211.750995][T11560] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 211.769432][T11570] JBD2: no valid journal superblock found [ 211.775206][T11570] EXT4-fs (loop6): Could not load journal inode [ 211.858602][T11570] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 211.898432][T11560] System zones: 1-12 [ 211.963814][T11560] EXT4-fs (loop5): 1 truncate cleaned up [ 211.965556][T11581] lo speed is unknown, defaulting to 1000 [ 211.975588][T11581] lo speed is unknown, defaulting to 1000 [ 211.987641][T11560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.111827][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2628'. [ 212.262815][ T6522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.377645][T11599] loop4: detected capacity change from 0 to 128 [ 212.384453][T11599] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 212.438891][T11599] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 212.462291][T11591] loop2: detected capacity change from 0 to 1024 [ 212.483133][T11593] loop5: detected capacity change from 0 to 1024 [ 212.497335][T11591] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 212.508393][T11591] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 212.525214][T11593] ext4: Unknown parameter 'func' [ 212.570576][T11591] JBD2: no valid journal superblock found [ 212.576403][T11591] EXT4-fs (loop2): Could not load journal inode [ 212.591406][T11593] FAULT_INJECTION: forcing a failure. [ 212.591406][T11593] name failslab, interval 1, probability 0, space 0, times 0 [ 212.604098][T11593] CPU: 1 UID: 0 PID: 11593 Comm: syz.5.2635 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.604142][T11593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.604196][T11593] Call Trace: [ 212.604203][T11593] [ 212.604210][T11593] __dump_stack+0x1d/0x30 [ 212.604274][T11593] dump_stack_lvl+0xe8/0x140 [ 212.604290][T11593] dump_stack+0x15/0x1b [ 212.604304][T11593] should_fail_ex+0x265/0x280 [ 212.604383][T11593] ? audit_log_d_path+0x8d/0x150 [ 212.604418][T11593] should_failslab+0x8c/0xb0 [ 212.604442][T11593] __kmalloc_cache_noprof+0x4c/0x320 [ 212.604493][T11593] audit_log_d_path+0x8d/0x150 [ 212.604521][T11593] audit_log_d_path_exe+0x42/0x70 [ 212.604556][T11593] audit_log_task+0x1e9/0x250 [ 212.604589][T11593] audit_seccomp+0x61/0x100 [ 212.604631][T11593] ? __seccomp_filter+0x68c/0x10d0 [ 212.604649][T11593] __seccomp_filter+0x69d/0x10d0 [ 212.604672][T11593] ? __list_add_valid_or_report+0x38/0xe0 [ 212.604703][T11593] ? _raw_spin_unlock+0x26/0x50 [ 212.604765][T11593] __secure_computing+0x82/0x150 [ 212.604810][T11593] syscall_trace_enter+0xcf/0x1e0 [ 212.604833][T11593] do_syscall_64+0xac/0x200 [ 212.604858][T11593] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 212.604883][T11593] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 212.604960][T11593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.604981][T11593] RIP: 0033:0x7fc6e9e7d5fc [ 212.604997][T11593] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 212.605017][T11593] RSP: 002b:00007fc6e88e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.605037][T11593] RAX: ffffffffffffffda RBX: 00007fc6ea0b5fa0 RCX: 00007fc6e9e7d5fc [ 212.605050][T11593] RDX: 000000000000000f RSI: 00007fc6e88e70a0 RDI: 0000000000000006 [ 212.605064][T11593] RBP: 00007fc6e88e7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.605097][T11593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.605107][T11593] R13: 00007fc6ea0b6038 R14: 00007fc6ea0b5fa0 R15: 00007ffeae0d6a88 [ 212.605122][T11593] [ 212.916857][T11591] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 213.059827][T11610] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2642'. [ 213.128789][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2642'. [ 213.192335][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2642'. [ 213.263059][T11616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2644'. [ 213.298042][ T6753] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 213.461174][T11633] lo speed is unknown, defaulting to 1000 [ 213.496182][T11640] loop2: detected capacity change from 0 to 512 [ 213.507942][T11633] lo speed is unknown, defaulting to 1000 [ 213.736188][T11640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.801425][T11640] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2649: corrupted inode contents [ 213.877282][T11640] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.2649: mark_inode_dirty error [ 213.908620][T11640] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2649: corrupted inode contents [ 213.979912][T11649] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2649: corrupted inode contents [ 214.035485][T11649] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.2649: mark_inode_dirty error [ 214.078318][T11649] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2649: corrupted inode contents [ 214.125063][T11649] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.2649: mark_inode_dirty error [ 214.129978][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 214.129995][ T29] audit: type=1400 audit(214.098:21828): avc: denied { mount } for pid=11657 comm="syz.4.2654" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 214.164613][ T29] audit: type=1400 audit(214.098:21829): avc: denied { unmount } for pid=11657 comm="syz.4.2654" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 214.249067][T11649] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2649: corrupted inode contents [ 214.268078][T11649] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.2649: mark_inode_dirty error [ 214.376664][T11673] loop4: detected capacity change from 0 to 128 [ 214.395680][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.413654][T11673] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.441086][ T29] audit: type=1326 audit(214.418:21830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e9e7ebe9 code=0x7ffc0000 [ 214.464110][ T29] audit: type=1326 audit(214.418:21831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e9e7ebe9 code=0x7ffc0000 [ 214.487370][ T29] audit: type=1326 audit(214.418:21832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fc6e9e7ebe9 code=0x7ffc0000 [ 214.510284][ T29] audit: type=1326 audit(214.418:21833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e9e7ebe9 code=0x7ffc0000 [ 214.533290][ T29] audit: type=1326 audit(214.418:21834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11674 comm="syz.5.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e9e7ebe9 code=0x7ffc0000 [ 214.535990][T11673] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.677395][ T29] audit: type=1400 audit(214.638:21835): avc: denied { ioctl } for pid=11686 comm="syz.5.2662" path="socket:[31570]" dev="sockfs" ino=31570 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.736379][T11682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2658'. [ 214.849206][ T29] audit: type=1400 audit(214.828:21836): avc: denied { read } for pid=11693 comm="syz.2.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.884323][ T29] audit: type=1326 audit(214.858:21837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.0.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7151febe9 code=0x7ffc0000 [ 215.171290][T11707] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 215.289118][T11709] lo speed is unknown, defaulting to 1000 [ 215.305421][T11709] lo speed is unknown, defaulting to 1000 [ 215.335342][ T6753] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.401915][T11715] loop4: detected capacity change from 0 to 512 [ 215.450896][T11715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.579152][T11715] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2669: corrupted inode contents [ 215.601655][T11715] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2669: mark_inode_dirty error [ 215.634406][T11715] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2669: corrupted inode contents [ 215.714345][T11730] 9pnet_fd: Insufficient options for proto=fd [ 215.717867][T11715] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2669: mark_inode_dirty error [ 215.752274][T11730] random: crng reseeded on system resumption [ 215.781580][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.789887][T11734] loop6: detected capacity change from 0 to 1024 [ 215.824520][T11734] EXT4-fs: Ignoring removed orlov option [ 215.883661][T11734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.918172][T11733] loop2: