last executing test programs: 3m19.707585947s ago: executing program 3 (id=1285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000140)={0x6, 0xe}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=@getnexthop={0x44, 0x6a, 0x304, 0x70bd26, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x8041) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 3m19.432978803s ago: executing program 3 (id=1291): socket$inet6(0xa, 0x3, 0x8000000003c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x60000) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1e00, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3m19.292950955s ago: executing program 3 (id=1294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x20000000}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000006c0)={0xf6c447fee59251f4}) close_range(r2, r3, 0x0) 3m19.264641776s ago: executing program 3 (id=1296): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x41, &(0x7f0000000680), 0x67, 0x52b, &(0x7f0000000a00)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000003cc0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x5, 0x3a, '\x00?\xad\x02\x00\x93\xa1\xe1N\x00\x00\x00\x00\x00\x00\xa3\xa2A\x00#\x00\x00\x00\x00\x00\x00\xb4\x14P\xbc\x1c\v\xee\f\x01}\xa3\xfc\xcf\xac*\x19\x88\xdf\x87:\xd9\xc7*\x02&\xfd\x95\xb2C\x96\x05\xf1o\x83A{?\xccI\xfe7\xda\\#Q\xeaiea\xdc\xa5\x02\x19\xb9W\xc7\x16i\xc1\xb3\x03{Q\xf7\x83\xe4s\x88&\xb9@\xae\xb4Q\xa1\x04\xda\x0e\xb7NY\xee|(h\xf0N`g\xcd\xadj>\xcb\xa2\x1a\xcc\xb5Q\x8f\xcf\xaf\xd0Z\xb1f/\xb2j\xc1>\x8e\xfe\x1d\xce\x92\xd8E+;\xe9\x86)\xdf\x96\xe1\x1c)W\xfa:N\x05\xe4\xd7\x0e\xb5\xe5P\x97\\*@\xf9\x92^\xc2\x9d(\xd5Fi=Pa\xf6\xdf\xec\x04>\x80\xad\\\xcc\xf4\x04\xcf\x84\xfb\xc2\xca?\'\xb8\x90\xa1\x97\x06\xebT\x1c7a\xa6\xd8\xb8\xf5\xa1\x01\xe2\xbcb`\xb8\xb5\f\xb3\x15\x9d\xc8\n\xa3\x91\xee\x02-p(\x17y\x114\x8f7\xf5d\xc9o)n\xdaU&\xf6\b\xb9<\xe6\x996\x03\rt7h\xdb\xbbD\tRS\x89.\xc9o\x06\xb7\f\xc5\x9e\xa8\xf0Kv\xd3\xa2X\xe3\x05\xa8\x1a3\xd0\x8f\xa0\x93\xa0T$\xeb\xe6\x18\x9cy\x964\a\xe1(dor\xfc\xca\x80\x816\xf4\b\xa9\xa1U02\xfb\xe3G\xb2\x1d\x90+\x92\xa0\xba*o\x05\xd3-\xb4\xa6\xc5C\x01\x18\xceA\x05\xb9\xb5\xfa\x12\xaf\xaaIJ\x8fR\xca\x87\xd9Rt1EX\\\"\xfe\xa5\x18\xe2%K\x1b\xae\x1c\xaa\xeb\xb8\xc4JV\x1a\xbf\xbf\x89\xd6\xda\xb5}\xed\x91~\'~m\xaa\xa3e\f\xce\xd2+\t?\x85\vQ\xfb\x8b\xf5w\xea\t=\x13\x01)\x1d\xa4\xd0\x01Z\xad2\xc9B\xf7\xb60Of\xc7\x0fx\xa9\xb1\x1eL\"C\xc8\x90\xa7\x94\x0f\xa7\x91O\xef&\t', 0x3a, 'A\x89\xf9\xde\xcfk\xd6\xa0\x98\xe0\xcd\xd7.Y\xc0U\xea\'{\x1d\x05 \xdb\x8e<\x19\xcc\x8b\xce\x8f\x978\xf6\xa6\x063\x15\x9e\xa2\x10K\xd1z\x8e\xc9;\bA\x87\xac\x038\x8b\xfd|*\x05\x1f\b\x91\xcb2:I\x12u\x0e\x0fPE\x00\x8c\xe0\xf5\xa8\x7f\xafW(Q\xab Q5\x85\xd8&I\x19\x15\x1d\x9dw\xe7-\xcd^F\x99\xf9\xf0\xbe\xdc=/\x19\xd7\x89\x80+J^\xc1hn\x1f\xce\xcb\xf1\xb1S\x04\xd5h&\xb5\xda\xe2\xf8\xea\xd0\x92\x18\xe1S\xc0\xa4Jq\xf7U\xe8Y\xdes\xd40f\x16\xf3\x18\xc46[)<\xa5w\x97\x06_\x1fG\xb9\xf54f\x80\xa0f(\xb4R:\xc86\n\x00\xe8J\xe4\x89_M\xabt\x8d\xe1\xfd\xc2\xfe\xe5\r\x18\xc4^\xc8\r\xbc\xf6\f\x00\x00\x00\x00\x00\x00\x00\x14\x8d\x01\x13\x05\x87\xe5\xa3\'\xb1\x000\xfb\x859\xbd\xc6C\xfd\x05\x962i\xff1f\x1f\x9d\r\x90\x85g\xab\x9f\x12\xc5z\x1aV\xc7\x02\x1f\x88x\xdbYMp\xbd4\xd9\x82\\\t\xa2WC\xb6@.\x8b\xb9t\x86\xf1B\xfbh\xb7t\xdd\xea\x9a\xab\xee;\xee,\xe9_U4\xadh\x8c\x80)\xe0\x87\x14\x8d\x01\xc8t\x81\xe3!SX\x16~\x1e\x12\xc3\xad\x8b\x98\x16\xaa\xd05\xd2\x8b\x95\x10\x89\x82\xde\x80\xfc\"\x89#\x05k\xe9X\x9c.$\xe6K{^^\xf6\xf66\xf0\xa5\x00\x00\x00\x00\x00o\xa4\xe3bh*\x01\x04eu\x846\x14c\xf8\b\x95W\xce\xa6\xf0\xe9\xe2\xe4^\xe3g|\xfc/i\t\x17\x0e\xd7\xbcy\x87\xac\xde\xe2\xe7N\x1c\xef\x146\x00'/470, 0x3a, './file2', 0x3a, [0x43]}, 0x3bf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="066a3cbc00e3ffff7040488cfcd3000000006f00"/39], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000900)=ANY=[@ANYRESOCT=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009700000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x10) sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f0000003240)=[{{&(0x7f00000003c0)=@xdp, 0x80, &(0x7f0000000340)=[{&(0x7f0000000780)=""/157, 0x9d}, {&(0x7f0000000540)=""/30, 0x1e}], 0x2, &(0x7f00000004c0)=""/42, 0x2a}, 0x8}, {{&(0x7f0000000840)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002040)=[{0xfffffffffffffffd}, {&(0x7f0000000500)=""/40, 0x28}, {&(0x7f00000008c0)=""/22, 0x16}, {&(0x7f0000003440)=""/238, 0xee}, {&(0x7f0000001440)=""/210, 0xd2}, {&(0x7f0000001540)=""/10, 0xa}, {&(0x7f0000001580)=""/250, 0xfa}, {&(0x7f0000003380)=""/176, 0xb0}], 0x8, &(0x7f0000001700)=""/37, 0x25}, 0x5729e3c1}, {{&(0x7f0000001740)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000003540)=""/141, 0x8d}, {&(0x7f0000001880)=""/221, 0xdd}, {&(0x7f00000017c0)=""/95, 0x5f}, {&(0x7f0000001a00)=""/77, 0x4d}, {&(0x7f0000001a80)=""/188, 0xbc}, {&(0x7f0000001b40)=""/111, 0x6f}, {&(0x7f0000001bc0)=""/117, 0x75}, {&(0x7f0000003600)=""/214, 0xd6}], 0x8, &(0x7f0000001dc0)=""/183, 0xb7}, 0x6}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001680)=""/82, 0x52}, {&(0x7f0000001f00)=""/91, 0x2d}, {&(0x7f0000001980)=""/113, 0x71}], 0x3, &(0x7f0000000940)=""/135, 0x87}, 0x8}, {{&(0x7f00000020c0)=@generic, 0x80, &(0x7f0000003140)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, &(0x7f0000003180)=""/173, 0xad}, 0x10000001}], 0x5, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000240)={0x6, 0x3}) ptrace(0x10, r7) ptrace(0x7, r1) r8 = syz_pidfd_open(r7, 0x0) process_mrelease(r8, 0x700000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="46af41260a2e236249e416271daf24968f6e68c74a1dc2f6364c394c6286da68cb314a54d5db463fa4e1cd0e8b08f98bae26006665567d5fcb047c4f43de7072d50185dff1aa4f4e42abb15d2e4fc93cc69d007c7876b7313322b421a029eb2818e90850d9422da2cce7ae4482a2d0642d88d895d48b6cb7f3d7ad56d59aacc544f8b93b6a1a6b05d5d85515ff76ac3682d26a337d60087860eea6d3a9", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x5400, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_script(r9, 0x0, 0x0) 3m18.387855733s ago: executing program 3 (id=1311): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x22) sendmmsg$unix(r3, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="ce", 0x1}], 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x8000}}], 0x1, 0x0) 3m17.099952338s ago: executing program 3 (id=1322): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket(0x10, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, &(0x7f0000000840)='./file0\x00') io_uring_setup(0x1bb1, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x4000, 0x0) unshare(0x6a040000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@local}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0xfffffe11) 3m17.020542189s ago: executing program 32 (id=1322): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket(0x10, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, &(0x7f0000000840)='./file0\x00') io_uring_setup(0x1bb1, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x4000, 0x0) unshare(0x6a040000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@local}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0xfffffe11) 5.900918726s ago: executing program 5 (id=4124): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2005}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x32, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x0, 0x0, 0x3, 0x2, 0x30000, @loopback, @local, 0x8000, 0x0, 0x1, 0x6}}) 5.797202848s ago: executing program 5 (id=4126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$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") 5.68869817s ago: executing program 5 (id=4131): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000006940)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000008000000060000000100000f0e00f6ff03fff6000e000000000000008f54b7000000000000000f010000004000000000000061"], 0x0, 0x48}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6ff6db36ce966e756d746169"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) fcntl$setflags(r2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) pause() fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 4.801979007s ago: executing program 5 (id=4151): r0 = creat(0x0, 0xd931d3864d39ddd8) cachestat(r0, &(0x7f00000002c0)={0x3, 0xfffffffffffffc01}, &(0x7f0000000300), 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f00000005c0)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000640), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461aa0fbe8ab80679467df91c09e8a722e34d7e484893ffa560200130011186809fc071200000f0023ff3f210000001770faf047145bc79e0b9971bcbedac0eead3374", 0x47}], 0x1) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62c42) setreuid(0x0, 0xee00) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x28}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 4.753055528s ago: executing program 5 (id=4152): fstat(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYRES8], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0xf}, @fwd={0x10}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000002080)=""/4096, 0x34, 0x1000, 0x1, 0x1ff}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r3, @ANYRESOCT=r1], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000001d0e00000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000100000000000900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="034000000100"/28], 0x48) ioctl$int_out(r6, 0x5462, &(0x7f00000005c0)) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 2.322500455s ago: executing program 1 (id=4184): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461aa0fbe8ab80679467df91c09e8a722e34d7e484893ffa560200130011186809fc071200000f0023ff3f210000001770faf047145bc79e0b9971bcbedac0eead3374", 0x47}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62c42) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) r3 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x28}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xd, 0xffe0}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth0_virt_wifi\x00'}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044078}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00'}, 0x10) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) 2.267659846s ago: executing program 1 (id=4187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, &(0x7f0000000100)=ANY=[], 0x1, 0x1280, &(0x7f0000003780)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) r2 = syz_open_dev$sg(&(0x7f0000000100), 0xa, 0x80040) ioctl$SG_SET_DEBUG(r2, 0x227e, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x8, 0x803, 0xfffffffc) r3 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r3, &(0x7f0000000280)=[{}, {0x4, 0x316, 0x1800}], 0x2) semop(r3, &(0x7f00000003c0)=[{}], 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0xa2) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00', 0x1400) semctl$IPC_RMID(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="f00000001200379629fcecadf9afdf2507e01e3b", @ANYRES8=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x8c0}, 0x10010014) recvmmsg(r5, &(0x7f0000001cc0), 0x0, 0x40010022, 0x0) shmat(0x0, &(0x7f0000106000/0x2000)=nil, 0x4000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) 1.892180873s ago: executing program 1 (id=4190): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000300), &(0x7f0000000240)=r2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r5], 0x20, 0x40000}, 0x4000) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000140)="240100000100", 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r10, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) 1.55699803s ago: executing program 2 (id=4195): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.469543941s ago: executing program 2 (id=4197): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) writev(r5, &(0x7f0000001a40)=[{&(0x7f0000000180)="390000fa461aa0fbe8ab80679467df91c09e8a722e34d7e484893ffa560200130011186809fc071200000f0023ff3f210000001770faf047145bc79e0b9971bcbedac0eead3374b1f10b97acf10fcb34894d37f5d3f6c760a735be8b7297778664a552281b96d5a7d7f3875f05e487baf067da3f28852a08c19ab0bbea9c89c1a4ecff2194f01dab19545076990660e40558de", 0x93}, {&(0x7f0000000640)="506b49bdf874403084032019d34eded7fcad7f498358690a4658ecc923007b48583124c67ba3872f1fe8bfe90af400bcc494fb6716c9e868b897953d3a34b2938fe58d08aede915a9fcc93ad00"/91, 0x5b}, {&(0x7f0000001b00)="3d04e45bdf25b0765a5d8ad2e287ca185b4199ec686f6d504fbf365bd5ac1f36bc3185ff9fa5da33d3d8ffe1fb60db33ce1eba577c64f782b17322c251fce812a655a2b16769c60e27488267d2ba40a4e22343c54888cb2759817c7ad678b27c8cbfdfbd98d04b360e", 0x69}, {&(0x7f00000006c0)="fc7b201fd718d5a4e331cfa0362fe79eac02e7355bb8a44361d63cb79e8d88bb31a5dfccdc27dd191ef596cf11d96564910234511604f1092f4deb2da17b6be4b5c0d257c60de791c13c58fb8fd9b5ddd0a2d0279ee04593cb6deb40453378803e794775b31b33959229d4704b5b25f40d02c279a7f5fdf1", 0x78}, {&(0x7f0000000740)="c1a497b7263397cde67b0e024473da174dae1aefee981ddd09634ce2479d63e0a2d753f184904e32139554ac7ce20c1da76c88d3ea3625124c2f20c657e1dd29668ff33bdf576762b8d4a492ec82d781fbd96d9db78c73eadfb779f23e15d6e15951153ba04c10864fbdd95047b1016cf48f8d9af677936ccf541087972b9368d7920019ecc96c38ccc830f8893f37e9345a882a6119e3838b9a543e14003b7452b7765521a7b8e51972f51bc3ca3129d738e225430ab50f1af3d955140883ed36525d8ccae0668d9714f53948e0acd1cc3021585caa", 0xd6}, {&(0x7f0000000840)="17dcd84b23a32790850bb83f3e8f69cb95bfd5c0958497af8331055ad87ca45bc96f894583a68207d73eed02b60d8d736740d39b2c978ab5feb7e6510af364f541cb794c016c4f577e321d10086c6cbce060fa619120bc4aac1eacdd4eb44eae5bed86d0425eafa4d78c7192d4401a1208f3b5c2bef7a712ce488ad11d919c1451648a20e2093f76dc36e704c6006412a3f813faecf4673bf81da8e9ac7479c453a13430", 0xa4}, {&(0x7f0000000900)="c751195f7c7d42acc810edfdf00799e4b796c95cef99e9a2f5fe4e2f972f1a6abd0c596925c2f51652aa54abbb79f7bd26c5a6822d9140511fbb49f8fd4a5af13e379f9e9cd4aa47b8ced7634293e21a56f3b2d2182ce2e001789a55d7cba024bced81bc7cf3435ebf6ca9654226", 0x6e}, {&(0x7f0000000980)="3a023697d23c363c0bec3700b7488082a688a83b1a7693e03da37e05eb5fa377594a03e918c42c30699b9c12dd4b2a03285c3b885a68de303310edb3d9930b9d26f3c6cf7c61027d259eea56952a02ca8f8219fa17cffb00fc817e9496bac20805e5148095b94caa866ebe68ea77172354a8fefaf957ee90cc258021a30ac75e8640b05e", 0x84}, {&(0x7f0000000a40)="8fe9a23938de870e19ff1e173c8909e450250495a2908edbe9d744decd310073abd2a9b356fca17699913ab26fb015442ba911f698acd4cecb9c92c0915a510e3b017a85b7a4df8964bf5b58849a86d0deb9b1c18b6a1aae01c5cfcb3205ab3d47d1bba0cf7b60ab4a4f7df20902603d682cd9b3385b573a78fb0181f7f145fad4158d511e273f37ba9ffecd67c1a97418624ff6ed0fd23c5ad7bb902b2850c8f06d0784e492827399b1a22aafbae5f54d89c5461d60826206dc737fdeb0eaede9e9734f7c1da429ca72e6894a662be53383807766fbf0f37153d406bf7c1ea73aedfe378c22092102dca112ab0a4ab70390d779b2cce0b9e39ca0aa6a4a51d521addd2eec8d60eb2759e8d1d11a17435d3bc7f0ed878de3fc9fd06176eb2ee071c1b7d8d5bda296cf9e9903d57544cfbc36a3c645f311f2db24b11dbbaf26f17a12add7f7fdbf78c7df967eb5f996492be4eb26f93168322b99efc8b9fc61d7ea3d362f0337322b9bffb5d66516bd4207a4c0548971705ff979e7ac0c74bf6c97d1519ba94fad018e24b67b79b4180bd40cbdabe1e9b3ae4c61222b5ea812c82f625a4c4147011074f9765865d66f0897c7d04a18c7acd9664c83ba56919be66de7df9d12bd843f508898f073220eaa59934fb57541e22863cca97e5b879c68f120bb802faf7b739af9fc0f213610fee4dd6c0422ebc6807b4cdf8b2a70377b209e2cea56fdf6e4e23fd82904d2298209329b90078098fd111b1fb74e321d9568fc261e86188957727eb8cb7845e62fdcf2404c6e907fab9cb5b319998fc1ee552af50bb1bd0b34478322ac17139db7bea093cf7b01c51efe078ff54c4b392533ce1d23058140813249b02b52c3e0b2fceed3d8bf92131b02e0dd8307658a6815b05817502be80af1332c565d22b8eb16a8c8ea487d1e789d21e548d5cac3530d4e927450c073186ea7b9a6c5e478f081e124e6b65bf602d543c5a85d1114b7da5268a0c67972f728e33e8cbdb7cf0312469b17f869f8fd3a520a90e2b81de3c0e7e46dddb5799cc76199113f04fcb5ca4017a89002ecd64a558a273871ff006cec625196a55f60311d768e450f658405e6e5494ad860fdc056bfb6d9efc0136c7d8118aeaca96270f8a46a1e79185119e9748c19760cfbab4685784896ec201ddb29cc6f77b181873ec75f24e346c47e2da3a7d89277eed1e72d8df768e8be649bce7f5ddceded77e6d9610f648f9661fbbe0baa93643c2102ab271781a35273b4c6a9966229e3ba9be4b3f84b35469fb9779d0b611ec32ea351e705841433fec480bfe807f6e558349f9a426b14ef38f8758ba6b9f39eb15d7073a227bc622eb810271ee88692028b192abf1a541b5b9ba6f21136d86b7110904b017d2466d564e24467a56a8722f1cd8345fac4f1f07d93c6579164c5fdea8df8b951cd2c18258c58f0911260cfc1aef0fea77a96c83c367a19437ec5acb4d8cd20e1f6d36ce483f707cf17b085584732d8e89a19a6bb33f75990d40c2f1976fff2bbe20971d469a33c95eaa7f5a756a6ae5895d1fe8ae04cb836f82dce66c9f2d05b5f6763ab17f9a4ce76592ea911326020eaf2f1ff2bd6fff5d9ff08979e27942df9f8938719452334ead6bbd9ce236cfeb08044b4013439150dc5986db57d42b93a8b7194c5285b16966547515068fba33bd2d39193fcc1ad25f4ece729ebe67b9148bd551c7a0de63b26e86289c23683d9b9500291cfb931038973df0e2190498269ccb4b2f71efa40ca9f9d66ee6db9683a0f9d4f2ac2851e08a8073aa24e084ed14082f2e387caa9d26db79053dd31424f0d3c0b43b4e694e8a394690b01125e55e831dcfcf38b3aa7a9eb419585f0e4091908fc7b6000cd52038fe929ebf5cc5b018b2810acd32d9c6ec92ab504ee71ad49897cf9a5286b34fc7fcf8e18ae5801bd60dc76f11796294a44f50f0235e0644d48f562d204cc36b0ed60eb222033566f7217d982a9584af7ac01bca1ac7e13e1071432bc2f2f961d405216b9591fce5c6e8070aceb97940460ccd961887eb8b8143b9dbbd204674d74df47d1e4629f6da211f1d8ae9a9cdbc549394f7612f3437c61c70d71225c289389a043d9d54d6e16ab2731e214bd255792076dc59022224352bd593cbe6f6df1856c7282ec66fe8f5c3831b86b763c47a27c0e62f786cab50d989d7a695b30dd2a337a999471071d642a2b3a789674bdbf2825552ebaf08f23ee33ccf7abb83a374212a956b96efc4c6321ca87ef43d0132e24b0e7bcd894517fa111982b87fbc2e307d11a89d2d5e16