detected capacity change from 0 to 1024 [ 215.924864][T11733] EXT4-fs: Ignoring removed bh option [ 215.930360][T11733] EXT4-fs: inline encryption not supported [ 215.938704][T11733] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 215.985124][T11733] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 216.010250][T11733] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2675: lblock 2 mapped to illegal pblock 2 (length 1) [ 216.037676][T11747] lo speed is unknown, defaulting to 1000 [ 216.043664][T11747] lo speed is unknown, defaulting to 1000 [ 216.058302][T11733] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2675: lblock 0 mapped to illegal pblock 48 (length 1) [ 216.072660][T11733] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2675: Failed to acquire dquot type 0 [ 216.087887][T11733] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 216.088518][T11733] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2675: mark_inode_dirty error [ 216.088606][T11733] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 216.088636][T11733] EXT4-fs (loop2): 1 orphan inode deleted [ 216.089023][T11733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.089543][T10945] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.099497][ T6749] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.104134][ T6749] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 0 [ 216.135858][T11733] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 216.151819][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.222056][T11759] netlink: 'syz.2.2681': attribute type 10 has an invalid length. [ 216.222073][T11759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2681'. [ 216.223953][T11759] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 216.341639][T11764] loop2: detected capacity change from 0 to 1024 [ 216.342221][T11764] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.342253][T11764] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 216.343040][T11764] JBD2: no valid journal superblock found [ 216.343053][T11764] EXT4-fs (loop2): Could not load journal inode [ 216.363179][T11764] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 216.501331][T11767] loop5: detected capacity change from 0 to 1024 [ 216.502285][T11767] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.502305][T11767] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 216.503012][T11767] JBD2: no valid journal superblock found [ 216.503022][T11767] EXT4-fs (loop5): Could not load journal inode [ 216.509420][T11767] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 216.757571][T11780] FAULT_INJECTION: forcing a failure. [ 216.757571][T11780] name failslab, interval 1, probability 0, space 0, times 0 [ 216.757600][T11780] CPU: 1 UID: 0 PID: 11780 Comm: syz.2.2690 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.757628][T11780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.757642][T11780] Call Trace: [ 216.757654][T11780] [ 216.757662][T11780] __dump_stack+0x1d/0x30 [ 216.757680][T11780] dump_stack_lvl+0xe8/0x140 [ 216.757700][T11780] dump_stack+0x15/0x1b [ 216.757768][T11780] should_fail_ex+0x265/0x280 [ 216.757792][T11780] should_failslab+0x8c/0xb0 [ 216.757819][T11780] kmem_cache_alloc_noprof+0x50/0x310 [ 216.757923][T11780] ? audit_log_start+0x365/0x6c0 [ 216.757958][T11780] audit_log_start+0x365/0x6c0 [ 216.757994][T11780] audit_seccomp+0x48/0x100 [ 216.758062][T11780] ? __seccomp_filter+0x68c/0x10d0 [ 216.758092][T11780] __seccomp_filter+0x69d/0x10d0 [ 216.758114][T11780] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.758142][T11780] ? vfs_write+0x7e8/0x960 [ 216.758160][T11780] ? __rcu_read_unlock+0x4f/0x70 [ 216.758187][T11780] ? __fget_files+0x184/0x1c0 [ 216.758211][T11780] __secure_computing+0x82/0x150 [ 216.758228][T11780] syscall_trace_enter+0xcf/0x1e0 [ 216.758251][T11780] do_syscall_64+0xac/0x200 [ 216.758319][T11780] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 216.758338][T11780] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 216.758368][T11780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.758391][T11780] RIP: 0033:0x7f3100f6ebe9 [ 216.758406][T11780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.758475][T11780] RSP: 002b:00007f30ff9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000091 [ 216.758494][T11780] RAX: ffffffffffffffda RBX: 00007f31011a5fa0 RCX: 00007f3100f6ebe9 [ 216.758544][T11780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000053e [ 216.758555][T11780] RBP: 00007f30ff9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 216.758565][T11780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.758574][T11780] R13: 00007f31011a6038 R14: 00007f31011a5fa0 R15: 00007ffe2c03b6b8 [ 216.758708][T11780] [ 216.847976][T11782] loop2: detected capacity change from 0 to 1024 [ 216.858579][T11782] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 216.858607][T11782] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 216.860529][T11782] JBD2: no valid journal superblock found [ 216.860540][T11782] EXT4-fs (loop2): Could not load journal inode [ 216.889835][T11782] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 217.256521][T11809] loop4: detected capacity change from 0 to 1024 [ 217.256832][T11809] EXT4-fs: Ignoring removed bh option [ 217.256860][T11809] EXT4-fs: inline encryption not supported [ 217.257124][T11809] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 217.268064][T11809] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 217.268971][T11809] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2688: lblock 2 mapped to illegal pblock 2 (length 1) [ 217.269110][T11809] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2688: lblock 0 mapped to illegal pblock 48 (length 1) [ 217.269288][T11809] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2688: Failed to acquire dquot type 0 [ 217.269457][T11809] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 217.269541][T11809] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2688: mark_inode_dirty error [ 217.269682][T11809] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 217.269707][T11809] EXT4-fs (loop4): 1 orphan inode deleted [ 217.270137][T11809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.287624][ T6749] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 217.288300][ T6749] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 0 [ 217.309846][T11818] loop2: detected capacity change from 0 to 512 [ 217.323634][T11811] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2701'. [ 217.336781][T11809] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 217.348195][T11818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.357809][T11818] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2703: corrupted inode contents [ 217.358108][T11818] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.2703: mark_inode_dirty error [ 217.360154][T11818] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2703: corrupted inode contents [ 217.360349][T11818] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.2703: mark_inode_dirty error [ 217.396768][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.452036][T11826] loop2: detected capacity change from 0 to 128 [ 217.456750][T11824] loop5: detected capacity change from 0 to 1024 [ 217.463281][T11824] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 217.463312][T11824] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 217.464019][T11824] JBD2: no valid journal superblock found [ 217.464039][T11824] EXT4-fs (loop5): Could not load journal inode [ 217.467495][T11824] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 217.490152][T11826] bio_check_eod: 116 callbacks suppressed [ 217.490166][T11826] syz.2.2705: attempt to access beyond end of device [ 217.490166][T11826] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 217.490196][T11826] syz.2.2705: attempt to access beyond end of device [ 217.490196][T11826] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 217.490244][T11826] syz.2.2705: attempt to access beyond end of device [ 217.490244][T11826] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 217.490286][T11826] syz.2.2705: attempt to access beyond end of device [ 217.490286][T11826] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 217.490321][T11826] syz.2.2705: attempt to access beyond end of device [ 217.490321][T11826] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 