c8ab8893bf5ab70cd369344213ef4dbf5ba70dd42de221216f0f9084c48d13ffd32e9b5518ff72039d3bd3ada12a269716a57b688636eacf37883b5f0e74bab50c7a6d6253e74e7016e4f2a1d583cba39a6a41865fbcd539c35c0f0e163d00edf6c312c33105ea73f67bcd6539f997910e6b2ada33379ecdd66496ea57a5cc184fcf848de36f7b7f69ef45a1a016f4be43d3fa8ad2bdad5d5c1a85001b6e76cadd4efa205c1bd5a8010ad54c0f7928c1de556ad575e663388f7a0abb4dce6301b7fd8a052beb9a061b65452e47398ed1e5b2fc4eb7583df4f72a8bffa6ea38742e9749697481e28a4fc7be36557be260fe93fd32ff77d7361367281273ecb77d84a4be305e2174e9f15492128c6de1995531ea12ccf5fb671e095e82d521bf1cf80f418872e20b79706d4022254444d9ffdff3bb8e178200c2ea0183b653ab3164497f424518e24b1e2e930fe796444517933dbd3a40e02ffafc751e87e34b3ac503cce62aaf0dd55d215243d295833e0e43868dd217049ca609b1346c6b773fcb93ffca44f35368d89e55d50ad8f8f7db42c8f651e880d714fbdc2b68882e0f7d0d4d3ad0df8b4365d3f600916f1852880d956ef7aa1052b64724dc263088364cb80f3891da7a083fe0993ee303dae3e8ca134c9e64859e43b8ca2c1fb1ec01e0170ede943088a4d1402cae13ec161e07ea7e40488cd8b9b27e8e1e2f5b3f658c854b6107799fa81c42df84cdd4c641453b4a714e20d4bc938a9ba28452a0845d0cbb415ea8f87dcc70e50d9bc760a249b78a0d0c26562ca405c8e711fa1a86e6a84ef7f89f4a745bc165cf1cfb6ba5527dcc27b2013722b83fd7202d45bd1cf09026ed17f15db3993f3e88fdc59296d1c2e7fac84bd06cd4edb616d0f685665ca9a89f7d441a91d879b7525e92f28dd546fc86013fc29ae113fd5449b58df57238b51cdda058a7bc07adb1bf243bb869ce83acf7b6094e9f64d20c4da24d1f159ad0c674e21e16ce73ac6ec5cdc196a16792327030a8406cd6daf0d4bf1c2aa37d4806bc09d3ef8d895a6a3304703fd5daa1e18c318dd4bf5650480c9ab6e35cf20aca6c1e24e9b487ca9d97581d1dcae76ab1476ab22f2216fe2d5330e67e3edf40665cd836e021e8b8e2ec13348647495b72a98cadef9848609bf7d44b8f3993210e9efea0a5e4524c2e52f45b191ae3db4e7fdfc56ddb73e3e9bbc478f04a10be2a5936fb38775a42539e0eef024eeaa2f3e303586bcce7c213aabce29aa6235b5aecc3c540ca251feb6b15d08536505536b70f54ed8bd9fd6da5f9c466d7548941aee37ae0c98413e4ea9e0a9588afe5ff5dbdd05394311625a4fa6ef0cc36a4be4bf58b667fe1a8b4a1d0d05b629c18a2dd897eb4107fa818ca4cfd8d3aa121e735c3a980eeb2abd5c9cdb6f77d6c63a9ef4ce0e8eb69b4c2f26103fd3d231572c10784f3b8a566f1b724fd3ee0f250f2647c60eb20d963e0ce2f8e69d5ca2ffc9bb162f21fbb45e1212e14cf48522beecad2767a98ec04c8a4c815249d5627efb332218f3fc4f674780de24369a7d3698b77a8531472706b899269d79e5644d2b80f77e1a0bb08a1ce7205ce3b94820c5b2de39eb3130cc6b63e933c1f0a3c019cdb7114dca1e55deb1b5f3c423020577132f07956931c21d585acc72d85585dc60173a0aef1990a6911af26e4a38c4b52e616231090b4413a97aafb35bf8d0de0bb716982d2ba13fb479130c3a4317cfa2c626054360879bb27372cf51b3b95e6f81b572dc7d1f6abbcdad2c437273316f86e9a94dc16f59b57c329203279315a47e4acf0891b63f72e197dbbc0c00d28ca5614589ab1b493f44402c9c1b8d5d472833f5edd3839ae9fc63fc167fc902d3401dfc8eabc2aa04d58b83c9058d7f89eb1f403f35647dd1507fb0f3f37b4214106e0d5900d031f2ee14f35746", 0xbc6}], 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x15, &(0x7f0000000080)=@raw=[@generic={0x0, 0x5, 0x4, 0x45, 0xfffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @exit, @jmp={0x5, 0x1, 0xa, 0x4, 0x6, 0x0, 0xfffffffffffffff0}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x9, '\x00', r4, @fallback=0x32, r5, 0x8, &(0x7f00000003c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x1, 0x615, 0x3}, 0x10, 0xffffffffffffffff, r6, 0x5, 0x0, &(0x7f0000000440)=[{0x1, 0x2, 0x6, 0x2}, {0x0, 0x3, 0xf, 0xf}, {0x0, 0x4, 0x3, 0xb}, {0x4, 0x2, 0xb, 0xb}, {0x2, 0x2, 0xc, 0x4}], 0x10, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020703400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) 1.290838744s ago: executing program 0 (id=4200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$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") 1.211816836s ago: executing program 2 (id=4201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) mlockall(0x7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@private]}]}}}], 0x18}, 0x8000) 1.167346517s ago: executing program 0 (id=4202): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) syz_socket_connect_nvme_tcp() r1 = gettid() r2 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r2, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.102090858s ago: executing program 4 (id=4203): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461aa0fbe8ab80679467df91c09e8a722e34d7e484893ffa560200130011186809fc071200000f0023ff3f210000001770faf047145bc79e0b9971bcbedac0eead3374", 0x47}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62c42) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) r3 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x28}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xd, 0xffe0}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth0_virt_wifi\x00'}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044078}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00'}, 0x10) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) 1.064646559s ago: executing program 4 (id=4204): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2005}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x32, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x0, 0x0, 0x3, 0x2, 0x30000, @loopback, @local, 0x8000, 0x0, 0x1, 0x6}}) 1.02866679s ago: executing program 1 (id=4205): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x30, 0x0, 0x20, 0xfd, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @local, @local}}}}}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) 971.227081ms ago: executing program 4 (id=4206): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x800}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) perf_event_open(&(0x7f0000000540)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, @perf_config_ext, 0x1205e, 0xce3b, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0x2df619b0, 0x0, 0x1000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg(0xffffffffffffffff, 0x0, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x4, &(0x7f0000000180)=[{0x2d, 0x0, 0x2, 0xb}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0xe}]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x48040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="6c1300002f00000226bd7000fddbdf25010000002410f2800800de00ac14143a04003780de7ae14f72ba0c02e51ba4167bee839ffeaf2272341742a7c3333a71208c1754c5fd1d0efd382fdc51b35919cc7f53524312134fcea6e0706834f57eaf1ce15fe59f52785fe8db631d0c59a227345c36a4d23f10c01b420045465809c62ca5c90063bad84deccb73ad148ca7caa6e5fa568820fe056d87d8e58038836e58cace4b0f6f4c770459add6543b8fb0baf565ee69eabdc64f01eb024f97ca69c4f8df4b16a2b4db007988925282ec9bff77278f0b22ac9d1638502350c5f0b264d24968b3404e6a16e7017d225ea61e65247e4a7b393483bf877e0e969f1ecbf9e23691b6308fc5f2648aac5e18a0e23dcdba542b25946bc41885c7eac35e62de6ff54393da0d792a0601418d750c156c8f840e7fa9a24407e6b85b53edbd264856e9f4b6609a81e1e01951d680304b91203cf6458a8fc39da170818596939f0a6c18c358dbc739a145404f6f519b73d7ea364a88519d6a11229d3cffe9f25e3469fb78760eb3d149498ffe4d318186e5ca85d266d6e707d69be74f840ce8542e62df33921e9401c567242d48892616360d5a1cb690618da1f24dfdddbd339c391dd449c15d8fef5cee59b50938dd9fba63b0d8acababc84093ac354406af2a290e013e9925d4b6466e17843e41774030349eab5b26d40958d8e2626563943c347bcd4c7ccfd30d4307602d9746d5dfd6b8190e4838c75a0848b48711520983b0383fdcaa33e6282ac6c50bafd5b4d0eff017ab087feec38b16e2ade2cbca25d98e85ef3ea4b302fb303d1ce373fa31bbfffd8acea051fd04a0ef50788941b0a18646268081c9df497c570ffd7f2c2a9e19b0adc552c138a7b18028d043e879fe79c8b02bd8c358771408b9e01564e0e1d367ab9ae943ca13f10cc338be510e9d3a9082ef74d42036b2ed9aa99dd967a880a6f246e1ed3be236d05922c63843f795f2fa6e2ef04a68040f5a577fe467f870c2a688d21dab315d33a00e12ff0a448464139385f99894b341c0c1ecd1551023658a5f982a423d1f5497bdc1afcf0bff7fae1aa79dd86306ae369df5134f329a6a36363a95230f2e0ab0c561b09ad7b5042fb1fc13c8d490db070afded09fbd7c74bff57d1fc607aea15d09f8818a33958caec56ea04ab8c93040c88ea2f4958d90129722773897a3fd4bb023ff414f290b3bb5e6543618e4c4d69196c7f7e5cdb724b15ec8df8cf4442d25be20b9a945c4488d3ccec3ea8f30e9edc5855088288485acd1ccb3e2f6f5ba69e3cad36cbc81e0c356b24ab2d43e3436909e32ed930d60d7e3871c2a73373313c3de4d4c144ffce0e1b8e8122853faabe3a102d2de07b4c0b99016d06400f4349dd19d0f4e838b53ba367f4c15b80d18f98e5d5ca56caea7a8ccf337b03c5cda941ffb8f056f7a9f499f0a9614c9c20e4d8e6dc661b363e7c343fcbb1048cf4d0914d6c06e32b94c62af21169e413e9a3006afd878db0db5cc5535c80c5200dba281618fd166171d30d176b77ff285747e0b84c41e4b3f0c05f42dd8deff968a1c41eaa16a456d0fd806b7beaa7d61b91e115ac2d00d8ec83b86e8c16165d9f729d1cb8be3885a5313d1654bddaf317862cd1fbb13f64c3769757022156d6da680132e48e72c6ec0ecf18fb7c4c53cfa0d0f8ac345597bf5d326fc49a7ebc6d8519ab6975ffb157d65e82ee19b631f35e66dbfd846e09519046c240014b56839337388af6de0b530f63101675bf2125a829beed389f8321f806b7590184933f239d361f664d463ebe9bc3822116ac62a611ea805fe39dd8962f7b267aba6f635927cf7ccf6189652ec79d43da0b5b0bd9388abd2fad6bfeb1725b4f4509f225e8ad45ee619b2035d5f559079d41870cde10393a7d8775f99c164a36bf0ebcea0717ebb8cbefff5b8e99c3488cc48cef7cf0f7b9144dda906520909a859a6d37cb2bb9cbb05db2d5004c8cfe681d205b8d7c99f37f0937dc762e9d913ed3ab929f9fcf0a547b2cbaad7a42e49625635ec4974b8abd8f9b39148159923a5008550e94e4ea3de811f625a194fd11e7e7d6d905980744e74bc643645652325b898dd569007059c9f6dd1d7c856a3410e933dce840bb123e38d970dba24085d165bf61556089b656acb88c1db1e49ce5c8fc4906cc0f4f3c5ac477305e6ab59447e89f8ae5abc45eb1acf325b09eacb9652d9d6954fd5c4aad95fe3034a384e94fa5e8f2097ea56763a7a119661cabc6db81becd830f452c869bc2a428d50a620f304edec82991743169938cc0ac835c2fa1c2edf452d3022d7c90cd64744c18b85d81c95dfe9c40e1a1ba5832f97e988410383629415961380f9a53a80dc4882adb84a494960ae17b0bea8e9a1490662bf37358eb10ef086cec1af057d0d3908e0423e342612e135f98ba7ffd433a106b9937244112ea15d494ae932daa136e875a73f6bd563fca8c7d045ab9142d257310b9a665b2b0bd8c6c75757ea6c10aea51350ecdce2dd92a47a988d61e8dd9a00690590194df4d1509ebfbe24c6358524e16f46f410f01933122f91f7721e788a54f7b886a19ceb041f2b666b2e9023df965d6f34adb679ebdf80f46aa62a50ff7cfa7e0411e29895bae587268a13f05fe1ff4ece95c8b6b443786274aebb6c5b541385e280d2e4dc7980fb33a67f2bf88c89269c3b35d675c432d113f80a82391950b868cac083e931316a8780370be6cbe7d248bdc7a960d04f45b454e4b9509ebbddf111e7fdb172135c459234d51320b5f10b700ee63fb85dd38e49560800af51a9c56af09a4c5b94a1982dea84836c5f0eff16f9debd4e03b9296c834ca15d60dea3d6077a703aca2ecf7e7d8b812af89b1b92ddc773ae7b75a15cc2469aee980998a5dc9133ec8021b116f952fae9b74433e7cf1433aaa7ff9f3344a2f2b53affbb4295bc8d796794b51d3aa745d0f4fece1330fabcebe78209bc2d23619e1a591068813410e989a50cc7bc865704c2f319698cbe21679603d0f4d693b4e04ec043c25b750e27595f0dcdf339e654027e32387beda40ed49ad5ff4cc1f5cf21d8fc50e60f2668d78d09528cf4d0b849e8a2cf40fafe0ac7a33533fdef27c39418d6ab7621659b22dc965a85d7ce3e7b4e770854fe96ea4e2e147b553ee141fffb1e4b92d6bf3c9e95285fc4ebd01d45219389791ab5f1dec44981b62b8806cee314952a7ac86288849561ef30f4eb96aa3f41fdc82919146b77c5e13cc2c6b9a99a0c19ac9912a3f882da65b288d912be2c89ebd61cdbec6465622da2f66d3dc862e545185f2ced82a0c62bba5a22111053b7eb5d8cc324f8d797746ba2d0474019d9ebf7c21443d1fe1a5ac246b28af74bfdfb35aea976fb9dda61ccff5c94ec411e4add4cd115baca0689fb75243742e133db8e973dc940d12c467d9eee1c891fcf13700cdf653fb966231c58533e5686a2dac1eea76d323333b38c61cb364e0a9557d6b5e391fe3d49244dc1271262aeaf522a74edfd977b51c6e13be1b46dcf49fd217817d581c483a74dbb7a689c36441218aaf20da29d22d1fdf530d5adfc540d624bf75c5644708d9ce76fe91790ec3e9b5b07a83ce97a2b3fdfb0b997cc173faf3a4c6569fdacaaf45d78b7b529a8f25964e6f63231d8d26661ea82d8291d243821b18d84824fe6a11f456c2cdf6cb4025662e606ef3412cd17caf0b4f66b225b9856e1e46755130596ab7b52e2f7916fa63d89e52ec060f5a0debc23ad289f2f223edb2802873d5cb6b6a0d8d410228e87f4d0b4fe1eb97cb0b013e28576f058f80ec28e6e1bc38c4e93dcda9c40c9d06be4617eebd69984ba72bc5ecf17e6fbab685c6a09efba0a8134ce4fb78743793e4be762e303ece93e1ff75624fa246051de4d0b656e9bbd354e5fe6963b37a1304cb2ab711155ad1cdd5354fd1c534871727f17051a27b2b64f19786d3d4f0b6d139a919a326fb5508b88cfc3171da4268dd44e977f51f97e4aff20901105c699886a89e552db8c464d73c600bc7fb195f38c1e81f6b4b273a71c16619237da29f075c706387b7eb7ee2880c209e78c64eef77b78de6517b8be753ff6e4235b74acb259ba5881e5cc4055156efca43a824a261ccf8472f9dec38cd8bd88febc0b1e93309a203a23b9e47f13ce192881ab7577818b19c913aec1d077aa60d48d1c2cf7aa15d287766c95d3f6a488488be4afb65f994698d0374569f85cba5d95951253ea446bbcb96726211f5df264905a5406a1796d0f620d6552d899f088cb9e1b1f1e27abec2a9b41c77fb5b9bb3480a58c6c11a43dbdf05b33ea07d7ee31ffdeb4a24ab8a6897dec9d241dc503f4ef0f01c7eabe8020dc72ee276f1531928224155f906e509ddb22b8ce7a9d427dee6f0a3f1d8ca09706aee9aa1a22c52aa3a3a6194153f4b9e35955086a7f0473d18656ba4793c562ee9105c97d009532840d2be0f5a40e34c86246314736936d97da16b006554cdf6e74057ebe61560911787c57f5a1fae4d451abb5f5d1b1206d8893258070d1496926115e70721b8ee4918c66b59de6e0deaf86c6d2cccc6cd40e016f0f38e81e21d7f8b6fe45e7eec97e84e5100a4c49bef3691720ebe97fd4704a567171c8636007fef52f7070fc852b08f4c032d9b0122157d84f8a5970ca60a98d29fb382abe781c63b07f8a1728e2247842bb38f820aca9f2f1eec399aa4c48ce91f4b327ce4c3c44ab613e3240d661e4dbc7a7ce30c3d9132193858360cf2f8abe2c1b85dc3b195f09a23e82ca911a8b506329cd746a03d6c67d6b469d22baab336916ab090cc1c235b98a71977c17e0fca74925ee6760c8d09aa4bbb0684bb350579d7c8fc792e6525d0d2ce60263fc12e1e1932ce24a063b2e22ebfcad970e5eaa546e8be0781d482dbbeb10d34f996dfbff893791b6d35857fe807ddc1cf5351aa59f9f43df8dbb061831199657bbc7812ea46e76fd57b3a2707a38ef8b447992f41b0d4bcc16902f97e48e67a0d486ab957257df1bbd1e57f22c61fcac840e89567881f298f249241775adc20abf5fb171a4c0927ec0fc090b7ec6ef31cdcedb8b703d9aa4f6bd5f8468bbfe369d2a5eae1a4dff5b8a471ff198964777eb51db29b53393ac6313aa5f13ae8fed57369a56b6d793aacf08c4e6bf28470d3c3f8e111a18a8441baeb4bf5b2541c4f553d9f294979620ef8749ae79709933f2af7cc825a8dc9ecfee022d26efd5b7ec11b0e568af48961d7394daeb9bf0317188b378e832168c54290048c68fa2c6d862436437b7d0f8e28c5ca18d61779d973d335ede2a3d5b23d3ed9a829d99cd0299435f7e01d57526b45e63b00b20466e0114608d2863e5abc909ab91e2b54780e66477c86cb8f1c1f8514ff56d219d315557f50ea8793d9c3f39e6e6bdee536211e57a252808c97bcf0590eb73af2109f847cf938cb9496d06e3f7c4fd5bd451c80b254a63a6a1c5e296cf58d90654b80ef2c20e224ce48b0ac80c76b39f3c482e3b8b4bd68b7bfbfd6d2b1974480d17526ec5052ef4076b4e92ec0fa15ccf4fe7687641c6c2ab45fa724e59976e1066fa1701c0d0c3eadc40c58bff4fe28e1fca474b08e971ffb05363959df61f5066083d46b193b897afbfb217958ca67b81e4b270fd5245ed52c18446e5e94a4e0a4178fe6d4489933e9c06ce38f989589a3e76594d458b062bbe88a95aead94d1d6a26cfdf35a4cbc773b17b59b27f2c594ff2a79d6f627a10d9fbf5a83f89b3a62b4ad303b8e4c649efb44c60d8bccafb2d54e12c905f5c95e43dba54c2dae3888cc7750968f7867471d736a14000400d0f875e30b488904df4bc1632863fcd43946519ed4e0a02e30ce47e6360133ac174b40d3e7f8db51014e2c8db8ef76cc8d40385979db503745a11a2eed31a8e2b72e8b3dc6bc958958edb0a57de0b4ab5a8315fb03c5e31ec325e1236c7cdefeae3fc7eac95e5035aa287342dd36687005ee41e554e87a07496714fec89d2bb1ff5cc99a596519c1780ef7c37be3f91d4340d860375792a784a703ec23d8c0817069bf229d45ae43debbf892092c56ece4f9f6f27dbb24f6c4ead1749e3e0a51cc8ead9a3f0800e400050000000800f1005b5c4000d9002f800800fe00", @ANYRES32, @ANYBLOB="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"], 0x136c}, 0x1, 0x0, 0x0, 0x11}, 0x8000) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r5, 0x0) timer_gettime(r5, &(0x7f00000001c0)) 836.942083ms ago: executing program 5 (id=4156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000280)={0x2000000, 0x100000000000}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) 798.631174ms ago: executing program 4 (id=4207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r4 = dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="4bd203afa8a0a820573831475cc1ca6053bd0284b52b6bcd4c502be0ff09b7129c217f3c9d67ba184004f2bf0b7f03b31257bf6d6812b36e1f51908ef687e8251bfbb0b9f69e302edc28ecffd45e833222c77c05fc230977e0d617288a2e66caaaa8778bfa68feadf212a2d744713b1384039886323d0ed34984459e40c4f186588a738c54cbf74af7a6216faa39c19fcfe445a434f39b46800f46b454b868dbbe072b5629a22e12f874b9f2991994434354be6ffd4d80e1f1230011874785146729a948328f155cedb5122aab4347840eb1f13e0b2d6ec445209f07110df6391737694972f66c41281c68a0744e51bcb90e6249946b6c213bb85d6a791235805ec9ddeb03afbbd3a57e2e122a8ec318c8926489e71cc276776d5d0ffc0f16ed590c076c8fd7640738268450aeec1011de0d913ccf3f68395ce63256677302dff0b176686ed4868618d677a5e52ab1996f64e499fb942cf04d0024ec633560d4eec2b71fb6bd774c501b87715f3e1df55ae1f7aa065dece77394069492ad8365e8ea39ead9538d48fb50a08e2af84312b3b30384ff8441c2f51fcabbfe76aee565f413237b77cf3f95ee0884077db0724c195a4d40cf903402da79cf8161bdae5e39f557e67be556424deda2982344edcad4f36f03e197c50c88929e887f57e3b0836e9cd58e1132df47f52e15177e3ed5d9908bdfe42b6fe282f670d2a44165775d19958d5e689c47e444b16911dbc5f0ade56c679aecedfbb9eef16572fdd117f921f9f89c504b4fc1dd6ab8939f2ac7b8057498ad5a9ab09c99f540aa9784767fde91c92fd7209dfa6ba78e9953d5b8cfebfeacde6763af29193601d9a7fc6b73148c3aa3b483297f4881ad2d95b492f1476d4b218ac49c7cfb867b1650ba16d91e9412c1762ceb66531113956096bca757a2fd8cc1ad9a8cdf9615121d5f0d636cfa222fb21deae21f9f1982a8d0ace1f9104785eeb015ad1792b26d475b1bc4a454b63e7c8346a5b2bd40bc7541b2f6c02895f54e2fdb88ec2d678aaa9c783d61473afa2c8f6c2df83cd7491f26c7f527a38f71d4924225fc4ae77ef33d46012fba2d0ef723e39c75908a66e884b936cd17e20d3f59bf48f5cbf9ef2542ef9af618fc7df6daa30de39934acf70c8309382c266761966beec9ee78aecdb6623102776a04ee83b6193c0e4492665092d8c872fd355012d9fa65e4bac319b19e95baefae67b20de2dd3c43c4c5f1708ed0fcfba9fc192bf0868f4490c41befc09a5dd744b028c3ea20cdaa738c272ec7a816eed47bfad2121ebdbb8415755148330fc6778313d9831131c5c0c6ac8dc3f2fd678e4f20ff1e0fcf82d4795797936401b0cdbfd23fcc9c1e76d1d063a23d126faab2a225f0174d39446bc4215d2cece1997b233e4a807b161626aa9c5d507cc260cb7bbc22ae36e8f7b3862e841bdb19a31a5eb169804aaa04c898f14056a04e7089be42fafd5d6bf6f2471546beaf8db492c76482a7acea8eee3dddf017e209f9f99343036236ac6b198b90a78ff1a50eba379940de611ddf06f6eda290f2bde25c9573d105ac8a0fb286f7deaeac6e56d065d198f61daccef695890a5f840222899a55adc6d0cea1b5c296096aafc9f598fa4869edcdf047d72feee3a7c60ef5859f4ad96084160d550a109eaea639e01dab9b98cd7dc54b55d7eb2d213331bba4dee7c2029d47339e68c31800d77f370b42d2497f66907db06a2de988dbd14cd157836ebbc7239a8d218a797c5ba6816b28cf11576b5e4ddacc5ade05848ede263cd0d8d65f112c294309aac0bc76e58f7d99a704ced501795c57db6615ec6128090fc61698dd5d7210f30c05faf505ae0641899faf1babb36789c83d7ed723a9e1f7400a94da511899da552d782a43f42623af305a7284b538b2579db694347f8fc9db65dbac055dfa3333a3c0aceaf054b8576d7b3d14769b0ab0147bc3506310bf91e0ece8a6bd1bd878a4559cff9f8074f9bbaa6a034eaccf1a13a2dcef5cf991b457b7bc68f5a4e65114aa3e79fa732200f29d925a9fbc5ba377771837166ebe749332627f0e6e898ac3dc22df2356eccaa03ee00cf890d951e8fdd32834256ec3cf0eaa2141", 