217.490424][T11826] syz.2.2705: attempt to access beyond end of device [ 217.490424][T11826] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 217.490452][T11826] syz.2.2705: attempt to access beyond end of device [ 217.490452][T11826] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 217.490484][T11826] syz.2.2705: attempt to access beyond end of device [ 217.490484][T11826] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 217.490521][T11826] syz.2.2705: attempt to access beyond end of device [ 217.490521][T11826] loop2: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 217.538532][T11826] syz.2.2705: attempt to access beyond end of device [ 217.538532][T11826] loop2: rw=0, sector=97, nr_sectors = 32 limit=128 [ 217.592078][ T6747] Buffer I/O error on dev loop2, logical block 298, lost async page write [ 217.592144][ T6747] Buffer I/O error on dev loop2, logical block 299, lost async page write [ 217.592166][ T6747] Buffer I/O error on dev loop2, logical block 300, lost async page write [ 217.592183][ T6747] Buffer I/O error on dev loop2, logical block 301, lost async page write [ 217.592198][ T6747] Buffer I/O error on dev loop2, logical block 302, lost async page write [ 217.592282][ T6747] Buffer I/O error on dev loop2, logical block 303, lost async page write [ 217.592304][ T6747] Buffer I/O error on dev loop2, logical block 304, lost async page write [ 217.641238][T11840] bridge0: entered promiscuous mode [ 217.921614][T11850] loop5: detected capacity change from 0 to 512 [ 217.997286][T11840] bridge0: port 3(macsec1) entered blocking state [ 218.001621][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.011601][T11840] bridge0: port 3(macsec1) entered disabled state [ 218.058781][T11840] macsec1: entered allmulticast mode [ 218.281298][T11840] bridge0: entered allmulticast mode [ 218.311601][T11863] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2717'. [ 218.356517][T11869] loop6: detected capacity change from 0 to 128 [ 218.362088][T11850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.367778][T11840] macsec1: left allmulticast mode [ 218.380326][T11840] bridge0: left allmulticast mode [ 218.396929][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2715'. [ 218.469540][T11848] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2716: corrupted inode contents [ 218.528192][T11840] bridge0: left promiscuous mode [ 218.550894][T11848] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.2716: mark_inode_dirty error [ 218.554080][T11885] netlink: 176 bytes leftover after parsing attributes in process `+}[@'. [ 218.648806][T11855] netlink: 'syz.2.2710': attribute type 29 has an invalid length. [ 218.659974][T11885] loop4: detected capacity change from 0 to 512 [ 218.709281][T11885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.724506][T11848] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2716: corrupted inode contents [ 218.788852][T11848] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2716: mark_inode_dirty error [ 218.846536][T11901] loop6: detected capacity change from 0 to 1024 [ 218.880226][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.908482][T11901] EXT4-fs: Ignoring removed bh option [ 218.913933][T11901] EXT4-fs: inline encryption not supported [ 218.941001][T11901] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 218.959424][T11903] loop2: detected capacity change from 0 to 1024 [ 218.968222][ T6522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.977644][T11903] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 218.988630][T11903] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 219.004869][T11901] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 219.030953][T11903] JBD2: no valid journal superblock found [ 219.036685][T11903] EXT4-fs (loop2): Could not load journal inode [ 219.064258][T11909] loop5: detected capacity change from 0 to 1024 [ 219.077447][T11901] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2726: lblock 2 mapped to illegal pblock 2 (length 1) [ 219.089355][T11915] lo speed is unknown, defaulting to 1000 [ 219.098243][T11909] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 219.107683][T11915] lo speed is unknown, defaulting to 1000 [ 219.109231][T11909] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 219.128923][T11903] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 219.139525][ T29] kauditd_printk_skb: 611 callbacks suppressed [ 219.139536][ T29] audit: type=1326 audit(219.098:22441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3100f6d550 code=0x7ffc0000 [ 219.168743][ T29] audit: type=1326 audit(219.098:22442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3100f6e7eb code=0x7ffc0000 [ 219.191654][ T29] audit: type=1326 audit(219.098:22443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3100f6d84a code=0x7ffc0000 [ 219.214441][ T29] audit: type=1326 audit(219.108:22444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 219.237460][ T29] audit: type=1326 audit(219.108:22445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 219.240321][T11901] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 219.260409][ T29] audit: type=1326 audit(219.108:22446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 219.277397][T11909] JBD2: no valid journal superblock found [ 219.291324][ T29] audit: type=1326 audit(219.108:22447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 219.291352][ T29] audit: type=1326 audit(219.108:22448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 219.297137][T11909] EXT4-fs (loop5): Could not load journal inode [ 219.320045][ T29] audit: type=1326 audit(219.108:22449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11902 comm="syz.2.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 219.373224][T11901] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2726: lblock 0 mapped to illegal pblock 48 (length 1) [ 219.421920][T11901] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2726: Failed to acquire dquot type 0 [ 219.433753][T11909] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 219.466261][T11901] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 219.490115][T11901] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2726: mark_inode_dirty error [ 219.557903][T11901] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 219.577748][T11901] EXT4-fs (loop6): 1 orphan inode deleted [ 219.597336][ T6753] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 219.597907][T11901] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.677885][ T6753] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:16: Failed to release dquot type 0 [ 219.747737][T11895] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 219.782615][T10945] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.882332][T11935] lo speed is unknown, defaulting to 1000 [ 219.952754][T11946] loop4: detected capacity change from 0 to 1024 [ 219.968207][T11935] lo speed is unknown, defaulting to 1000 [ 219.968513][T11946] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 219.985059][T11946] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 220.011390][T11948] loop6: detected capacity change from 0 to 1024 [ 220.031254][T11946] JBD2: no valid journal superblock found [ 220.037011][T11946] EXT4-fs (loop4): Could not load journal inode [ 220.053215][T11948] EXT4-fs: Ignoring removed bh option [ 220.065793][T11946] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 220.081140][T11948] EXT4-fs: inline encryption not supported [ 220.108938][T11948] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 220.142565][T11948] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 220.152157][T11948] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2739: lblock 2 mapped to illegal pblock 2 (length 1) [ 220.189904][T11948] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2739: lblock 0 mapped to illegal pblock 48 (length 1) [ 220.257402][T11948] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2739: Failed to acquire dquot type 0 [ 220.306240][T11948] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 220.316407][T11948] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2739: mark_inode_dirty error [ 220.338727][T11948] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 220.357437][T11948] EXT4-fs (loop6): 1 orphan inode deleted [ 220.368365][T11965] loop2: detected capacity change from 0 to 1024 [ 220.368449][T11948] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.387210][ T6749] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 220.428139][ T6749] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 0 [ 220.444158][T11963] loop4: detected capacity change from 0 to 1024 [ 220.449169][T11965] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 220.461888][T11965] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 220.478022][T11941] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 220.503986][T10945] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.514497][T11965] JBD2: no valid journal superblock found [ 220.520825][T11965] EXT4-fs (loop2): Could not load journal inode [ 220.528458][T11963] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 220.539385][T11963] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 220.576791][T11967] syzkaller0: entered promiscuous mode [ 220.582882][T11967] syzkaller0: entered allmulticast mode [ 220.617739][T11965] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 220.628331][T11963] JBD2: no valid journal superblock found [ 220.634080][T11963] EXT4-fs (loop4): Could not load journal inode [ 220.677714][T11963] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 220.820385][T11984] loop4: detected capacity change from 0 to 128 [ 220.827163][T11984] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 220.887931][T11989] loop6: detected capacity change from 0 to 512 [ 220.890629][T11984] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 220.914441][T11989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.025555][T10945] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.163355][ T6753] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 221.189784][T12008] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2759'. [ 221.268271][T12006] syzkaller0: entered promiscuous mode [ 221.273764][T12006] syzkaller0: entered allmulticast mode [ 221.337227][T12013] loop6: detected capacity change from 0 to 1024 [ 221.424167][T12013] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 221.435159][T12013] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 221.530226][T12013] JBD2: no valid journal superblock found [ 221.535969][T12013] EXT4-fs (loop6): Could not load journal inode [ 221.590125][T12013] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 221.646924][T12020] loop5: detected capacity change from 0 to 1024 [ 221.655123][T12020] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 221.666097][T12020] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 221.773804][T12026] loop6: detected capacity change from 0 to 2048 [ 221.837922][T12020] JBD2: no valid journal superblock found [ 221.843728][T12020] EXT4-fs (loop5): Could not load journal inode [ 221.941401][T12020] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 221.988609][T12026] GPT:first_usable_lbas don't match. [ 221.993969][T12026] GPT:34 != 290 [ 221.997495][T12026] GPT: Use GNU Parted to correct GPT errors. [ 222.003687][T12026] loop6: p1 p2 p3 [ 222.128050][T12032] loop2: detected capacity change from 0 to 512 [ 222.277993][T12032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.537338][T12045] loop6: detected capacity change from 0 to 512 [ 222.616417][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.701632][T12045] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.704283][T12050] netlink: 332 bytes leftover after parsing attributes in process `syz.5.2772'. [ 222.762460][T12056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2775'. [ 222.781667][T12054] loop4: detected capacity change from 0 to 1024 [ 222.837486][T12054] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 222.848523][T12054] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 222.927674][T10945] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.048325][T12054] JBD2: no valid journal superblock found [ 223.054068][T12054] EXT4-fs (loop4): Could not load journal inode [ 223.154833][T12054] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 223.200100][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2778'. [ 223.320604][T12087] loop2: detected capacity change from 0 to 512 [ 223.378820][T12087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.409344][T12087] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2785'. [ 223.429186][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.572867][T12106] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2789'. [ 223.625838][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2793'. [ 223.747922][T12111] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 224.132776][T12137] FAULT_INJECTION: forcing a failure. [ 224.132776][T12137] name failslab, interval 1, probability 0, space 0, times 0 [ 224.145556][T12137] CPU: 1 UID: 0 PID: 12137 Comm: syz.5.2801 Not tainted syzkaller #0 PREEMPT(voluntary) [ 224.145581][T12137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.145592][T12137] Call Trace: [ 224.145597][T12137] [ 224.145604][T12137] __dump_stack+0x1d/0x30 [ 224.145624][T12137] dump_stack_lvl+0xe8/0x140 [ 224.145642][T12137] dump_stack+0x15/0x1b [ 224.145729][T12137] should_fail_ex+0x265/0x280 [ 224.145747][T12137] should_failslab+0x8c/0xb0 [ 224.145774][T12137] kmem_cache_alloc_node_noprof+0x57/0x320 [ 224.145874][T12137] ? __alloc_skb+0x101/0x320 [ 224.145893][T12137] __alloc_skb+0x101/0x320 [ 224.145909][T12137] netlink_alloc_large_skb+0xba/0xf0 [ 224.146007][T12137] netlink_sendmsg+0x3cf/0x6b0 [ 224.146093][T12137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.146118][T12137] __sock_sendmsg+0x145/0x180 [ 224.146148][T12137] ____sys_sendmsg+0x31e/0x4e0 [ 224.146231][T12137] ___sys_sendmsg+0x17b/0x1d0 [ 224.146282][T12137] __x64_sys_sendmsg+0xd4/0x160 [ 224.146305][T12137] x64_sys_call+0x191e/0x2ff0 [ 224.146407][T12137] do_syscall_64+0xd2/0x200 [ 224.146439][T12137] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 224.146464][T12137] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 224.146511][T12137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.146535][T12137] RIP: 0033:0x7fc6e9e7ebe9 [ 224.146548][T12137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.146562][T12137] RSP: 002b:00007fc6e88e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.146578][T12137] RAX: ffffffffffffffda RBX: 00007fc6ea0b5fa0 RCX: 00007fc6e9e7ebe9 [ 224.146588][T12137] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 224.146671][T12137] RBP: 00007fc6e88e7090 R08: 0000000000000000 R09: 0000000000000000 [ 224.146681][T12137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.146730][T12137] R13: 00007fc6ea0b6038 R14: 00007fc6ea0b5fa0 R15: 00007ffeae0d6a88 [ 224.146751][T12137] [ 224.216440][T12135] loop2: detected capacity change from 0 to 1024 [ 224.220710][ T29] kauditd_printk_skb: 801 callbacks suppressed [ 224.220723][ T29] audit: type=1326 audit(224.188:23246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.2.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 224.228357][T12135] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 224.230666][ T29] audit: type=1326 audit(224.188:23247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.2.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 224.235390][T12135] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 224.240061][ T29] audit: type=1326 audit(224.188:23248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.2.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 224.240094][ T29] audit: type=1326 audit(224.188:23249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.2.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 224.240130][ T29] audit: type=1326 audit(224.188:23250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.2.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 224.240159][ T29] audit: type=1326 audit(224.188:23251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.2.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 224.240188][ T29] audit: type=1326 audit(224.188:23252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.2.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 224.240276][ T29] audit: type=1326 audit(224.188:23253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.2.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 224.240303][ T29] audit: type=1326 audit(224.188:23254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.2.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 224.240325][ T29] audit: type=1326 audit(224.188:23255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.2.