0x5dd}], 0x1}}], 0x6, 0x20004095) 723.789076ms ago: executing program 4 (id=4208): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000010418120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x10) 687.359116ms ago: executing program 4 (id=4209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) pipe2(0x0, 0x880) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000000)=0x8, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000070000002800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) 362.005042ms ago: executing program 2 (id=4210): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) writev(r5, &(0x7f0000001a40)=[{&(0x7f0000000180)="390000fa461aa0fbe8ab80679467df91c09e8a722e34d7e484893ffa560200130011186809fc071200000f0023ff3f210000001770faf047145bc79e0b9971bcbedac0eead3374b1f10b97acf10fcb34894d37f5d3f6c760a735be8b7297778664a552281b96d5a7d7f3875f05e487baf067da3f28852a08c19ab0bbea9c89c1a4ecff2194f01dab19545076990660e40558de", 0x93}, {&(0x7f0000000640)="506b49bdf874403084032019d34eded7fcad7f498358690a4658ecc923007b48583124c67ba3872f1fe8bfe90af400bcc494fb6716c9e868b897953d3a34b2938fe58d08aede915a9fcc93ad00"/91, 0x5b}, {&(0x7f0000001b00)="3d04e45bdf25b0765a5d8ad2e287ca185b4199ec686f6d504fbf365bd5ac1f36bc3185ff9fa5da33d3d8ffe1fb60db33ce1eba577c64f782b17322c251fce812a655a2b16769c60e27488267d2ba40a4e22343c54888cb2759817c7ad678b27c8cbfdfbd98d04b360e", 0x69}, {&(0x7f00000006c0)="fc7b201fd718d5a4e331cfa0362fe79eac02e7355bb8a44361d63cb79e8d88bb31a5dfccdc27dd191ef596cf11d96564910234511604f1092f4deb2da17b6be4b5c0d257c60de791c13c58fb8fd9b5ddd0a2d0279ee04593cb6deb40453378803e794775b31b33959229d4704b5b25f40d02c279a7f5fdf1", 0x78}, {&(0x7f0000000740)="c1a497b7263397cde67b0e024473da174dae1aefee981ddd09634ce2479d63e0a2d753f184904e32139554ac7ce20c1da76c88d3ea3625124c2f20c657e1dd29668ff33bdf576762b8d4a492ec82d781fbd96d9db78c73eadfb779f23e15d6e15951153ba04c10864fbdd95047b1016cf48f8d9af677936ccf541087972b9368d7920019ecc96c38ccc830f8893f37e9345a882a6119e3838b9a543e14003b7452b7765521a7b8e51972f51bc3ca3129d738e225430ab50f1af3d955140883ed36525d8ccae0668d9714f53948e0acd1cc3021585caa", 0xd6}, {&(0x7f0000000840)="17dcd84b23a32790850bb83f3e8f69cb95bfd5c0958497af8331055ad87ca45bc96f894583a68207d73eed02b60d8d736740d39b2c978ab5feb7e6510af364f541cb794c016c4f577e321d10086c6cbce060fa619120bc4aac1eacdd4eb44eae5bed86d0425eafa4d78c7192d4401a1208f3b5c2bef7a712ce488ad11d919c1451648a20e2093f76dc36e704c6006412a3f813faecf4673bf81da8e9ac7479c453a13430", 0xa4}, {&(0x7f0000000900)="c751195f7c7d42acc810edfdf00799e4b796c95cef99e9a2f5fe4e2f972f1a6abd0c596925c2f51652aa54abbb79f7bd26c5a6822d9140511fbb49f8fd4a5af13e379f9e9cd4aa47b8ced7634293e21a56f3b2d2182ce2e001789a55d7cba024bced81bc7cf3435ebf6ca9654226", 0x6e}, {&(0x7f0000000980)="3a023697d23c363c0bec3700b7488082a688a83b1a7693e03da37e05eb5fa377594a03e918c42c30699b9c12dd4b2a03285c3b885a68de303310edb3d9930b9d26f3c6cf7c61027d259eea56952a02ca8f8219fa17cffb00fc817e9496bac20805e5148095b94caa866ebe68ea77172354a8fefaf957ee90cc258021a30ac75e8640b05e", 0x84}, {&(0x7f0000000a40)="8fe9a23938de870e19ff1e173c8909e450250495a2908edbe9d744decd310073abd2a9b356fca17699913ab26fb015442ba911f698acd4cecb9c92c0915a510e3b017a85b7a4df8964bf5b58849a86d0deb9b1c18b6a1aae01c5cfcb3205ab3d47d1bba0cf7b60ab4a4f7df20902603d682cd9b3385b573a78fb0181f7f145fad4158d511e273f37ba9ffecd67c1a97418624ff6ed0fd23c5ad7bb902b2850c8f06d0784e492827399b1a22aafbae5f54d89c5461d60826206dc737fdeb0eaede9e9734f7c1da429ca72e6894a662be53383807766fbf0f37153d406bf7c1ea73aedfe378c22092102dca112ab0a4ab70390d779b2cce0b9e39ca0aa6a4a51d521addd2eec8d60eb2759e8d1d11a17435d3bc7f0ed878de3fc9fd06176eb2ee071c1b7d8d5bda296cf9e9903d57544cfbc36a3c645f311f2db24b11dbbaf26f17a12add7f7fdbf78c7df967eb5f996492be4eb26f93168322b99efc8b9fc61d7ea3d362f0337322b9bffb5d66516bd4207a4c0548971705ff979e7ac0c74bf6c97d1519ba94fad018e24b67b79b4180bd40cbdabe1e9b3ae4c61222b5ea812c82f625a4c4147011074f9765865d66f0897c7d04a18c7acd9664c83ba56919be66de7df9d12bd843f508898f073220eaa59934fb57541e22863cca97e5b879c68f120bb802faf7b739af9fc0f213610fee4dd6c0422ebc6807b4cdf8b2a70377b209e2cea56fdf6e4e23fd82904d2298209329b90078098fd111b1fb74e321d9568fc261e86188957727eb8cb7845e62fdcf2404c6e907fab9cb5b319998fc1ee552af50bb1bd0b34478322ac17139db7bea093cf7b01c51efe078ff54c4b392533ce1d23058140813249b02b52c3e0b2fceed3d8bf92131b02e0dd8307658a6815b05817502be80af1332c565d22b8eb16a8c8ea487d1e789d21e548d5cac3530d4e927450c073186ea7b9a6c5e478f081e124e6b65bf602d543c5a85d1114b7da5268a0c67972f728e33e8cbdb7cf0312469b17f869f8fd3a520a90e2b81de3c0e7e46dddb5799cc76199113f04fcb5ca4017a89002ecd64a558a273871ff006cec625196a55f60311d768e450f658405e6e5494ad860fdc056bfb6d9efc0136c7d8118aeaca96270f8a46a1e79185119e9748c19760cfbab4685784896ec201ddb29cc6f77b181873ec75f24e346c47e2da3a7d89277eed1e72d8df768e8be649bce7f5ddceded77e6d9610f648f9661fbbe0baa93643c2102ab271781a35273b4c6a9966229e3ba9be4b3f84b35469fb9779d0b611ec32ea351e705841433fec480bfe807f6e558349f9a426b14ef38f8758ba6b9f39eb15d7073a227bc622eb810271ee88692028b192abf1a541b5b9ba6f21136d86b7110904b017d2466d564e24467a56a8722f1cd8345fac4f1f07d93c6579164c5fdea8df8b951cd2c18258c58f0911260cfc1aef0fea77a96c83c367a19437ec5acb4d8cd20e1f6d36ce483f707cf17b085584732d8e89a19a6bb33f75990d40c2f1976fff2bbe20971d469a33c95eaa7f5a756a6ae5895d1fe8ae04cb836f82dce66c9f2d05b5f6763ab17f9a4ce76592ea911326020eaf2f1ff2bd6fff5d9ff08979e27942df9f8938719452334ead6bbd9ce236cfeb08044b4013439150dc5986db57d42b93a8b7194c5285b16966547515068fba33bd2d39193fcc1ad25f4ece729ebe67b9148bd551c7a0de63b26e86289c23683d9b9500291cfb931038973df0e2190498269ccb4b2f71efa40ca9f9d66ee6db9683a0f9d4f2ac2851e08a8073aa24e084ed14082f2e387caa9d26db79053dd31424f0d3c0b43b4e694e8a394690b01125e55e831dcfcf38b3aa7a9eb419585f0e4091908fc7b6000cd52038fe929ebf5cc5b018b2810acd32d9c6ec92ab504ee71ad49897cf9a5286b34fc7fcf8e18ae5801bd60dc76f11796294a44f50f0235e0644d48f562d204cc36b0ed60eb222033566f7217d982a9584af7ac01bca1ac7e13e1071432bc2f2f961d405216b9591fce5c6e8070aceb97940460ccd961887eb8b8143b9dbbd204674d74df47d1e4629f6da211f1d8ae9a9cdbc549394f7612f3437c61c70d71225c289389a043d9d54d6e16ab2731e214bd255792076dc59022224352bd593cbe6f6df1856c7282ec66fe8f5c3831b86b763c47a27c0e62f786cab50d989d7a695b30dd2a337a999471071d642a2b3a789674bdbf2825552ebaf08f23ee33ccf7abb83a374212a956b96efc4c6321ca87ef43d0132e24b0e7bcd894517fa111982b87fbc2e307d11a89d2d5e16c8ab8893bf5ab70cd369344213ef4dbf5ba70dd42de221216f0f9084c48d13ffd32e9b5518ff72039d3bd3ada12a269716a57b688636eacf37883b5f0e74bab50c7a6d6253e74e7016e4f2a1d583cba39a6a41865fbcd539c35c0f0e163d00edf6c312c33105ea73f67bcd6539f997910e6b2ada33379ecdd66496ea57a5cc184fcf848de36f7b7f69ef45a1a016f4be43d3fa8ad2bdad5d5c1a85001b6e76cadd4efa205c1bd5a8010ad54c0f7928c1de556ad575e663388f7a0abb4dce6301b7fd8a052beb9a061b65452e47398ed1e5b2fc4eb7583df4f72a8bffa6ea38742e9749697481e28a4fc7be36557be260fe93fd32ff77d7361367281273ecb77d84a4be305e2174e9f15492128c6de1995531ea12ccf5fb671e095e82d521bf1cf80f418872e20b79706d4022254444d9ffdff3bb8e178200c2ea0183b653ab3164497f424518e24b1e2e930fe796444517933dbd3a40e02ffafc751e87e34b3ac503cce62aaf0dd55d215243d295833e0e43868dd217049ca609b1346c6b773fcb93ffca44f35368d89e55d50ad8f8f7db42c8f651e880d714fbdc2b68882e0f7d0d4d3ad0df8b4365d3f600916f1852880d956ef7aa1052b64724dc263088364cb80f3891da7a083fe0993ee303dae3e8ca134c9e64859e43b8ca2c1fb1ec01e0170ede943088a4d1402cae13ec161e07ea7e40488cd8b9b27e8e1e2f5b3f658c854b6107799fa81c42df84cdd4c641453b4a714e20d4bc938a9ba28452a0845d0cbb415ea8f87dcc70e50d9bc760a249b78a0d0c26562ca405c8e711fa1a86e6a84ef7f89f4a745bc165cf1cfb6ba5527dcc27b2013722b83fd7202d45bd1cf09026ed17f15db3993f3e88fdc59296d1c2e7fac84bd06cd4edb616d0f685665ca9a89f7d441a91d879b7525e92f28dd546fc86013fc29ae113fd5449b58df57238b51cdda058a7bc07adb1bf243bb869ce83acf7b6094e9f64d20c4da24d1f159ad0c674e21e16ce73ac6ec5cdc196a16792327030a8406cd6daf0d4bf1c2aa37d4806bc09d3ef8d895a6a3304703fd5daa1e18c318dd4bf5650480c9ab6e35cf20aca6c1e24e9b487ca9d97581d1dcae76ab1476ab22f2216fe2d5330e67e3edf40665cd836e021e8b8e2ec13348647495b72a98cadef9848609bf7d44b8f3993210e9efea0a5e4524c2e52f45b191ae3db4e7fdfc56ddb73e3e9bbc478f04a10be2a5936fb38775a42539e0eef024eeaa2f3e303586bcce7c213aabce29aa6235b5aecc3c540ca251feb6b15d08536505536b70f54ed8bd9fd6da5f9c466d7548941aee37ae0c98413e4ea9e0a9588afe5ff5dbdd05394311625a4fa6ef0cc36a4be4bf58b667fe1a8b4a1d0d05b629c18a2dd897eb4107fa818ca4cfd8d3aa121e735c3a980eeb2abd5c9cdb6f77d6c63a9ef4ce0e8eb69b4c2f26103fd3d231572c10784f3b8a566f1b724fd3ee0f250f2647c60eb20d963e0ce2f8e69d5ca2ffc9bb162f21fbb45e1212e14cf48522beecad2767a98ec04c8a4c815249d5627efb332218f3fc4f674780de24369a7d3698b77a8531472706b899269d79e5644d2b80f77e1a0bb08a1ce7205ce3b94820c5b2de39eb3130cc6b63e933c1f0a3c019cdb7114dca1e55deb1b5f3c423020577132f07956931c21d585acc72d85585dc60173a0aef1990a6911af26e4a38c4b52e616231090b4413a97aafb35bf8d0de0bb716982d2ba13fb479130c3a4317cfa2c626054360879bb27372cf51b3b95e6f81b572dc7d1f6abbcdad2c437273316f86e9a94dc16f59b57c329203279315a47e4acf0891b63f72e197dbbc0c00d28ca5614589ab1b493f44402c9c1b8d5d472833f5edd3839ae9fc63fc167fc902d3401dfc8eabc2aa04d58b83c9058d7f89eb1f403f35647dd1507fb0f3f37b4214106e0d5900d031f2ee14f35746", 0xbc6}], 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x15, &(0x7f0000000080)=@raw=[@generic={0x0, 0x5, 0x4, 0x45, 0xfffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @exit, @jmp={0x5, 0x1, 0xa, 0x4, 0x6, 0x0, 0xfffffffffffffff0}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x9, '\x00', r4, @fallback=0x32, r5, 0x8, &(0x7f00000003c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x1, 0x615, 0x3}, 0x10, 0xffffffffffffffff, r6, 0x5, 0x0, &(0x7f0000000440)=[{0x1, 0x2, 0x6, 0x2}, {0x0, 0x3, 0xf, 0xf}, {0x0, 0x4, 0x3, 0xb}, {0x4, 0x2, 0xb, 0xb}, {0x2, 0x2, 0xc, 0x4}], 0x10, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020703400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xd, 0xffe0}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth0_virt_wifi\x00'}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044078}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00'}, 0x10) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) 197.811596ms ago: executing program 2 (id=4214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) mlockall(0x7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@private]}]}}}], 0x18}, 0x8000) 154.876527ms ago: executing program 1 (id=4215): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @tracing=0x18}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000200)={0xa000000a}) finit_module(r1, 0x0, 0x3) preadv2(r1, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/185, 0xb9}], 0x1, 0xffffffff, 0x9f8, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 115.558717ms ago: executing program 1 (id=4216): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) pipe2(&(0x7f0000000400), 0x880) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000000)=0x8, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000070000002800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) 0s ago: executing program 0 (id=4217): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x7007}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) close(r3) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) kernel console output (not intermixed with test programs): G_IO [ 263.641245][T13590] program syz.4.3433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.748056][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 263.748072][ T29] audit: type=1400 audit(1758150490.423:9110): avc: denied { write } for pid=13593 comm="syz.4.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.852358][T13600] netlink: 'syz.0.3437': attribute type 7 has an invalid length. [ 263.931005][T13611] program syz.0.3441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.952563][T13609] smc: net device bond0 applied user defined pnetid SYZ0 [ 263.996681][T13615] netlink: 'syz.4.3439': attribute type 13 has an invalid length. [ 264.005677][T13614] loop0: detected capacity change from 0 to 1024 [ 264.014829][T13614] EXT4-fs: inline encryption not supported [ 264.020949][T13614] EXT4-fs: Ignoring removed bh option [ 264.032479][T13614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.115080][ T29] audit: type=1326 audit(1758150490.793:9111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 264.138819][ T29] audit: type=1326 audit(1758150490.793:9112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 264.162485][ T29] audit: type=1326 audit(1758150490.793:9113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 264.186099][ T29] audit: type=1326 audit(1758150490.793:9114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 264.209940][ T29] audit: type=1326 audit(1758150490.793:9115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 264.234301][ T29] audit: type=1326 audit(1758150490.793:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 264.258001][ T29] audit: type=1326 audit(1758150490.793:9117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 264.281737][ T29] audit: type=1326 audit(1758150490.923:9118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 264.296242][T12351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.305426][ T29] audit: type=1326 audit(1758150490.943:9119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.5.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 264.416327][T13631] loop0: detected capacity change from 0 to 8192 [ 264.435693][T13632] __nla_validate_parse: 18 callbacks suppressed [ 264.435711][T13632] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3446'. [ 264.453152][T13632] hsr_slave_0: left promiscuous mode [ 264.459296][T13632] hsr_slave_1: left promiscuous mode [ 264.543126][T13636] loop1: detected capacity change from 0 to 256 [ 264.555753][T13631] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3447'. [ 264.566378][T13636] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 264.591654][T13636] syz.1.3448: attempt to access beyond end of device [ 264.591654][T13636] loop1: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 264.607722][T13636] syz.1.3448: attempt to access beyond end of device [ 264.607722][T13636] loop1: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 264.621611][T13636] syz.1.3448: attempt to access beyond end of device [ 264.621611][T13636] loop1: rw=2049, sector=384, nr_sectors = 32 limit=256 [ 264.635770][T13636] syz.1.3448: attempt to access beyond end of device [ 264.635770][T13636] loop1: rw=2049, sector=448, nr_sectors = 40 limit=256 [ 264.739628][T13645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3450'. [ 264.850031][T13652] netlink: 'syz.4.3452': attribute type 7 has an invalid length. [ 264.857927][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 265.069476][T13663] loop4: detected capacity change from 0 to 8192 [ 265.201254][T13663] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3457'. [ 265.236956][T13673] loop4: detected capacity change from 0 to 1024 [ 265.244259][T13673] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 265.255253][T13673] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 265.266004][T13673] JBD2: no valid journal superblock found [ 265.271863][T13673] EXT4-fs (loop4): Could not load journal inode [ 265.307251][T13675] loop4: detected capacity change from 0 to 1024 [ 265.314184][T13675] EXT4-fs: inline encryption not supported [ 265.321685][T13675] EXT4-fs: Ignoring removed bh option [ 265.338920][T13675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.435933][T13679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3461'. [ 265.466305][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.696047][T13685] netlink: 'syz.1.3463': attribute type 7 has an invalid length. [ 265.703961][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3463'. [ 265.795509][T13691] FAULT_INJECTION: forcing a failure. [ 265.795509][T13691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.808795][T13691] CPU: 1 UID: 0 PID: 13691 Comm: syz.1.3466 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 265.808872][T13691] Tainted: [W]=WARN [ 265.808879][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 265.808940][T13691] Call Trace: [ 265.808947][T13691] [ 265.808957][T13691] __dump_stack+0x1d/0x30 [ 265.809022][T13691] dump_stack_lvl+0xe8/0x140 [ 265.809046][T13691] dump_stack+0x15/0x1b [ 265.809138][T13691] should_fail_ex+0x265/0x280 [ 265.809163][T13691] should_fail+0xb/0x20 [ 265.809188][T13691] should_fail_usercopy+0x1a/0x20 [ 265.809275][T13691] _copy_to_user+0x20/0xa0 [ 265.809399][T13691] simple_read_from_buffer+0xb5/0x130 [ 265.809425][T13691] proc_fail_nth_read+0x10e/0x150 [ 265.809462][T13691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.809498][T13691] vfs_read+0x1a8/0x770 [ 265.809542][T13691] ? __rcu_read_unlock+0x4f/0x70 [ 265.809589][T13691] ? __fget_files+0x184/0x1c0 [ 265.809625][T13691] ksys_read+0xda/0x1a0 [ 265.809657][T13691] __x64_sys_read+0x40/0x50 [ 265.809687][T13691] x64_sys_call+0x27bc/0x2ff0 [ 265.809743][T13691] do_syscall_64+0xd2/0x200 [ 265.809778][T13691] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 265.809804][T13691] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 265.809861][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.809884][T13691] RIP: 0033:0x7fc3130bd5bc [ 265.809899][T13691] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 265.809965][T13691] RSP: 002b:00007fc311b27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.810005][T13691] RAX: ffffffffffffffda RBX: 00007fc313305fa0 RCX: 00007fc3130bd5bc [ 265.810021][T13691] RDX: 000000000000000f RSI: 00007fc311b270a0 RDI: 0000000000000008 [ 265.810037][T13691] RBP: 00007fc311b27090 R08: 0000000000000000 R09: 000000000000001c [ 265.810108][T13691] R10: 0000000024040014 R11: 0000000000000246 R12: 0000000000000001 [ 265.810123][T13691] R13: 00007fc313306038 R14: 00007fc313305fa0 R15: 00007ffc03f41bc8 [ 265.810146][T13691] [ 266.190836][T13702] can0: slcan on ttyS3. [ 266.198844][T13702] loop5: detected capacity change from 0 to 512 [ 266.222382][T13707] loop1: detected capacity change from 0 to 1024 [ 266.230341][T13707] EXT4-fs: inline encryption not supported [ 266.236298][T13707] EXT4-fs: Ignoring removed bh option [ 266.242004][T13704] loop0: detected capacity change from 0 to 1024 [ 266.250674][T13704] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 266.261612][T13704] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 266.275205][T13702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 266.288497][T13702] ext4 filesystem being mounted at /463/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.291375][T13707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.301616][T13704] JBD2: no valid journal superblock found [ 266.317288][T13704] EXT4-fs (loop0): Could not load journal inode [ 266.430628][T13704] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 266.439659][T13701] can0 (unregistered): slcan off ttyS3. [ 266.452123][T12694] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.461982][ T7373] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 266.494216][T13717] netlink: 'syz.5.3474': attribute type 7 has an invalid length. [ 266.502104][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3474'. [ 266.512082][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3473'. [ 266.522230][T13718] loop0: detected capacity change from 0 to 1024 [ 266.528900][T13718] EXT4-fs: Ignoring removed orlov option [ 266.574858][T13718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.939307][T13739] loop4: detected capacity change from 0 to 2048 [ 266.978974][T12351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.001783][T13739] Alternate GPT is invalid, using primary GPT. [ 267.008241][T13739] loop4: p2 p3 p7 [ 267.119244][T13746] loop2: detected capacity change from 0 to 1024 [ 267.133980][T13748] can0: slcan on ttyS3. [ 267.141714][T13748] loop0: detected capacity change from 0 to 512 [ 267.151506][T13746] EXT4-fs: inline encryption not supported [ 267.157574][T13746] EXT4-fs: Ignoring removed bh option [ 267.166080][T13748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 267.184165][T13748] ext4 filesystem being mounted at /108/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.197346][T13746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.248555][T12196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.259653][T13747] can0 (unregistered): slcan off ttyS3. [ 267.284790][T12351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 267.298840][T13754] netlink: 'syz.2.3486': attribute type 7 has an invalid length. [ 267.306753][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3486'. [ 267.381248][T13760] loop0: detected capacity change from 0 to 1024 [ 267.389960][T13760] EXT4-fs: Ignoring removed orlov option [ 267.407472][T13760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.713548][T12351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.774539][T13770] loop1: detected capacity change from 0 to 1024 [ 267.791036][T13770] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 267.802070][T13770] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 267.877242][T13770] JBD2: no valid journal superblock found [ 267.883118][T13770] EXT4-fs (loop1): Could not load journal inode [ 267.896046][T13785] loop4: detected capacity change from 0 to 512 [ 267.896998][T13784] smc: net device bond0 erased user defined pnetid SYZ0 [ 267.905968][T13770] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 267.911057][T13787] loop0: detected capacity change from 0 to 128 [ 267.929158][T13787] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.942507][T13787] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.952881][T13785] EXT4-fs (loop4): too many log groups per flexible block group [ 267.960736][T13785] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 267.968519][T13785] EXT4-fs (loop4): mount failed [ 268.009042][T13797] loop4: detected capacity change from 0 to 128 [ 268.015581][ T31] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.026861][T13797] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.059652][T13797] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.124610][ T31] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.167723][T13810] loop1: detected capacity change from 0 to 764 [ 268.207015][T13810] isofs: isofs_export_get_parent(): child directory not normalized! [ 268.259753][T13818] loop1: detected capacity change from 0 to 1024 [ 268.266555][T13818] EXT4-fs: inline encryption not supported [ 268.272515][T13818] EXT4-fs: Ignoring removed bh option [ 268.279915][T13820] loop0: detected capacity change from 0 to 1024 [ 268.286499][T13820] EXT4-fs: Ignoring removed orlov option [ 268.295751][T13818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.316144][T13820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.419948][T12694] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.773662][T13833] lo speed is unknown, defaulting to 1000 [ 269.365405][T13843] loop5: detected capacity change from 0 to 128 [ 269.428030][T13843] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.443732][T13845] __nla_validate_parse: 7 callbacks suppressed [ 269.443749][T13845] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3519'. [ 269.443988][T12351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.479158][T13843] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.497894][T13849] smc: net device bond0 applied user defined pnetid SYZ0 [ 269.515355][T13853] loop1: detected capacity change from 0 to 512 [ 269.515824][T13849] smc: net device bond0 erased user defined pnetid SYZ0 [ 269.530713][T13843] netlink: 'syz.5.3518': attribute type 7 has an invalid length. [ 269.538522][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3518'. [ 269.540744][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 269.540773][ T29] audit: type=1326 audit(1758150496.223:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bdeeba9 code=0x7ffc0000 [ 269.589151][T13853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.602101][ T31] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.628502][ T29] audit: type=1326 audit(1758150496.243:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bdeeba9 code=0x7ffc0000 [ 269.652162][ T29] audit: type=1326 audit(1758150496.243:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20bdeeba9 code=0x7ffc0000 [ 269.654439][T13853] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.675983][ T29] audit: type=1326 audit(1758150496.283:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bdeeba9 code=0x7ffc0000 [ 269.709719][ T29] audit: type=1326 audit(1758150496.283:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bdeeba9 code=0x7ffc0000 [ 269.733400][ T29] audit: type=1326 audit(1758150496.283:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fd20bdeeba9 code=0x7ffc0000 [ 269.738558][T13864] netlink: 'syz.2.3524': attribute type 13 has an invalid length. [ 269.757175][ T29] audit: type=1326 audit(1758150496.283:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bdeeba9 code=0x7ffc0000 [ 269.788472][ T29] audit: type=1326 audit(1758150496.283:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bdeeba9 code=0x7ffc0000 [ 269.812317][ T29] audit: type=1326 audit(1758150496.283:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20bdeeba9 code=0x7ffc0000 [ 269.836041][ T29] audit: type=1326 audit(1758150496.283:9409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bdeeba9 code=0x7ffc0000 [ 269.902984][T13868] loop0: detected capacity change from 0 to 512 [ 269.913949][T13874] loop4: detected capacity change from 0 to 512 [ 269.914064][T13864] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.921156][T13874] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 269.927606][T13864] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.945753][T13868] EXT4-fs (loop0): failed to initialize system zone (-117) [ 269.953524][T13868] EXT4-fs (loop0): mount failed [ 269.961115][T12694] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.008619][T13864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.019161][T13864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.040118][T13882] loop1: detected capacity change from 0 to 512 [ 270.052864][T13882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 270.066002][T13882] ext4 filesystem being mounted at /71/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.085333][T13878] can0: slcan on ttyS3. [ 270.085431][ T51] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.104226][ T51] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.112710][ T51] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.124074][ T51] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.124390][T13888] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3533'. [ 270.142390][T13881] FAULT_INJECTION: forcing a failure. [ 270.142390][T13881] name fail_futex, interval 1, probability 0, space 0, times 1 [ 270.155272][T13881] CPU: 1 UID: 0 PID: 13881 Comm: syz.0.3527 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 270.155368][T13881] Tainted: [W]=WARN [ 270.155378][T13881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.155394][T13881] Call Trace: [ 270.155403][T13881] [ 270.155413][T13881] __dump_stack+0x1d/0x30 [ 270.155438][T13881] dump_stack_lvl+0xe8/0x140 [ 270.155458][T13881] dump_stack+0x15/0x1b [ 270.155475][T13881] should_fail_ex+0x265/0x280 [ 270.155593][T13881] should_fail+0xb/0x20 [ 270.155683][T13881] get_futex_key+0x130/0xbd0 [ 270.155711][T13881] ? mutex_unlock+0x1b/0x30 [ 270.155792][T13881] futex_wake+0x7d/0x360 [ 270.155925][T13881] ? __rcu_read_unlock+0x4f/0x70 [ 270.155958][T13881] do_futex+0x323/0x380 [ 270.155993][T13881] mm_release+0xb2/0x1e0 [ 270.156028][T13881] exit_mm_release+0x25/0x30 [ 270.156056][T13881] exit_mm+0x38/0x190 [ 270.156092][T13881] do_exit+0x417/0x15c0 [ 270.156130][T13881] do_group_exit+0xff/0x140 [ 270.156205][T13881] ? get_signal+0xe51/0xf70 [ 270.156226][T13881] get_signal+0xe59/0xf70 [ 270.156251][T13881] arch_do_signal_or_restart+0x96/0x480 [ 270.156319][T13881] exit_to_user_mode_loop+0x7a/0x100 [ 270.156346][T13881] do_syscall_64+0x1d6/0x200 [ 270.156380][T13881] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 270.156472][T13881] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 270.156511][T13881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.156537][T13881] RIP: 0033:0x7fd20bdeeba9 [ 270.156553][T13881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.156601][T13881] RSP: 002b:00007fd20a82e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 270.156624][T13881] RAX: fffffffffffffe00 RBX: 00007fd20c036090 RCX: 00007fd20bdeeba9 [ 270.156640][T13881] RDX: 0000000000000001 RSI: 0000200000001340 RDI: 0000000000000007 [ 270.156652][T13881] RBP: 00007fd20a82e090 R08: 0000000000000000 R09: 0000000000000000 [ 270.156664][T13881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.156704][T13881] R13: 00007fd20c036128 R14: 00007fd20c036090 R15: 00007ffe469d0c68 [ 270.156727][T13881] [ 270.377448][T13877] can0 (unregistered): slcan off ttyS3. [ 270.414109][T12694] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 270.447295][T13896] loop0: detected capacity change from 0 to 128 [ 270.470414][T13896] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.485521][T13896] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.500719][T13896] netlink: 'syz.0.3536': attribute type 7 has an invalid length. [ 270.508506][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3536'. [ 270.534934][ T31] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.535318][T13907] loop2: detected capacity change from 0 to 1024 [ 270.554381][T13907] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 270.565366][T13907] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 270.585937][T13907] JBD2: no valid journal superblock found [ 270.592566][T13907] EXT4-fs (loop2): Could not load journal inode [ 270.605922][T13907] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 270.636450][T13911] loop0: detected capacity change from 0 to 8192 [ 270.700775][T13923] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3547'. [ 270.711599][T13924] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3544'. [ 270.730499][T13911] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3542'. [ 270.740261][T13924] hsr_slave_0: left promiscuous mode [ 270.751351][T13924] hsr_slave_1: left promiscuous mode [ 270.798014][T13928] can0: slcan on ttyS3. [ 270.799071][T13931] loop2: detected capacity change from 0 to 512 [ 270.811542][T13928] loop4: detected capacity change from 0 to 512 [ 270.823209][T13928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 270.836389][T13928] ext4 filesystem being mounted at /92/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.850956][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3551'. [ 270.872146][T13940] loop0: detected capacity change from 0 to 128 [ 270.879081][T13940] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.891196][T13940] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.900600][T13927] can0 (unregistered): slcan off ttyS3. [ 270.906918][T13940] netlink: 'syz.0.3552': attribute type 7 has an invalid length. [ 270.914816][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3552'. [ 270.935576][T13931] EXT4-fs (loop2): too many log groups per flexible block group [ 270.943423][T13931] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 270.960286][T13931] EXT4-fs (loop2): mount failed [ 270.966506][ T272] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.997832][T13946] netlink: 'syz.2.3555': attribute type 7 has an invalid length. [ 271.005730][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 271.072168][T13953] loop2: detected capacity change from 0 to 1024 [ 271.079423][T13953] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 271.090352][T13953] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 271.103919][T13953] JBD2: no valid journal superblock found [ 271.109723][T13953] EXT4-fs (loop2): Could not load journal inode [ 271.122615][T13953] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 271.132811][T13948] loop1: detected capacity change from 0 to 1024 [ 271.141516][T13948] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 271.152592][T13948] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 271.163296][T13948] JBD2: no valid journal superblock found [ 271.169877][T13948] EXT4-fs (loop1): Could not load journal inode [ 271.180926][T13948] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 271.211646][T13962] FAULT_INJECTION: forcing a failure. [ 271.211646][T13962] name failslab, interval 1, probability 0, space 0, times 0 [ 271.224426][T13962] CPU: 1 UID: 0 PID: 13962 Comm: syz.2.3559 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 271.224466][T13962] Tainted: [W]=WARN [ 271.224473][T13962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.224487][T13962] Call Trace: [ 271.224492][T13962] [ 271.224544][T13962] __dump_stack+0x1d/0x30 [ 271.224572][T13962] dump_stack_lvl+0xe8/0x140 [ 271.224598][T13962] dump_stack+0x15/0x1b [ 271.224615][T13962] should_fail_ex+0x265/0x280 [ 271.224656][T13962] should_failslab+0x8c/0xb0 [ 271.224685][T13962] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 271.224775][T13962] ? shmem_alloc_inode+0x34/0x50 [ 271.224813][T13962] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 271.224836][T13962] shmem_alloc_inode+0x34/0x50 [ 271.224925][T13962] alloc_inode+0x40/0x170 [ 271.224950][T13962] new_inode+0x1d/0xe0 [ 271.224975][T13962] shmem_get_inode+0x244/0x750 [ 271.225000][T13962] ? __se_sys_memfd_create+0x1cc/0x590 [ 271.225039][T13962] __shmem_file_setup+0x113/0x210 [ 271.225130][T13962] shmem_file_setup+0x3b/0x50 [ 271.225172][T13962] __se_sys_memfd_create+0x2c3/0x590 [ 271.225204][T13962] __x64_sys_memfd_create+0x31/0x40 [ 271.225233][T13962] x64_sys_call+0x2abe/0x2ff0 [ 271.225273][T13962] do_syscall_64+0xd2/0x200 [ 271.225309][T13962] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 