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f3100f6ebe9 code=0x7ffc0000 [ 224.626344][T12148] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2804'. [ 224.657492][T12135] JBD2: no valid journal superblock found [ 224.663227][T12135] EXT4-fs (loop2): Could not load journal inode [ 224.732041][T12135] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 225.037744][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2815'. [ 225.284370][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2817'. [ 225.296515][T12187] lo speed is unknown, defaulting to 1000 [ 225.297382][T12188] bridge_slave_1: left allmulticast mode [ 225.308024][T12188] bridge_slave_1: left promiscuous mode [ 225.313743][T12188] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.390176][T12193] loop6: detected capacity change from 0 to 2048 [ 225.396818][T12188] bridge_slave_0: left allmulticast mode [ 225.402495][T12188] bridge_slave_0: left promiscuous mode [ 225.408158][T12188] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.420638][T12193] ext4: Unknown parameter 'obj_role' [ 225.437215][T12196] loop5: detected capacity change from 0 to 1024 [ 225.443987][T12199] loop4: detected capacity change from 0 to 1024 [ 225.444670][T12196] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 225.461222][T12196] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 225.476944][T12190] loop2: detected capacity change from 0 to 8192 [ 225.487605][T12196] JBD2: no valid journal superblock found [ 225.493344][T12196] EXT4-fs (loop5): Could not load journal inode [ 225.500831][T12199] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 225.512369][T12199] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 225.532600][T12199] JBD2: no valid journal superblock found [ 225.538898][T12199] EXT4-fs (loop4): Could not load journal inode [ 225.554526][T12187] lo speed is unknown, defaulting to 1000 [ 225.571678][T12196] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 225.593769][T12199] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 225.642202][T12190] sd 0:0:1:0: device reset [ 225.672602][T12193] loop6: detected capacity change from 0 to 8192 [ 225.709759][T12211] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.716161][T12211] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 226.093157][T12218] loop5: detected capacity change from 0 to 8192 [ 226.200233][T12239] __nla_validate_parse: 2 callbacks suppressed [ 226.200246][T12239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2840'. [ 226.248449][T12243] loop5: detected capacity change from 0 to 1024 [ 226.265188][T12242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12242 comm=syz.0.2842 [ 226.282439][T12239] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2840'. [ 226.291100][T12243] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 226.302614][T12239] netlink: zone id is out of range [ 226.302626][T12239] netlink: zone id is out of range [ 226.302634][T12239] netlink: zone id is out of range [ 226.302662][T12239] netlink: zone id is out of range [ 226.302670][T12239] netlink: zone id is out of range [ 226.302677][T12239] netlink: zone id is out of range [ 226.302684][T12239] netlink: zone id is out of range [ 226.302692][T12239] netlink: zone id is out of range [ 226.307828][T12243] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 226.368060][T12250] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 226.448940][T12243] JBD2: no valid journal superblock found [ 226.454846][T12243] EXT4-fs (loop5): Could not load journal inode [ 226.599123][T12266] FAULT_INJECTION: forcing a failure. [ 226.599123][T12266] name failslab, interval 1, probability 0, space 0, times 0 [ 226.611910][T12266] CPU: 1 UID: 0 PID: 12266 Comm: syz.2.2848 Not tainted syzkaller #0 PREEMPT(voluntary) [ 226.611940][T12266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.611955][T12266] Call Trace: [ 226.611962][T12266] [ 226.611970][T12266] __dump_stack+0x1d/0x30 [ 226.611992][T12266] dump_stack_lvl+0xe8/0x140 [ 226.612008][T12266] dump_stack+0x15/0x1b [ 226.612098][T12266] should_fail_ex+0x265/0x280 [ 226.612120][T12266] should_failslab+0x8c/0xb0 [ 226.612141][T12266] kmem_cache_alloc_noprof+0x50/0x310 [ 226.612171][T12266] ? ioctx_alloc+0xf5/0x4e0 [ 226.612194][T12266] ioctx_alloc+0xf5/0x4e0 [ 226.612221][T12266] __se_sys_io_setup+0x6b/0x1b0 [ 226.612266][T12266] __x64_sys_io_setup+0x31/0x40 [ 226.612288][T12266] x64_sys_call+0x2eff/0x2ff0 [ 226.612311][T12266] do_syscall_64+0xd2/0x200 [ 226.612419][T12266] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 226.612446][T12266] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 226.612493][T12266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.612510][T12266] RIP: 0033:0x7f3100f6ebe9 [ 226.612548][T12266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.612565][T12266] RSP: 002b:00007f30ff9d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 226.612582][T12266] RAX: ffffffffffffffda RBX: 00007f31011a5fa0 RCX: 00007f3100f6ebe9 [ 226.612661][T12266] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0 [ 226.612675][T12266] RBP: 00007f30ff9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 226.612688][T12266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.612702][T12266] R13: 00007f31011a6038 R14: 00007f31011a5fa0 R15: 00007ffe2c03b6b8 [ 226.612725][T12266] [ 226.614805][T12243] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 226.860454][T12274] netlink: 'syz.0.2851': attribute type 3 has an invalid length. [ 226.933669][T12291] loop2: detected capacity change from 0 to 1024 [ 226.976155][T12291] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 226.987656][T12291] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 227.075238][T12299] loop6: detected capacity change from 0 to 1024 [ 227.091613][T12291] JBD2: no valid journal superblock found [ 227.097387][T12291] EXT4-fs (loop2): Could not load journal inode [ 227.118969][T12299] EXT4-fs: Ignoring removed bh option [ 227.160757][T12299] EXT4-fs: inline encryption not supported [ 227.213547][T12299] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 227.292014][T12299] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 227.422524][T12299] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2856: lblock 2 mapped to illegal pblock 2 (length 1) [ 227.449114][T12291] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 227.459268][T12299] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2856: lblock 0 mapped to illegal pblock 48 (length 1) [ 227.474571][T12299] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2856: Failed to acquire dquot type 0 [ 227.492546][T12299] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 227.492709][T12299] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2856: mark_inode_dirty error [ 227.492864][T12299] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 227.492905][T12299] EXT4-fs (loop6): 1 orphan inode deleted [ 227.494048][T12299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.516252][ T6747] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 227.536901][T12308] loop5: detected capacity change from 0 to 2048 [ 227.556496][ T6747] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:12: Failed to release dquot type 0 [ 227.578314][T12292] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 227.599521][T10945] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.610213][T12308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.696341][T12313] loop2: detected capacity change from 0 to 1024 [ 227.711713][T12313] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 227.722792][T12313] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 227.787314][T12320] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2863'. [ 227.788319][T12313] JBD2: no valid journal superblock found [ 227.802678][T12313] EXT4-fs (loop2): Could not load journal inode [ 227.866158][T12313] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 227.866696][T12325] hub 9-0:1.0: USB hub found [ 227.889714][T12325] hub 9-0:1.0: 8 ports detected [ 227.923597][T12328] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2867'. [ 227.955287][T12330] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2868'. [ 228.058400][T12342] loop6: detected capacity change from 0 to 512 [ 228.104465][ T6522] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 