271.225334][T13962] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 271.225397][T13962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.225488][T13962] RIP: 0033:0x7f737f75eba9 [ 271.225508][T13962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.225533][T13962] RSP: 002b:00007f737e1c6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 271.225556][T13962] RAX: ffffffffffffffda RBX: 0000000000000550 RCX: 00007f737f75eba9 [ 271.225570][T13962] RDX: 00007f737e1c6ef0 RSI: 0000000000000000 RDI: 00007f737f7e27e8 [ 271.225582][T13962] RBP: 0000200000001780 R08: 00007f737e1c6bb7 R09: 00007f737e1c6e40 [ 271.225595][T13962] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 271.225608][T13962] R13: 00007f737e1c6ef0 R14: 00007f737e1c6eb0 R15: 00002000000003c0 [ 271.225641][T13962] [ 271.446448][T13964] loop1: detected capacity change from 0 to 256 [ 271.503240][T13966] loop0: detected capacity change from 0 to 8192 [ 271.533305][T13964] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 271.553624][T13964] syz.1.3561: attempt to access beyond end of device [ 271.553624][T13964] loop1: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 271.568719][T13964] syz.1.3561: attempt to access beyond end of device [ 271.568719][T13964] loop1: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 271.599875][T13964] syz.1.3561: attempt to access beyond end of device [ 271.599875][T13964] loop1: rw=2049, sector=384, nr_sectors = 32 limit=256 [ 271.636743][T13964] syz.1.3561: attempt to access beyond end of device [ 271.636743][T13964] loop1: rw=2049, sector=448, nr_sectors = 40 limit=256 [ 271.687134][T13979] loop0: detected capacity change from 0 to 8192 [ 271.893162][T13988] loop0: detected capacity change from 0 to 512 [ 271.940382][T13988] EXT4-fs (loop0): too many log groups per flexible block group [ 271.948135][T13988] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 271.956472][T13988] EXT4-fs (loop0): mount failed [ 272.017560][T13994] loop0: detected capacity change from 0 to 128 [ 272.024616][T13994] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.037796][T13994] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.071513][T13994] netlink: 'syz.0.3568': attribute type 7 has an invalid length. [ 272.082718][T13996] program syz.1.3569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.101863][ T578] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.147125][T14001] smc: net device bond0 applied user defined pnetid SYZ0 [ 272.155209][T14001] smc: net device bond0 erased user defined pnetid SYZ0 [ 272.211983][T14002] loop0: detected capacity change from 0 to 1024 [ 272.228411][T14002] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 272.240119][T14002] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 272.251681][T14002] JBD2: no valid journal superblock found [ 272.257542][T14002] EXT4-fs (loop0): Could not load journal inode [ 272.270351][T13998] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 272.437190][T14012] loop0: detected capacity change from 0 to 1024 [ 272.446137][T14012] EXT4-fs: inline encryption not supported [ 272.454271][T14012] EXT4-fs: Ignoring removed bh option [ 272.530364][T14014] loop2: detected capacity change from 0 to 8192 [ 272.566133][T14022] loop1: detected capacity change from 0 to 128 [ 272.573581][T14022] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.588080][T14022] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.613738][T14028] netlink: 'syz.4.3581': attribute type 7 has an invalid length. [ 272.639011][T14030] smc: net device bond0 applied user defined pnetid SYZ0 [ 272.646393][T14022] netlink: 'syz.1.3580': attribute type 7 has an invalid length. [ 272.673608][T14030] smc: net device bond0 erased user defined pnetid SYZ0 [ 272.690349][T14032] loop4: detected capacity change from 0 to 1024 [ 272.696945][ T51] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.707244][T14032] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 272.718270][T14032] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 272.732379][T14032] JBD2: no valid journal superblock found [ 272.738162][T14032] EXT4-fs (loop4): Could not load journal inode [ 272.759483][T14032] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 272.771335][T14042] loop2: detected capacity change from 0 to 256 [ 272.783379][T14042] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 272.810239][T14042] syz.2.3586: attempt to access beyond end of device [ 272.810239][T14042] loop2: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 272.825139][T14042] syz.2.3586: attempt to access beyond end of device [ 272.825139][T14042] loop2: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 272.839040][T14042] syz.2.3586: attempt to access beyond end of device [ 272.839040][T14042] loop2: rw=2049, sector=384, nr_sectors = 32 limit=256 [ 272.855551][T14042] syz.2.3586: attempt to access beyond end of device [ 272.855551][T14042] loop2: rw=2049, sector=448, nr_sectors = 40 limit=256 [ 273.532252][T14069] netlink: 'syz.5.3593': attribute type 7 has an invalid length. [ 273.638628][T14074] loop0: detected capacity change from 0 to 2048 [ 273.701757][T14074] Alternate GPT is invalid, using primary GPT. [ 273.708173][T14074] loop0: p2 p3 p7 [ 273.730624][T14076] loop2: detected capacity change from 0 to 8192 [ 273.754952][T14080] loop1: detected capacity change from 0 to 512 [ 273.796805][T14080] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.976748][T14090] loop2: detected capacity change from 0 to 1024 [ 273.985887][T14090] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 273.997007][T14090] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 274.011455][T14090] JBD2: no valid journal superblock found [ 274.017278][T14090] EXT4-fs (loop2): Could not load journal inode [ 274.033220][T14090] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 274.157409][T14098] loop2: detected capacity change from 0 to 8192 [ 274.320076][T14111] netlink: 'syz.2.3605': attribute type 7 has an invalid length. [ 274.328427][T14113] loop5: detected capacity change from 0 to 1024 [ 274.335401][T14113] EXT4-fs: inline encryption not supported [ 274.341796][T14113] EXT4-fs: Ignoring removed bh option [ 274.367831][T14117] loop2: detected capacity change from 0 to 2048 [ 274.476364][T14121] loop4: detected capacity change from 0 to 8192 [ 274.498463][T14117] Alternate GPT is invalid, using primary GPT. [ 274.505919][T14117] loop2: p2 p3 p7 [ 274.620097][T14125] __nla_validate_parse: 16 callbacks suppressed [ 274.620117][T14125] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3609'. [ 274.643178][T14124] loop0: detected capacity change from 0 to 1024 [ 274.650307][T14124] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 274.661231][T14124] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 274.676468][T14124] JBD2: no valid journal superblock found [ 274.682380][T14124] EXT4-fs (loop0): Could not load journal inode [ 274.703183][T14124] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 274.723211][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 274.723274][ T29] audit: type=1326 audit(1758150501.403:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf003feba9 code=0x7ffc0000 [ 274.755629][ T29] audit: type=1326 audit(1758150501.403:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf003feba9 code=0x7ffc0000 [ 274.780712][ T29] audit: type=1326 audit(1758150501.433:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf003fd510 code=0x7ffc0000 [ 274.804644][ T29] audit: type=1326 audit(1758150501.433:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf003fd510 code=0x7ffc0000 [ 274.828175][ T29] audit: type=1326 audit(1758150501.433:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf003feba9 code=0x7ffc0000 [ 274.851738][ T29] audit: type=1326 audit(1758150501.433:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf003feba9 code=0x7ffc0000 [ 274.875478][ T29] audit: type=1326 audit(1758150501.433:9471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fdf003feba9 code=0x7ffc0000 [ 274.899052][ T29] audit: type=1326 audit(1758150501.433:9472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf003feba9 code=0x7ffc0000 [ 274.922555][ T29] audit: type=1326 audit(1758150501.433:9473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.4.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf003feba9 code=0x7ffc0000 [ 274.992052][T14143] loop4: detected capacity change from 0 to 128 [ 274.999044][T14135] loop0: detected capacity change from 0 to 1024 [ 274.999440][T14143] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 275.007535][T14135] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 275.017654][T14143] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.028157][T14135] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 275.065021][T14140] loop1: detected capacity change from 0 to 2048 [ 275.074199][T14135] JBD2: no valid journal superblock found [ 275.079997][T14135] EXT4-fs (loop0): Could not load journal inode [ 275.101886][T14135] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 275.112786][ T31] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.133546][T14140] Alternate GPT is invalid, using primary GPT. [ 275.140701][T14140] loop1: p2 p3 p7 [ 275.180314][T14147] netlink: 'syz.0.3617': attribute type 7 has an invalid length. [ 275.188213][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3617'. [ 275.303048][T14152] loop2: detected capacity change from 0 to 128 [ 275.309974][T14152] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 275.322206][T14152] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.344843][T14152] netlink: 'syz.2.3618': attribute type 7 has an invalid length. [ 275.352727][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3618'. [ 275.379077][ T578] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.394040][T14157] loop5: detected capacity change from 0 to 256 [ 275.405479][T14157] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 275.407220][T14159] loop2: detected capacity change from 0 to 2048 [ 275.427169][T14157] syz.5.3621: attempt to access beyond end of device [ 275.427169][T14157] loop5: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 275.442068][T14157] syz.5.3621: attempt to access beyond end of device [ 275.442068][T14157] loop5: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 275.482582][T14159] Alternate GPT is invalid, using primary GPT. [ 275.489063][T14159] loop2: p2 p3 p7 [ 275.560338][T14163] netlink: 'syz.0.3622': attribute type 13 has an invalid length. [ 275.595778][T14163] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.603073][T14163] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.647120][T14163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.657415][T14163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.698408][ T51] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.707335][ T51] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.715998][ T51] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.732037][ T51] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.746681][T14166] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3623'. [ 275.877989][T14171] loop1: detected capacity change from 0 to 1024 [ 275.884997][T14171] EXT4-fs: Ignoring removed orlov option [ 276.048947][T14178] loop4: detected capacity change from 0 to 1024 [ 276.056252][T14178] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 276.067363][T14178] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 276.078202][T14178] JBD2: no valid journal superblock found [ 276.085587][T14178] EXT4-fs (loop4): Could not load journal inode [ 276.094846][T14178] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 276.245815][T14185] netlink: 'syz.5.3629': attribute type 7 has an invalid length. [ 276.253816][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3629'. [ 276.270981][T14187] can0: slcan on ttyS3. [ 276.282061][T14187] loop2: detected capacity change from 0 to 512 [ 276.302819][T14187] ext4 filesystem being mounted at /107/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.358201][T14192] lo speed is unknown, defaulting to 1000 [ 276.509610][T14186] can0 (unregistered): slcan off ttyS3. [ 276.517935][T14189] loop5: detected capacity change from 0 to 128 [ 276.542442][T14189] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 276.571129][T14189] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 276.760594][T14189] netlink: 'syz.5.3631': attribute type 7 has an invalid length. [ 276.768406][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3631'. [ 276.798645][ T37] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 276.823231][T14200] loop2: detected capacity change from 0 to 512 [ 276.841612][T14200] EXT4-fs (loop2): too many log groups per flexible block group [ 276.849522][T14200] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 276.878133][T14213] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3639'. [ 276.894672][T14214] loop0: detected capacity change from 0 to 256 [ 276.902962][T14200] EXT4-fs (loop2): mount failed [ 276.916981][T14216] loop5: detected capacity change from 0 to 2048 [ 276.927132][T14214] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 276.955083][T14214] bio_check_eod: 2 callbacks suppressed [ 276.955101][T14214] syz.0.3640: attempt to access beyond end of device [ 276.955101][T14214] loop0: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 276.978155][T14214] syz.0.3640: attempt to access beyond end of device [ 276.978155][T14214] loop0: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 276.993837][T14214] syz.0.3640: attempt to access beyond end of device [ 276.993837][T14214] loop0: rw=2049, sector=384, nr_sectors = 32 limit=256 [ 277.008484][T14214] syz.0.3640: attempt to access beyond end of device [ 277.008484][T14214] loop0: rw=2049, sector=448, nr_sectors = 40 limit=256 [ 277.030986][T14219] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3642'. [ 277.050135][T14216] Alternate GPT is invalid, using primary GPT. [ 277.056588][T14216] loop5: p2 p3 p7 [ 277.198865][T14230] loop1: detected capacity change from 0 to 1024 [ 277.205733][T14230] EXT4-fs: Ignoring removed orlov option [ 277.282179][T14234] loop2: detected capacity change from 0 to 128 [ 277.289284][T14234] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 277.301558][T14234] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 277.316208][T14234] netlink: 'syz.2.3646': attribute type 7 has an invalid length. [ 277.324215][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3646'. [ 277.349192][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 277.369319][ T29] audit: type=1326 audit(1758150504.043:9474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14236 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737f75eba9 code=0x7ffc0000 [ 277.783013][T14248] loop5: detected capacity change from 0 to 2048 [ 277.813530][T14248] Alternate GPT is invalid, using primary GPT. [ 277.820065][T14248] loop5: p2 p3 p7 [ 277.853403][T14255] loop2: detected capacity change from 0 to 512 [ 277.871423][T14255] EXT4-fs (loop2): too many log groups per flexible block group [ 277.879133][T14255] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 277.886284][T14255] EXT4-fs (loop2): mount failed [ 277.905502][T14260] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 277.915980][T14260] loop4: detected capacity change from 0 to 512 [ 277.931198][T14260] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3654: Failed to acquire dquot type 1 [ 277.943266][T14260] EXT4-fs (loop4): 1 truncate cleaned up [ 277.949341][T14260] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.970365][T14260] EXT4-fs: Cannot change quota options when quota turned on [ 278.104527][T14272] loop1: detected capacity change from 0 to 1024 [ 278.114320][T14272] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 278.125543][T14272] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 278.136727][T14272] JBD2: no valid journal superblock found [ 278.142816][T14272] EXT4-fs (loop1): Could not load journal inode [ 278.152781][T14268] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 278.184766][T14276] loop1: detected capacity change from 0 to 128 [ 278.191844][T14276] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 278.205386][T14276] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 278.218216][T14276] netlink: 'syz.1.3658': attribute type 7 has an invalid length. [ 278.226078][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'. [ 278.319910][T14282] loop1: detected capacity change from 0 to 8192 [ 278.468859][T14289] loop1: detected capacity change from 0 to 2048 [ 278.523750][T14289] Alternate GPT is invalid, using primary GPT. [ 278.530799][T14289] loop1: p2 p3 p7 [ 278.710023][T14296] loop5: detected capacity change from 0 to 2048 [ 278.764659][T14296] Alternate GPT is invalid, using primary GPT. [ 278.771194][T14296] loop5: p2 p3 p7 [ 278.886042][T14300] loop2: detected capacity change from 0 to 1024 [ 278.892740][T14300] EXT4-fs: Ignoring removed orlov option [ 279.330800][T14314] netlink: 'syz.1.3671': attribute type 7 has an invalid length. [ 279.388069][T14320] smc: net device bond0 applied user defined pnetid SYZ0 [ 279.395144][T14316] loop4: detected capacity change from 0 to 8192 [ 279.403165][T14320] smc: net device bond0 erased user defined pnetid SYZ0 [ 279.474175][T14322] loop0: detected capacity change from 0 to 8192 [ 279.596698][T14329] loop0: detected capacity change from 0 to 1024 [ 279.615524][T14342] loop4: detected capacity change from 0 to 2048 [ 279.625290][T14329] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 279.636357][T14329] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 279.649628][T14329] JBD2: no valid journal superblock found [ 279.655467][T14329] EXT4-fs (loop0): Could not load journal inode [ 279.688725][T14342] Alternate GPT is invalid, using primary GPT. [ 279.694914][T14345] __nla_validate_parse: 6 callbacks suppressed [ 279.694933][T14345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3682'. [ 279.701497][T14342] loop4: p2 p3 p7 [ 279.714678][T14329] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 279.826945][T14357] netlink: 'syz.5.3686': attribute type 7 has an invalid length. [ 279.834771][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3686'. [ 279.864463][T14359] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3687'. [ 279.906526][T14363] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3689'. [ 279.919887][T14363] smc: net device bond0 applied user defined pnetid SYZ0 [ 279.927240][T14363] smc: net device bond0 erased user defined pnetid SYZ0 [ 279.957415][T14366] netlink: 'syz.2.3690': attribute type 13 has an invalid length. [ 280.225515][T14370] lo speed is unknown, defaulting to 1000 [ 280.669166][T14382] loop4: detected capacity change from 0 to 1024 [ 280.670972][T14381] loop1: detected capacity change from 0 to 1024 [ 280.677523][T14382] EXT4-fs: inline encryption not supported [ 280.682553][T14381] EXT4-fs: inline encryption not supported [ 280.691712][T14382] EXT4-fs: Ignoring removed bh option [ 280.694684][T14381] EXT4-fs: Ignoring removed bh option [ 280.768082][T14390] loop0: detected capacity change from 0 to 1024 [ 280.775314][T14394] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3698'. [ 280.777120][T14390] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 280.795780][T14390] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 280.806497][T14396] netlink: 'syz.5.3700': attribute type 7 has an invalid length. [ 280.814412][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3700'. [ 280.817758][T14390] JBD2: no valid journal superblock found [ 280.829067][T14390] EXT4-fs (loop0): Could not load journal inode [ 280.880934][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 280.880949][ T29] audit: type=1400 audit(1758150507.563:9488): avc: denied { write } for pid=14397 comm="syz.5.3702" name="tcp" dev="proc" ino=4026533351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 280.924627][T14384] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 280.953341][ T29] audit: type=1326 audit(1758150507.633:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14401 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 280.990137][ T29] audit: type=1326 audit(1758150507.673:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14401 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 281.018676][ T29] audit: type=1326 audit(1758150507.703:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14401 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 281.042693][ T29] audit: type=1326 audit(1758150507.703:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14401 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 281.066435][ T29] audit: type=1326 audit(1758150507.723:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14401 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 281.090851][ T29] audit: type=1326 audit(1758150507.723:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14401 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 281.114502][ T29] audit: type=1326 audit(1758150507.723:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14401 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 281.138069][ T29] audit: type=1326 audit(1758150507.723:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14401 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 281.161615][ T29] audit: type=1326 audit(1758150507.723:9497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14401 comm="syz.1.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 281.188495][T14409] netlink: 'syz.2.3704': attribute type 13 has an invalid length. [ 281.228249][T14414] can0: slcan on ttyS3. [ 281.236619][T14419] loop4: detected capacity change from 0 to 2048 [ 281.247799][T14414] loop5: detected capacity change from 0 to 512 [ 281.262296][T14414] ext4 filesystem being mounted at /506/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.263293][T14419] Alternate GPT is invalid, using primary GPT. [ 281.279285][T14419] loop4: p2 p3 p7 [ 281.319565][T14413] can0 (unregistered): slcan off ttyS3. [ 281.342846][T14426] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3710'. [ 281.368157][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3711'. [ 281.526328][T14439] loop5: detected capacity change from 0 to 512 [ 281.540622][T14439] EXT4-fs (loop5): too many log groups per flexible block group [ 281.548369][T14439] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 281.556995][T14439] EXT4-fs (loop5): mount failed [ 281.595958][T14444] netlink: 'syz.5.3717': attribute type 7 has an invalid length. [ 281.603770][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3717'. [ 281.703208][T14448] lo speed is unknown, defaulting to 1000 [ 282.009197][T14453] netlink: 'syz.0.3720': attribute type 7 has an invalid length. [ 282.017176][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3720'. [ 282.115475][T14457] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 282.131905][T14457] loop5: detected capacity change from 0 to 512 [ 282.175087][T14457] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.3723: Failed to acquire dquot type 1 [ 282.199218][T14457] EXT4-fs (loop5): 1 truncate cleaned up [ 282.205701][T14457] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.225294][T14463] loop0: detected capacity change from 0 to 1024 [ 282.235323][T14463] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 282.238861][T14472] smc: net device bond0 applied user defined pnetid SYZ0 [ 282.246367][T14463] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 282.257329][T14472] smc: net device bond0 erased user defined pnetid SYZ0 [ 282.273898][T14463] JBD2: no valid journal superblock found [ 282.279794][T14463] EXT4-fs (loop0): Could not load journal inode [ 282.283458][T14475] netlink: 'syz.5.3728': attribute type 7 has an invalid length. [ 282.315182][T14463] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 282.354821][T14482] loop0: detected capacity change from 0 to 2048 [ 282.367215][T14480] loop5: detected capacity change from 0 to 1024 [ 282.375875][T14480] EXT4-fs: inline encryption not supported [ 282.382544][T14480] EXT4-fs: Ignoring removed bh option [ 282.402385][T14482] Alternate GPT is invalid, using primary GPT. [ 282.408919][T14482] loop0: p2 p3 p7 [ 282.698353][T14502] loop5: detected capacity change from 0 to 1024 [ 282.706057][T14502] EXT4-fs: Ignoring removed orlov option [ 283.080532][T14509] netlink: 'syz.4.3740': attribute type 7 has an invalid length. [ 283.111354][T14511] loop4: detected capacity change from 0 to 512 [ 283.120844][T14511] EXT4-fs (loop4): too many log groups per flexible block group [ 283.128669][T14511] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 283.135853][T14511] EXT4-fs (loop4): mount failed [ 283.233162][T14529] loop0: detected capacity change from 0 to 1024 [ 283.240371][T14529] EXT4-fs: inline encryption not supported [ 283.246693][T14529] EXT4-fs: Ignoring removed bh option [ 283.346315][T14535] netlink: 'syz.2.3751': attribute type 7 has an invalid length. [ 283.510781][T14545] lo speed is unknown, defaulting to 1000 [ 283.636652][T14544] hsr_slave_0: left promiscuous mode [ 283.672669][T14544] hsr_slave_1: left promiscuous mode [ 283.974341][T14554] loop0: detected capacity change from 0 to 2048 [ 284.028193][T14554] Alternate GPT is invalid, using primary GPT. [ 284.034916][T14554] loop0: p2 p3 p7 [ 284.081683][T14562] loop5: detected capacity change from 0 to 2048 [ 284.158337][T14568] netlink: 'syz.4.3762': attribute type 7 has an invalid length. [ 284.172430][T14562] Alternate GPT is invalid, using primary GPT. [ 284.178793][T14562] loop5: p2 p3 p7 [ 284.194430][T14570] netlink: 'syz.4.3763': attribute type 7 has an invalid length. [ 284.469223][T14587] lo speed is unknown, defaulting to 1000 [ 284.870778][T14596] program syz.0.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.910448][T14593] loop2: detected capacity change from 0 to 8192 [ 284.921550][T14598] netlink: 'syz.0.3773': attribute type 7 has an invalid length. [ 284.929491][T14598] __nla_validate_parse: 16 callbacks suppressed [ 284.929511][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3773'. [ 284.935438][T14600] netlink: 'syz.5.3774': attribute type 7 has an invalid length. [ 284.952558][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3774'. [ 284.954163][T14593] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3771'. [ 284.997419][T14603] can0: slcan on ttyS3. [ 285.006956][T14603] loop2: detected capacity change from 0 to 512 [ 285.027399][T14603] ext4 filesystem being mounted at /137/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.038029][T14610] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3777'. [ 285.069607][T14613] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3779'. [ 285.119549][T14602] can0 (unregistered): slcan off ttyS3. [ 285.144216][T14620] loop4: detected capacity change from 0 to 2048 [ 285.192924][T14620] Alternate GPT is invalid, using primary GPT. [ 285.199321][T14620] loop4: p2 p3 p7 [ 285.341931][T14630] loop1: detected capacity change from 0 to 8192 [ 285.398373][T14635] netlink: 'syz.2.3787': attribute type 7 has an invalid length. [ 285.406253][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3787'. [ 285.437122][T14640] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3789'. [ 285.465962][T14644] loop2: detected capacity change from 0 to 128 [ 285.473080][T14644] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 285.486727][T14630] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3785'. [ 285.486800][T14644] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.527658][T13711] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.548024][T14649] netlink: 'syz.5.3793': attribute type 13 has an invalid length. [ 285.600869][T14651] loop2: detected capacity change from 0 to 512 [ 285.616400][T14655] sch_fq: defrate 4294967295 ignored. [ 285.674423][T14651] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3794: Failed to acquire dquot type 1 [ 285.699236][T14651] EXT4-fs (loop2): 1 truncate cleaned up [ 285.705768][T14651] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.762195][T12196] EXT4-fs unmount: 34 callbacks suppressed [ 285.762209][T12196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.804307][T14670] netlink: 'syz.1.3797': attribute type 13 has an invalid length. [ 285.820184][T14672] program syz.2.3802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.869901][T14676] loop5: detected capacity change from 0 to 128 [ 285.876744][T14676] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 285.890743][T14676] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.944381][T14680] loop1: detected capacity change from 0 to 8192 [ 286.015399][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3808'. [ 286.039316][T13711] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.100808][T14687] lo speed is unknown, defaulting to 1000 [ 286.130573][T14680] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3805'. [ 286.354693][T14714] loop5: detected capacity change from 0 to 2048 [ 286.448610][T14717] lo speed is unknown, defaulting to 1000 [ 286.606224][T14714] Alternate GPT is invalid, using primary GPT. [ 286.612780][T14714] loop5: p2 p3 p7 [ 286.628984][T14723] loop4: detected capacity change from 0 to 128 [ 286.682949][T14723] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 286.851964][T14723] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.897718][ T578] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.970666][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 286.970685][ T29] audit: type=1326 audit(1758150513.653:9640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.5.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 287.000667][ T29] audit: type=1326 audit(1758150513.653:9641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.5.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 287.000760][T14737] loop4: detected capacity change from 0 to 8192 [ 287.030912][ T29] audit: type=1326 audit(1758150513.653:9642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.5.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 287.054588][ T29] audit: type=1326 audit(1758150513.653:9643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.5.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 287.078374][ T29] audit: type=1326 audit(1758150513.653:9644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.5.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85df3cd510 code=0x7ffc0000 [ 287.101911][ T29] audit: type=1326 audit(1758150513.653:9645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.5.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85df3cd510 code=0x7ffc0000 [ 287.127655][ T29] audit: type=1326 audit(1758150513.653:9646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.5.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 287.152198][ T29] audit: type=1326 audit(1758150513.653:9647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.5.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 287.176314][ T29] audit: type=1326 audit(1758150513.653:9648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.5.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 287.235897][T14749] program syz.0.3830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.248419][ T29] audit: type=1400 audit(1758150513.933:9649): avc: denied { ioctl } for pid=14750 comm="syz.2.3831" path="socket:[52506]" dev="sockfs" ino=52506 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 287.305374][T14764] loop2: detected capacity change from 0 to 128 [ 287.317203][T14764] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 287.348670][T14764] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.374755][T14766] FAULT_INJECTION: forcing a failure. [ 287.374755][T14766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.387908][T14766] CPU: 1 UID: 0 PID: 14766 Comm: syz.5.3837 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 287.388005][T14766] Tainted: [W]=WARN [ 287.388014][T14766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.388042][T14766] Call Trace: [ 287.388049][T14766] [ 287.388058][T14766] __dump_stack+0x1d/0x30 [ 287.388082][T14766] dump_stack_lvl+0xe8/0x140 [ 287.388108][T14766] dump_stack+0x15/0x1b [ 287.388131][T14766] should_fail_ex+0x265/0x280 [ 287.388228][T14766] should_fail+0xb/0x20 [ 287.388253][T14766] should_fail_usercopy+0x1a/0x20 [ 287.388279][T14766] _copy_from_user+0x1c/0xb0 [ 287.388321][T14766] __sys_bpf+0x178/0x7b0 [ 287.388399][T14766] __x64_sys_bpf+0x41/0x50 [ 287.388492][T14766] x64_sys_call+0x2aea/0x2ff0 [ 287.388526][T14766] do_syscall_64+0xd2/0x200 [ 287.388585][T14766] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 287.388665][T14766] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 287.388696][T14766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.388721][T14766] RIP: 0033:0x7f85df3ceba9 [ 287.388741][T14766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.388760][T14766] RSP: 002b:00007f85dde2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.388851][T14766] RAX: ffffffffffffffda RBX: 00007f85df615fa0 RCX: 00007f85df3ceba9 [ 287.388865][T14766] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000002 [ 287.388877][T14766] RBP: 00007f85dde2f090 R08: 0000000000000000 R09: 0000000000000000 [ 287.388890][T14766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.388949][T14766] R13: 00007f85df616038 R14: 00007f85df615fa0 R15: 00007ffd58d9f798 [ 287.388975][T14766] [ 287.571519][T14768] netlink: 'syz.0.3836': attribute type 7 has an invalid length. [ 287.607130][ T578] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.643564][T14771] lo speed is unknown, defaulting to 1000 [ 287.680340][T14777] loop0: detected capacity change from 0 to 128 [ 287.731386][T14777] syz.0.3842: attempt to access beyond end of device [ 287.731386][T14777] loop0: rw=2049, sector=721, nr_sectors = 8 limit=128 [ 287.758924][T14795] syz.0.3842: attempt to access beyond end of device [ 287.758924][T14795] loop0: rw=2049, sector=217, nr_sectors = 128 limit=128 [ 287.784792][T13711] kworker/u8:8: attempt to access beyond end of device [ 287.784792][T13711] loop0: rw=1, sector=345, nr_sectors = 376 limit=128 [ 287.997021][T14817] program syz.4.3858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.154112][T14831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.162724][T14831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.181308][T14834] validate_nla: 3 callbacks suppressed [ 288.181326][T14834] netlink: 'syz.2.3864': attribute type 7 has an invalid length. [ 288.271932][T14846] netlink: 'syz.2.3869': attribute type 7 has an invalid length. [ 288.294895][T14848] program