228.132741][T12342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.148806][ T6522] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 228.168783][T12342] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2873: corrupted inode contents [ 228.182422][T12353] loop2: detected capacity change from 0 to 512 [ 228.202399][ T6522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.221733][T12342] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2873: mark_inode_dirty error [ 228.243434][T12353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.284868][T12342] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2873: corrupted inode contents [ 228.297952][T12353] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 228.320830][T12360] loop5: detected capacity change from 0 to 128 [ 228.340305][T12353] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 228.354877][T10945] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.374483][T12360] bridge0: entered promiscuous mode [ 228.409711][T12360] macvtap1: entered allmulticast mode [ 228.415107][T12360] bridge0: entered allmulticast mode [ 228.425158][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.436042][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2878'. [ 228.448690][T12360] bridge0: port 3(macvtap1) entered blocking state [ 228.455303][T12360] bridge0: port 3(macvtap1) entered disabled state [ 228.495248][T12360] bridge0: left allmulticast mode [ 228.500311][T12360] bridge0: left promiscuous mode [ 228.542651][T12365] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2879'. [ 228.793869][T12362] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 228.901740][T12382] batman_adv: batadv0: Adding interface: ipvlan2 [ 228.908684][T12382] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.934087][T12382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.945085][T12382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.955880][T12382] batman_adv: batadv0: Interface activated: ipvlan2 [ 228.982087][T12385] loop9: detected capacity change from 0 to 7 [ 228.988882][T12385] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.996917][T12385] Buffer I/O error on dev loop9, logical block 0, async page read [ 229.004835][T12385] loop9: unable to read partition table [ 229.006434][T12383] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 229.011684][T12385] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 229.011684][T12385] ) failed (rc=-5) [ 229.020832][T12383] SELinux: failed to load policy [ 229.054088][T12390] loop4: detected capacity change from 0 to 1024 [ 229.060666][T12383] loop2: detected capacity change from 0 to 1024 [ 229.061004][T12383] EXT4-fs: Ignoring removed orlov option [ 229.061036][T12383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.082004][T12383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.098442][T12390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.113400][T12390] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 229.144338][T12400] loop5: detected capacity change from 0 to 512 [ 229.159772][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.171139][T12400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.196789][T12400] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2891: corrupted inode contents [ 229.215018][T12400] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.2891: mark_inode_dirty error [ 229.239905][ T29] kauditd_printk_skb: 921 callbacks suppressed [ 229.239916][ T29] audit: type=1400 audit(229.218:24174): avc: denied { read } for pid=12401 comm="syz.6.2892" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.270460][T12400] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2891: corrupted inode contents [ 229.295562][ T6522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.332490][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.343037][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.376305][T12406] lo speed is unknown, defaulting to 1000 [ 229.384105][T12406] lo speed is unknown, defaulting to 1000 [ 229.393845][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.398557][ T29] audit: type=1326 audit(229.368:24175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e9e7ebe9 code=0x7ffc0000 [ 229.404211][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.427054][ T29] audit: type=1326 audit(229.368:24176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6e9e7ebe9 code=0x7ffc0000 [ 229.427163][ T29] audit: type=1326 audit(229.368:24177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e9e7ebe9 code=0x7ffc0000 [ 229.438178][ T29] audit: type=1326 audit(229.408:24178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc6e9e7ebe9 code=0x7ffc0000 [ 229.507325][ T29] audit: type=1326 audit(229.408:24179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e9e7ebe9 code=0x7ffc0000 [ 229.530361][ T29] audit: type=1326 audit(229.408:24180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e9e7ebe9 code=0x7ffc0000 [ 229.560856][ T29] audit: type=1400 audit(229.538:24181): avc: denied { setopt } for pid=12421 comm="syz.5.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.584226][ T29] audit: type=1400 audit(229.558:24182): avc: denied { map } for pid=12421 comm="syz.5.2896" path="socket:[33635]" dev="sockfs" ino=33635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.607180][ T29] audit: type=1400 audit(229.558:24183): avc: denied { read accept } for pid=12421 comm="syz.5.2896" path="socket:[33635]" dev="sockfs" ino=33635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.674092][T12406] chnl_net:caif_netlink_parms(): no params data found [ 229.688299][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.698724][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.730696][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.775613][T12448] FAULT_INJECTION: forcing a failure. [ 229.775613][T12448] name failslab, interval 1, probability 0, space 0, times 0 [ 229.788305][T12448] CPU: 0 UID: 0 PID: 12448 Comm: syz.0.2904 Not tainted syzkaller #0 PREEMPT(voluntary) [ 229.788334][T12448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.788346][T12448] Call Trace: [ 229.788420][T12448] [ 229.788426][T12448] __dump_stack+0x1d/0x30 [ 229.788445][T12448] dump_stack_lvl+0xe8/0x140 [ 229.788468][T12448] dump_stack+0x15/0x1b [ 229.788522][T12448] should_fail_ex+0x265/0x280 [ 229.788547][T12448] ? nf_tables_newtable+0x375/0xea0 [ 229.788574][T12448] should_failslab+0x8c/0xb0 [ 229.788644][T12448] __kmalloc_cache_noprof+0x4c/0x320 [ 229.788675][T12448] ? __nla_validate_parse+0x1652/0x1d00 [ 229.788727][T12448] nf_tables_newtable+0x375/0xea0 [ 229.788760][T12448] nfnetlink_rcv+0xb99/0x1690 [ 229.788887][T12448] netlink_unicast+0x5c0/0x690 [ 229.788907][T12448] netlink_sendmsg+0x58b/0x6b0 [ 229.788928][T12448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.788947][T12448] __sock_sendmsg+0x145/0x180 [ 229.789003][T12448] ____sys_sendmsg+0x31e/0x4e0 [ 229.789085][T12448] ___sys_sendmsg+0x17b/0x1d0 [ 229.789178][T12448] __x64_sys_sendmsg+0xd4/0x160 [ 229.789244][T12448] x64_sys_call+0x191e/0x2ff0 [ 229.789261][T12448] do_syscall_64+0xd2/0x200 [ 229.789284][T12448] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 229.789354][T12448] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 229.789417][T12448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.789440][T12448] RIP: 0033:0x7fd7151febe9 [ 229.789484][T12448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.789504][T12448] RSP: 002b:00007fd713c67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.789524][T12448] RAX: ffffffffffffffda RBX: 00007fd715435fa0 RCX: 00007fd7151febe9 [ 229.789539][T12448] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 229.789552][T12448] RBP: 00007fd713c67090 R08: 0000000000000000 R09: 0000000000000000 [ 229.789566][T12448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.789589][T12448] R13: 00007fd715436038 R14: 00007fd715435fa0 R15: 00007ffc692e9ee8 [ 229.789605][T12448] [ 229.795790][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.842996][T12451] netlink: 'syz.5.2905': attribute type 13 has an invalid length. [ 229.844984][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.895301][T12457] loop5: detected capacity change from 0 to 256 [ 230.047535][T12457] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 230.056268][T12457] FAT-fs (loop5): Filesystem has been set read-only [ 