syz.4.3871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.493755][T14855] lo speed is unknown, defaulting to 1000 [ 288.601169][T14864] loop5: detected capacity change from 0 to 1024 [ 288.608304][T14864] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 288.619293][T14864] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 288.630165][T14864] JBD2: no valid journal superblock found [ 288.635941][T14864] EXT4-fs (loop5): Could not load journal inode [ 288.656659][T14864] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 288.725525][T14878] netlink: 'syz.1.3882': attribute type 7 has an invalid length. [ 288.757954][T14883] netlink: 'syz.1.3885': attribute type 13 has an invalid length. [ 288.806989][T14879] loop5: detected capacity change from 0 to 1024 [ 288.820098][T14879] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 288.831115][T14879] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 288.842073][T14879] JBD2: no valid journal superblock found [ 288.847843][T14879] EXT4-fs (loop5): Could not load journal inode [ 288.858679][T14879] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 289.050111][T14899] program syz.1.3889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.100479][T14905] FAULT_INJECTION: forcing a failure. [ 289.100479][T14905] name failslab, interval 1, probability 0, space 0, times 0 [ 289.113287][T14905] CPU: 0 UID: 0 PID: 14905 Comm: syz.5.3892 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.113334][T14905] Tainted: [W]=WARN [ 289.113343][T14905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.113360][T14905] Call Trace: [ 289.113368][T14905] [ 289.113376][T14905] __dump_stack+0x1d/0x30 [ 289.113511][T14905] dump_stack_lvl+0xe8/0x140 [ 289.113534][T14905] dump_stack+0x15/0x1b [ 289.113553][T14905] should_fail_ex+0x265/0x280 [ 289.113581][T14905] ? __se_sys_memfd_create+0x1cc/0x590 [ 289.113606][T14905] should_failslab+0x8c/0xb0 [ 289.113656][T14905] __kmalloc_cache_noprof+0x4c/0x320 [ 289.113740][T14905] ? fput+0x8f/0xc0 [ 289.113776][T14905] __se_sys_memfd_create+0x1cc/0x590 [ 289.113802][T14905] __x64_sys_memfd_create+0x31/0x40 [ 289.113826][T14905] x64_sys_call+0x2abe/0x2ff0 [ 289.113932][T14905] do_syscall_64+0xd2/0x200 [ 289.113969][T14905] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 289.113997][T14905] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 289.114032][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.114136][T14905] RIP: 0033:0x7f85df3ceba9 [ 289.114154][T14905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.114176][T14905] RSP: 002b:00007f85dde2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 289.114199][T14905] RAX: ffffffffffffffda RBX: 00007f85df615fa0 RCX: 00007f85df3ceba9 [ 289.114214][T14905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.114273][T14905] RBP: 00007f85dde2f090 R08: 0000000000000000 R09: 0000000000000000 [ 289.114288][T14905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.114302][T14905] R13: 00007f85df616038 R14: 00007f85df615fa0 R15: 00007ffd58d9f798 [ 289.114335][T14905] [ 289.356748][T14913] netlink: 'syz.5.3895': attribute type 7 has an invalid length. [ 289.394018][T14918] ipvlan2: entered promiscuous mode [ 289.394541][T14918] bridge0: port 3(ipvlan2) entered blocking state [ 289.405935][T14918] bridge0: port 3(ipvlan2) entered disabled state [ 289.406295][T14918] ipvlan2: entered allmulticast mode [ 289.406313][T14918] bridge0: entered allmulticast mode [ 289.406730][T14918] ipvlan2: left allmulticast mode [ 289.406776][T14918] bridge0: left allmulticast mode [ 289.441722][T14919] loop4: detected capacity change from 0 to 512 [ 289.461015][T14919] EXT4-fs error (device loop4): ext4_init_orphan_info:585: comm syz.4.3897: inode #0: comm syz.4.3897: iget: illegal inode # [ 289.474783][T14919] EXT4-fs (loop4): get orphan inode failed [ 289.481171][T14919] EXT4-fs (loop4): mount failed [ 289.563952][T14934] loop5: detected capacity change from 0 to 512 [ 289.581222][T14934] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.3903: Failed to acquire dquot type 1 [ 289.594965][T14934] EXT4-fs (loop5): 1 truncate cleaned up [ 289.603462][T14934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.616877][T14934] ext4 filesystem being mounted at /559/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.644410][ T7373] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.692000][T14948] can0: slcan on ttyS3. [ 289.699637][T14946] loop2: detected capacity change from 0 to 8192 [ 289.710758][T14948] loop4: detected capacity change from 0 to 512 [ 289.731920][T14948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 289.747201][T14948] ext4 filesystem being mounted at /165/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.809574][T14947] can0 (unregistered): slcan off ttyS3. [ 289.827370][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 290.010975][T14991] __nla_validate_parse: 15 callbacks suppressed [ 290.011009][T14991] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3920'. [ 290.048156][T14993] netlink: 'syz.2.3925': attribute type 7 has an invalid length. [ 290.053134][T14994] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3923'. [ 290.056334][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3925'. [ 290.094964][T14996] loop2: detected capacity change from 0 to 128 [ 290.103007][T14996] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 290.115643][T14996] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 290.149848][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 290.218190][T15003] loop1: detected capacity change from 0 to 2048 [ 290.232056][T15010] loop4: detected capacity change from 0 to 512 [ 290.234771][T15012] loop2: detected capacity change from 0 to 512 [ 290.251937][T15010] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3932: Failed to acquire dquot type 1 [ 290.252075][T15012] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3933: Failed to acquire dquot type 1 [ 290.266352][T15010] EXT4-fs (loop4): 1 truncate cleaned up [ 290.277242][T15012] EXT4-fs (loop2): 1 truncate cleaned up [ 290.284108][T15010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.288880][T15012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.303730][T15010] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.324678][T15012] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.328639][T15003] loop1: p1 < > p4 [ 290.344545][T15003] loop1: p4 size 8388608 extends beyond EOD, truncated [ 290.385664][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.397049][T12196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.463837][T15021] loop4: detected capacity change from 0 to 512 [ 290.485745][T15021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 290.511398][T15021] EXT4-fs (loop4): 1 truncate cleaned up [ 290.517946][T15021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.599270][T15030] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3937'. [ 290.814159][T15044] loop5: detected capacity change from 0 to 8192 [ 290.856436][T15048] loop2: detected capacity change from 0 to 512 [ 290.883417][T15048] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3945: Failed to acquire dquot type 1 [ 290.897907][T15051] netlink: 'syz.0.3946': attribute type 13 has an invalid length. [ 290.920049][T15048] EXT4-fs (loop2): 1 truncate cleaned up [ 290.926199][T15048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.939060][T15048] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.964832][T15054] program syz.0.3947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.977077][T12196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.026219][T15059] can0: slcan on ttyS3. [ 291.027143][T15044] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3944'. [ 291.046925][T15059] loop0: detected capacity change from 0 to 512 [ 291.063146][T15059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 291.085430][T15061] netlink: 'syz.2.3948': attribute type 13 has an invalid length. [ 291.105805][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3950'. [ 291.115221][T15067] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3950'. [ 291.116180][T15059] ext4 filesystem being mounted at /191/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.125891][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3950'. [ 291.148884][T15067] random: crng reseeded on system resumption [ 291.167891][T15067] Restarting kernel threads ... [ 291.173922][T15067] Done restarting kernel threads. [ 291.273568][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.284901][T15079] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3952'. [ 291.299784][T15058] can0 (unregistered): slcan off ttyS3. [ 291.329299][T12351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 291.378908][T15092] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3956'. [ 291.515434][T15101] loop2: detected capacity change from 0 to 2048 [ 291.582061][T15101] Alternate GPT is invalid, using primary GPT. [ 291.588675][T15101] loop2: p2 p3 p7 [ 291.645485][T15109] loop0: detected capacity change from 0 to 512 [ 291.657607][T15109] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 291.671609][T15109] EXT4-fs (loop0): 1 truncate cleaned up [ 291.677736][T15109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.679553][T15117] can0: slcan on ttyS3. [ 291.742375][T15120] loop5: detected capacity change from 0 to 512 [ 291.794570][T15120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 291.808788][T15120] ext4 filesystem being mounted at /570/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.885735][T15134] program syz.4.3973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.929552][T15116] can0 (unregistered): slcan off ttyS3. [ 291.949011][T15136] loop4: detected capacity change from 0 to 512 [ 291.960431][ T7373] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 291.982183][T15136] __quota_error: 638 callbacks suppressed [ 291.982199][T15136] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 291.998174][T15136] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 292.008261][T15136] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3974: Failed to acquire dquot type 1 [ 292.020587][T15136] EXT4-fs (loop4): 1 truncate cleaned up [ 292.027147][T15136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.039862][T15136] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.071276][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.267930][T15150] loop5: detected capacity change from 0 to 512 [ 292.282438][T15150] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 292.292526][T15150] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 292.302490][T15150] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.3979: Failed to acquire dquot type 1 [ 292.370333][T15150] EXT4-fs (loop5): 1 truncate cleaned up [ 292.377672][T15150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.397422][T15150] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.428544][ T7373] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.457517][T12351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.537583][T15158] loop5: detected capacity change from 0 to 8192 [ 292.551692][ T29] audit: type=1400 audit(1758150519.233:10276): avc: denied { read } for pid=15160 comm="syz.4.3984" dev="sockfs" ino=53206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 292.626407][ T29] audit: type=1400 audit(1758150519.233:10277): avc: denied { remount } for pid=15157 comm="syz.5.3981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 292.646502][ T29] audit: type=1400 audit(1758150519.263:10278): avc: denied { ioctl } for pid=15165 comm="syz.2.3985" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 292.672134][ T29] audit: type=1400 audit(1758150519.303:10279): avc: denied { create } for pid=15157 comm="syz.5.3981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 292.703536][T15168] loop1: detected capacity change from 0 to 2048 [ 292.737154][T15177] loop4: detected capacity change from 0 to 2048 [ 292.759675][T15182] netlink: 'syz.2.3991': attribute type 7 has an invalid length. [ 292.772249][T15168] Alternate GPT is invalid, using primary GPT. [ 292.777537][ T29] audit: type=1326 audit(1758150519.453:10280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15183 comm="syz.5.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 292.778760][T15168] loop1: p2 p3 p7 [ 292.803155][ T29] audit: type=1326 audit(1758150519.483:10281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15183 comm="syz.5.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85df3ceba9 code=0x7ffc0000 [ 292.856563][T15177] Alternate GPT is invalid, using primary GPT. [ 292.864898][T15177] loop4: p2 p3 p7 [ 293.073064][T15199] netlink: 'syz.2.3997': attribute type 13 has an invalid length. [ 293.098373][T15201] program syz.2.3998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.112047][T15188] FAULT_INJECTION: forcing a failure. [ 293.112047][T15188] name failslab, interval 1, probability 0, space 0, times 0 [ 293.126051][T15188] CPU: 0 UID: 0 PID: 15188 Comm: syz.5.3992 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 293.126136][T15188] Tainted: [W]=WARN [ 293.126143][T15188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.126158][T15188] Call Trace: [ 293.126243][T15188] [ 293.126251][T15188] __dump_stack+0x1d/0x30 [ 293.126276][T15188] dump_stack_lvl+0xe8/0x140 [ 293.126310][T15188] dump_stack+0x15/0x1b [ 293.126335][T15188] should_fail_ex+0x265/0x280 [ 293.126418][T15188] should_failslab+0x8c/0xb0 [ 293.126590][T15188] kmem_cache_alloc_noprof+0x50/0x310 [ 293.126645][T15188] ? alloc_empty_file+0x76/0x200 [ 293.126735][T15188] alloc_empty_file+0x76/0x200 [ 293.126777][T15188] path_openat+0x68/0x2170 [ 293.126802][T15188] ? __rcu_read_unlock+0x34/0x70 [ 293.126875][T15188] ? filemap_map_pages+0x86b/0xab0 [ 293.126904][T15188] ? css_rstat_updated+0xb7/0x240 [ 293.126992][T15188] do_filp_open+0x109/0x230 [ 293.127030][T15188] do_sys_openat2+0xa6/0x110 [ 293.127074][T15188] __x64_sys_openat+0xf2/0x120 [ 293.127181][T15188] x64_sys_call+0x2e9c/0x2ff0 [ 293.127216][T15188] do_syscall_64+0xd2/0x200 [ 293.127254][T15188] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 293.127282][T15188] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 293.127322][T15188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.127361][T15188] RIP: 0033:0x7f85df3cd510 [ 293.127384][T15188] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 293.127472][T15188] RSP: 002b:00007f85dde0db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 293.127505][T15188] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f85df3cd510 [ 293.127524][T15188] RDX: 0000000000000000 RSI: 00007f85dde0dc10 RDI: 00000000ffffff9c [ 293.127538][T15188] RBP: 00007f85dde0dc10 R08: 0000000000000000 R09: 0000000000000000 [ 293.127551][T15188] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 293.127565][T15188] R13: 00007f85df616128 R14: 00007f85df616090 R15: 00007ffd58d9f798 [ 293.127587][T15188] [ 293.615100][T15213] loop1: detected capacity change from 0 to 8192 [ 293.760727][T15221] smc: net device bond0 applied user defined pnetid SYZ0 [ 293.782606][T15221] smc: net device bond0 erased user defined pnetid SYZ0 [ 293.932526][T15227] loop5: detected capacity change from 0 to 1024 [ 293.950197][T15227] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 293.962285][T15227] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 293.989897][T15237] program syz.4.4009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.010743][T15227] JBD2: no valid journal superblock found [ 294.016829][T15227] EXT4-fs (loop5): Could not load journal inode [ 294.030835][T15239] loop2: detected capacity change from 0 to 128 [ 294.037005][T15227] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 294.038134][T15239] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 294.064598][T15233] loop1: detected capacity change from 0 to 8192 [ 294.073371][T15241] netlink: 'syz.4.4011': attribute type 13 has an invalid length. [ 294.088813][T15239] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 294.128496][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 294.154966][T15245] loop4: detected capacity change from 0 to 1024 [ 294.163589][T15245] EXT4-fs: inline encryption not supported [ 294.182108][T15245] EXT4-fs: Ignoring removed bh option [ 294.205289][T15245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.262378][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.292701][T15250] loop2: detected capacity change from 0 to 8192 [ 294.319684][T15257] smc: net device bond0 applied user defined pnetid SYZ0 [ 294.327611][T15257] smc: net device bond0 erased user defined pnetid SYZ0 [ 294.421758][T15269] program syz.1.4021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.457389][T15271] loop0: detected capacity change from 0 to 1024 [ 294.472173][T15277] loop1: detected capacity change from 0 to 128 [ 294.473698][T15271] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 294.483480][T15277] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 294.492471][T15271] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 294.495155][T15271] JBD2: no valid journal superblock found [ 294.508911][T15277] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 294.518472][T15271] EXT4-fs (loop0): Could not load journal inode [ 294.554870][ T37] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 