230.064527][T12406] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.071767][T12406] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.080090][T12406] bridge_slave_0: entered allmulticast mode [ 230.086522][T12406] bridge_slave_0: entered promiscuous mode [ 230.123351][T12451] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.130637][T12451] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.168568][T12451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.178442][T12451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.218464][T12406] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.225616][T12406] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.233394][T12406] bridge_slave_1: entered allmulticast mode [ 230.240290][T12406] bridge_slave_1: entered promiscuous mode [ 230.248395][ T4620] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.256758][ T4620] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.282781][ T4620] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.291806][ T4620] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.301288][T12406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.320357][T12406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.358548][T12465] loop6: detected capacity change from 0 to 128 [ 230.372368][ T4620] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.381425][ T4620] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.394323][T12406] team0: Port device team_slave_0 added [ 230.401252][T12406] team0: Port device team_slave_1 added [ 230.401554][ T12] bridge_slave_1: left allmulticast mode [ 230.413067][ T12] bridge_slave_1: left promiscuous mode [ 230.418944][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.428193][T12467] bio_check_eod: 75 callbacks suppressed [ 230.428208][T12467] syz.6.2910: attempt to access beyond end of device [ 230.428208][T12467] loop6: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 230.448399][T12467] syz.6.2910: attempt to access beyond end of device [ 230.448399][T12467] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 230.461859][T12467] syz.6.2910: attempt to access beyond end of device [ 230.461859][T12467] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 230.467389][ T12] bridge_slave_0: left allmulticast mode [ 230.480934][ T12] bridge_slave_0: left promiscuous mode [ 230.483091][T12467] syz.6.2910: attempt to access beyond end of device [ 230.483091][T12467] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 230.486627][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.500541][T12467] syz.6.2910: attempt to access beyond end of device [ 230.500541][T12467] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 230.520567][T12467] syz.6.2910: attempt to access beyond end of device [ 230.520567][T12467] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 230.536684][T12467] syz.6.2910: attempt to access beyond end of device [ 230.536684][T12467] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 230.580959][T12467] syz.6.2910: attempt to access beyond end of device [ 230.580959][T12467] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 230.595171][T12467] syz.6.2910: attempt to access beyond end of device [ 230.595171][T12467] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 230.609438][T12467] syz.6.2910: attempt to access beyond end of device [ 230.609438][T12467] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 230.641488][T12476] loop2: detected capacity change from 0 to 512 [ 230.658641][T12476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.673098][T12476] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2914: corrupted inode contents [ 230.687100][T12476] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.2914: mark_inode_dirty error [ 230.700123][T12476] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2914: corrupted inode contents [ 230.721423][ T12] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.729570][T12482] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2916'. [ 230.735437][T12483] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2914: corrupted inode contents [ 230.752483][T12483] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.2914: mark_inode_dirty error [ 230.764185][ T12] bond_slave_0: left promiscuous mode [ 230.771030][ T12] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.780319][T12483] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2914: corrupted inode contents [ 230.781030][ T12] bond_slave_1: left promiscuous mode [ 230.793733][T12483] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.2914: mark_inode_dirty error [ 230.799317][ T12] $H (unregistering): Released all slaves [ 230.811553][T12483] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2914: corrupted inode contents [ 230.827129][T12483] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.2914: mark_inode_dirty error [ 230.852881][ T4620] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.861306][ T4620] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.873751][T12406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.880771][T12406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.891821][T12488] loop6: detected capacity change from 0 to 1024 [ 230.907393][T12406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.915756][T12488] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 230.924403][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.934495][T12488] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 230.944742][T12406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.959958][T12406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.986507][T12406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.998119][T12488] JBD2: no valid journal superblock found [ 231.003875][T12488] EXT4-fs (loop6): Could not load journal inode [ 231.011784][ T12] tipc: Left network mode [ 231.022132][T12488] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 231.041552][ T12] hsr_slave_0: left promiscuous mode [ 231.047211][ T12] hsr_slave_1: left promiscuous mode [ 231.052880][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.060327][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.068645][T12493] loop2: detected capacity change from 0 to 1024 [ 231.075347][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.075795][T12493] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 231.082777][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.093668][T12493] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 231.097584][T12493] JBD2: no valid journal superblock found [ 231.116284][T12493] EXT4-fs (loop2): Could not load journal inode [ 231.125549][ T12] veth1_vlan: left promiscuous mode [ 231.127127][T12493] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 231.133436][ T12] veth0_vlan: left promiscuous mode [ 231.221988][ T12] team0 (unregistering): Port device team_slave_1 removed [ 231.244469][ T12] team0 (unregistering): Port device team_slave_0 removed [ 231.274735][T12500] loop6: detected capacity change from 0 to 1024 [ 231.290389][T12500] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 231.301320][T12500] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 231.327058][T12500] JBD2: no valid journal superblock found [ 231.331313][T12406] hsr_slave_0: entered promiscuous mode [ 231.332846][T12500] EXT4-fs (loop6): Could not load journal inode [ 231.340245][T12406] hsr_slave_1: entered promiscuous mode [ 231.352170][T12406] debugfs: 'hsr0' already exists in 'hsr' [ 231.357962][T12406] Cannot create hsr debugfs directory [ 231.375037][T12500] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 231.421215][T12508] loop5: detected capacity change from 0 to 128 [ 231.574968][T12510] netlink: 332 bytes leftover after parsing attributes in process `syz.6.2927'. [ 231.697011][T12519] loop6: detected capacity change from 0 to 1024 [ 231.704841][T12519] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 231.715778][T12519] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 231.748231][T12406] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.755653][T12519] JBD2: no valid journal superblock found [ 231.762026][T12519] EXT4-fs (loop6): Could not load journal inode [ 231.771447][T12406] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.782724][T12406] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 231.790420][T12519] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 231.805443][ T36] ================================================================== [ 231.813547][ T36] BUG: KCSAN: data-race in pipe_poll / pipe_resize_ring [ 231.820504][ T36] [ 231.822852][ T36] write to 0xffff88810efc0dd8 of 4 bytes by task 12522 on cpu 0: [ 231.830582][ T36] pipe_resize_ring+0x2c3/0x350 [ 231.835449][ T36] pipe_fcntl+0x2e3/0x350 [ 231.839782][ T36] do_fcntl+0x667/0xdf0 [ 231.843950][ T36] __se_sys_fcntl+0xb1/0x120 [ 231.848557][ T36] __x64_sys_fcntl+0x43/0x50 [ 231.853155][ T36] x64_sys_call+0x29a0/0x2ff0 [ 231.857845][ T36] do_syscall_64+0xd2/0x200 [ 231.862357][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.868249][ T36] [ 231.870567][ T36] read to 0xffff88810efc0dd8 of 4 bytes by task 36 on cpu 1: [ 231.877926][ T36] pipe_poll+0x1ea/0x250 [ 231.882167][ T36] p9_poll_workfn+0x29c/0x3e0 [ 231.886846][ T36] process_scheduled_works+0x4ce/0x9d0 [ 231.892323][ T36] worker_thread+0x582/0x770 [ 231.896921][ T36] kthread+0x486/0x510 [ 231.900987][ T36] ret_from_fork+0xda/0x150 [ 231.905487][ T36] ret_from_fork_asm+0x1a/0x30 [ 231.910247][ T36] [ 231.912560][ T36] value changed: 0x00000010 -> 0x00000001 [ 231.918261][ T36] [ 231.920602][ T36] Reported by Kernel Concurrency Sanitizer on: [ 231.926740][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 231.936360][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 231.946407][ T36] Workqueue: events p9_poll_workfn [ 231.951530][ T36] ================================================================== [ 231.963769][T12406] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.602362][ T4620] bridge_slave_1: left allmulticast mode [ 232.608046][ T4620] bridge_slave_1: left promiscuous mode [ 232.613720][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.621273][ T4620] bridge_slave_0: left allmulticast mode [ 232.626906][ T4620] bridge_slave_0: left promiscuous mode [ 232.632523][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.689238][ T4620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.699036][ T4620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.708938][ T4620] bond0 (unregistering): Released all slaves [ 232.760685][ T4620] hsr_slave_0: left promiscuous mode [ 232.766293][ T4620] hsr_slave_1: left promiscuous mode [ 232.771903][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.788701][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.819551][ T4620] team0 (unregistering): Port device team_slave_1 removed [ 232.829753][ T4620] team0 (unregistering): Port device team_slave_0 removed [ 233.323080][ T4620] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.333011][ T4620] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.408897][ T4620] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.418736][ T4620] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.458704][ T4620] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.468640][ T4620] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.519179][ T4620] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.529046][ T4620] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.602867][ T4620] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.649994][ T4620] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.700041][ T4620] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.750038][ T4620] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.811449][ T4620] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.879708][ T4620] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.939821][ T4620] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.990097][ T4620] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.060693][ T4620] bridge_slave_1: left allmulticast mode [ 234.066461][ T4620] bridge_slave_1: left promiscuous mode [ 234.072128][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.079852][ T4620] bridge_slave_0: left allmulticast mode [ 234.085592][ T4620] bridge_slave_0: left promiscuous mode [ 234.091220][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.099612][ T4620] bridge_slave_1: left allmulticast mode [ 234.105239][ T4620] bridge_slave_1: left promiscuous mode [ 234.110892][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.118775][ T4620] bridge_slave_0: left allmulticast mode [ 234.124403][ T4620] bridge_slave_0: left promiscuous mode [ 234.130121][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.138541][ T4620] bridge_slave_1: left allmulticast mode [ 234.144279][ T4620] bridge_slave_1: left promiscuous mode [ 234.150832][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.158475][ T4620] bridge_slave_0: left allmulticast mode [ 234.164138][ T4620] bridge_slave_0: left promiscuous mode [ 234.169801][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.378995][ T4620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.388290][ T4620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.397180][ T4620] bond0 (unregistering): Released all slaves [ 234.479070][ T4620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.489270][ T4620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.498958][ T4620] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 234.507780][ T4620] bond0 (unregistering): Released all slaves [ 234.533423][ T4620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.543173][ T4620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.552655][ T4620] bond0 (unregistering): Released all slaves [ 234.599876][ T4620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.610342][ T4620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.619788][ T4620] bond0 (unregistering): Released all slaves [ 234.641595][ T4620] tipc: Left network mode [ 234.646227][ T4620] tipc: Left network mode [ 234.652825][ T4620] IPVS: stopping backup sync thread 12111 ... [ 234.700797][ T4620] hsr_slave_0: left promiscuous mode [ 234.706304][ T4620] hsr_slave_1: left promiscuous mode [ 234.711942][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.719460][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.729697][ T4620] hsr_slave_0: left promiscuous mode [ 234.735224][ T4620] hsr_slave_1: left promiscuous mode [ 234.742397][ T4620] hsr_slave_0: left promiscuous mode [ 234.748540][ T4620] hsr_slave_1: left promiscuous mode [ 234.754115][ T4620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.761521][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.769023][ T4620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.776388][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.783853][ T4620] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 234.790908][ T4620] batman_adv: batadv0: Removing interface: veth1_vlan [ 234.798028][ T4620] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 234.804775][ T4620] batman_adv: batadv0: Removing interface: ipvlan2 [ 234.813285][ T4620] hsr_slave_0: left promiscuous mode [ 234.818837][ T4620] hsr_slave_1: left promiscuous mode [ 234.824288][ T4620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.831664][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.839073][ T4620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.846435][ T4620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.859975][ T4620] veth1_macvtap: left promiscuous mode [ 234.865439][ T4620] veth0_macvtap: left promiscuous mode [ 234.870986][ T4620] veth1_vlan: left promiscuous mode [ 234.876307][ T4620] veth0_vlan: left promiscuous mode [ 234.882594][ T4620] veth1_macvtap: left promiscuous mode [ 234.888085][ T4620] veth0_macvtap: left promiscuous mode [ 234.893617][ T4620] veth1_vlan: left promiscuous mode [ 234.898851][ T4620] veth0_vlan: left promiscuous mode [ 234.904612][ T4620] veth1_macvtap: left promiscuous mode [ 234.910576][ T4620] veth0_macvtap: left promiscuous mode [ 234.916119][ T4620] veth1_vlan: left promiscuous mode [ 234.921389][ T4620] veth0_vlan: left promiscuous mode [ 235.045834][ T4620] team0 (unregistering): Port device team_slave_1 removed [ 235.056858][ T4620] team0 (unregistering): Port device team_slave_0 removed [ 235.105542][ T4620] team0 (unregistering): Port device team_slave_1 removed [ 235.116340][ T4620] team0 (unregistering): Port device team_slave_0 removed [ 235.167013][ T4620] team0 (unregistering): Port device team_slave_1 removed [ 235.176368][ T4620] team0 (unregistering): Port device team_slave_0 removed [ 235.225719][ T4620] team0 (unregistering): Port device team_slave_1 removed [ 235.235261][ T4620] team0 (unregistering): Port device team_slave_0 removed