294.566170][T15271] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 294.642028][T15287] loop2: detected capacity change from 0 to 8192 [ 294.715837][T15294] can0: slcan on ttyS3. [ 294.723483][T15294] loop1: detected capacity change from 0 to 512 [ 294.742426][T15294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 294.755047][T15294] ext4 filesystem being mounted at /156/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.820919][T15293] can0 (unregistered): slcan off ttyS3. [ 294.880131][T12694] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 294.971495][T15309] program syz.1.4034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.986953][T15311] loop5: detected capacity change from 0 to 128 [ 295.001703][T15311] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 295.015352][T15311] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 295.066923][ T578] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 295.105859][T15318] loop5: detected capacity change from 0 to 512 [ 295.131285][T15318] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.4038: Failed to acquire dquot type 1 [ 295.144363][T15318] EXT4-fs (loop5): 1 truncate cleaned up [ 295.153244][T15318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.173445][T15318] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.256027][ T7373] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.302627][T15325] loop5: detected capacity change from 0 to 1024 [ 295.346671][T15325] EXT4-fs: inline encryption not supported [ 295.385759][T15325] EXT4-fs: Ignoring removed bh option [ 295.413836][T15325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.466146][ T7373] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.476754][T15327] loop1: detected capacity change from 0 to 8192 [ 295.578370][T15331] loop5: detected capacity change from 0 to 1024 [ 295.585874][T15331] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 295.597237][T15331] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 295.608552][T15331] JBD2: no valid journal superblock found [ 295.614541][T15331] EXT4-fs (loop5): Could not load journal inode [ 295.623512][T15327] __nla_validate_parse: 11 callbacks suppressed [ 295.623531][T15327] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4041'. [ 295.642141][T15331] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 295.705844][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4046'. [ 295.795254][T15342] loop5: detected capacity change from 0 to 1024 [ 295.809484][T15342] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 295.820749][T15342] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 295.947092][T15342] JBD2: no valid journal superblock found [ 295.953372][T15342] EXT4-fs (loop5): Could not load journal inode [ 295.967348][T15342] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 296.072110][T15370] loop4: detected capacity change from 0 to 8192 [ 296.094117][T15379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4059'. [ 296.166492][T15381] loop1: detected capacity change from 0 to 8192 [ 296.225287][T15370] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4056'. [ 296.283372][T15389] loop1: detected capacity change from 0 to 512 [ 296.301640][T15389] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.4063: Failed to acquire dquot type 1 [ 296.316853][T15389] EXT4-fs (loop1): 1 truncate cleaned up [ 296.324174][T15389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.339616][T15389] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.383227][T12694] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.454036][T15400] loop1: detected capacity change from 0 to 256 [ 296.458803][T15398] loop0: detected capacity change from 0 to 512 [ 296.475571][T15400] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 296.483994][T15398] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 296.502835][T15400] syz.1.4065: attempt to access beyond end of device [ 296.502835][T15400] loop1: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 296.516886][T15400] syz.1.4065: attempt to access beyond end of device [ 296.516886][T15400] loop1: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 296.538631][T15398] EXT4-fs (loop0): 1 truncate cleaned up [ 296.544508][T15400] syz.1.4065: attempt to access beyond end of device [ 296.544508][T15400] loop1: rw=2049, sector=384, nr_sectors = 32 limit=256 [ 296.559118][T15400] syz.1.4065: attempt to access beyond end of device [ 296.559118][T15400] loop1: rw=2049, sector=448, nr_sectors = 40 limit=256 [ 296.568275][T15402] loop4: detected capacity change from 0 to 1024 [ 296.573543][T15398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.597915][T15402] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 296.608967][T15402] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 296.621238][T15402] JBD2: no valid journal superblock found [ 296.626986][T15402] EXT4-fs (loop4): Could not load journal inode [ 296.663801][T15402] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 296.765122][T15410] loop4: detected capacity change from 0 to 512 [ 296.797279][T15410] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4069: Failed to acquire dquot type 1 [ 296.823082][T15410] EXT4-fs (loop4): 1 truncate cleaned up [ 296.839901][T15410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.852683][T15410] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.875719][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.934268][T15416] loop4: detected capacity change from 0 to 1024 [ 296.958291][T15416] EXT4-fs: inline encryption not supported [ 296.966051][T15416] EXT4-fs: Ignoring removed bh option [ 296.984561][T12351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.997812][T15414] loop5: detected capacity change from 0 to 8192 [ 297.020379][T15416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.066652][T15422] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4073'. [ 297.076765][T15420] loop0: detected capacity change from 0 to 8192 [ 297.094152][T15422] smc: net device bond0 applied user defined pnetid SYZ0 [ 297.107017][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.107371][T15422] smc: net device bond0 erased user defined pnetid SYZ0 [ 297.135226][T15424] netlink: 208 bytes leftover after parsing attributes in process `syz.5.4071'. [ 297.160677][T15427] loop2: detected capacity change from 0 to 1024 [ 297.167543][T15427] EXT4-fs: inline encryption not supported [ 297.177002][T15430] loop4: detected capacity change from 0 to 256 [ 297.184243][T15427] EXT4-fs: Ignoring removed bh option [ 297.194658][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 297.194675][ T29] audit: type=1400 audit(1758150523.853:10658): avc: denied { write } for pid=15425 comm="syz.0.4075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 297.200137][T15430] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 297.233087][T15427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.278461][T15430] syz.4.4074: attempt to access beyond end of device [ 297.278461][T15430] loop4: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 297.305172][T15430] syz.4.4074: attempt to access beyond end of device [ 297.305172][T15430] loop4: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 297.318972][T15430] syz.4.4074: attempt to access beyond end of device [ 297.318972][T15430] loop4: rw=2049, sector=384, nr_sectors = 32 limit=256 [ 297.338582][T15445] loop1: detected capacity change from 0 to 512 [ 297.341368][T15430] syz.4.4074: attempt to access beyond end of device [ 297.341368][T15430] loop4: rw=2049, sector=448, nr_sectors = 40 limit=256 [ 297.350022][ T29] audit: type=1400 audit(1758150524.013:10659): avc: denied { name_bind } for pid=15443 comm="syz.0.4082" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 297.389639][ T29] audit: type=1400 audit(1758150524.013:10660): avc: denied { node_bind } for pid=15443 comm="syz.0.4082" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 297.418400][T15448] loop0: detected capacity change from 0 to 1024 [ 297.425788][T15448] EXT4-fs: Ignoring removed orlov option [ 297.434743][T15448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.450033][T15445] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 297.461778][T15445] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 297.472104][ T29] audit: type=1400 audit(1758150524.153:10661): avc: denied { read open } for pid=15443 comm="syz.0.4082" path="/208/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 297.473329][T15445] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.4081: Failed to acquire dquot type 1 [ 297.497284][ T29] audit: type=1400 audit(1758150524.153:10662): avc: denied { write } for pid=15443 comm="syz.0.4082" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 297.511254][T15445] EXT4-fs (loop1): 1 truncate cleaned up [ 297.538034][T15445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.538113][T12196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.551898][T15445] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.598780][T12694] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.607113][ T29] audit: type=1400 audit(1758150524.283:10663): avc: denied { create } for pid=15454 comm="syz.2.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.630905][ T29] audit: type=1400 audit(1758150524.313:10664): avc: denied { bind } for pid=15454 comm="syz.2.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.651836][ T29] audit: type=1400 audit(1758150524.313:10665): avc: denied { write } for pid=15454 comm="syz.2.4083" path="socket:[54771]" dev="sockfs" ino=54771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.686688][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4084'. [ 297.783852][T15460] loop1: detected capacity change from 0 to 8192 [ 297.910128][T15462] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4085'. [ 298.012015][T15468] loop1: detected capacity change from 0 to 8192 [ 298.077594][T15472] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4089'. [ 298.140314][T15468] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4088'. [ 298.225519][T15481] loop1: detected capacity change from 0 to 512 [ 298.241471][T12351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.251211][T15481] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 298.263775][T15481] EXT4-fs (loop1): 1 truncate cleaned up [ 298.270279][T15481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.349998][T15486] lo speed is unknown, defaulting to 1000 [ 298.618801][T15494] loop2: detected capacity change from 0 to 8192 [ 298.691607][T15503] loop4: detected capacity change from 0 to 1024 [ 298.698786][T15503] EXT4-fs: inline encryption not supported [ 298.705482][T15503] EXT4-fs: Ignoring removed bh option [ 298.751893][T15503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.767008][T12694] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.777515][T15506] loop0: detected capacity change from 0 to 1024 [ 298.806420][T15506] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 298.817471][T15506] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 298.834382][T15506] JBD2: no valid journal superblock found [ 298.841537][T15506] EXT4-fs (loop0): Could not load journal inode [ 298.850151][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.868810][T15516] loop2: detected capacity change from 0 to 1024 [ 298.875981][T15516] EXT4-fs: Ignoring removed orlov option [ 298.884376][T15506] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 298.894467][T15515] loop1: detected capacity change from 0 to 8192 [ 298.909337][T15516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.952785][T15522] netlink: 'syz.0.4105': attribute type 7 has an invalid length. [ 299.185952][T15539] loop4: detected capacity change from 0 to 128 [ 299.203257][T15539] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 299.221468][T15539] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 299.254093][ T578] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 299.266066][T15542] loop0: detected capacity change from 0 to 1024 [ 299.288738][T15542] EXT4-fs: inline encryption not supported [ 299.296601][T15542] EXT4-fs: Ignoring removed bh option [ 299.322786][T15542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.342668][T15552] netlink: 'syz.4.4115': attribute type 13 has an invalid length. [ 299.376967][T12351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.379945][T15555] loop4: detected capacity change from 0 to 1024 [ 299.397251][T15555] EXT4-fs: inline encryption not supported [ 299.403853][T15555] EXT4-fs: Ignoring removed bh option [ 299.424853][T15555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.446646][T15561] loop0: detected capacity change from 0 to 512 [ 299.477800][T12511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.478123][T15561] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.4118: Failed to acquire dquot type 1 [ 299.507554][T15561] EXT4-fs (loop0): 1 truncate cleaned up [ 299.516430][T15561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.533771][T15561] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.559063][T12351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.573581][T15572] loop5: detected capacity change from 0 to 128 [ 299.581574][T15572] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 299.600057][T15572] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 299.601128][T15574] loop0: detected capacity change from 0 to 1024 [ 299.618993][T15574] EXT4-fs: inline encryption not supported [ 299.627329][T15574] EXT4-fs: Ignoring removed bh option [ 299.635896][T13711] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 299.655293][T15574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.677890][T12196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.717007][T15581] loop5: detected capacity change from 0 to 512 [ 299.750572][T15581] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.4126: Failed to acquire dquot type 1 [ 299.767089][T15581] EXT4-fs (loop5): 1 truncate cleaned up [ 299.767834][T15586] netlink: 'syz.4.4128': attribute type 13 has an invalid length. [ 299.774936][T15581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.799096][T15581] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.799599][T12351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.849110][ T7373] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.867300][T15593] smc: net device bond0 applied user defined pnetid SYZ0 [ 299.881918][T15595] loop5: detected capacity change from 0 to 256 [ 299.883829][T15593] smc: net device bond0 erased user defined pnetid SYZ0 [ 299.906531][T15595] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 299.921058][T15595] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 299.963016][T15595] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 299.979251][T15605] loop1: detected capacity change from 0 to 128 [ 299.989865][T15605] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 300.006741][T15605] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.037080][ T51] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.071719][T15611] loop1: detected capacity change from 0 to 512 [ 300.101050][T15611] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.4137: Failed to acquire dquot type 1 [ 300.115814][T15611] EXT4-fs (loop1): 1 truncate cleaned up [ 300.133379][T15611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.147185][T15611] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.157098][T15609] lo speed is unknown, defaulting to 1000 [ 300.177119][T12694] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.264304][T15628] smc: net device bond0 applied user defined pnetid SYZ0 [ 300.275248][T15628] smc: net device bond0 erased user defined pnetid SYZ0 [ 300.322338][T15632] loop4: detected capacity change from 0 to 1024 [ 300.329339][T15632] EXT4-fs: inline encryption not supported [ 300.337154][T15632] EXT4-fs: Ignoring removed bh option [ 300.371580][T15632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.439331][T15641] program syz.1.4147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.510556][T15646] loop1: detected capacity change from 0 to 512 [ 300.525681][T15646] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 300.539199][T15646] EXT4-fs (loop1): 1 truncate cleaned up [ 300.687409][T15652] loop2: detected capacity change from 0 to 128 [ 300.694526][T15652] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 300.748507][T15652] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.812790][ T51] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.841784][T15659] netlink: 'syz.4.4154': attribute type 7 has an invalid length. [ 300.852354][T15659] __nla_validate_parse: 10 callbacks suppressed [ 300.852375][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4154'. [ 300.914785][T15663] loop1: detected capacity change from 0 to 512 [ 300.973922][T15663] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.4155: Failed to acquire dquot type 1 [ 300.996391][T15663] EXT4-fs (loop1): 1 truncate cleaned up [ 301.005487][T15663] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.049707][T15679] loop1: detected capacity change from 0 to 1024 [ 301.060627][T15679] EXT4-fs: inline encryption not supported [ 301.075529][T15679] EXT4-fs: Ignoring removed bh option [ 301.103370][T15673] lo speed is unknown, defaulting to 1000 [ 301.197881][T15673] chnl_net:caif_netlink_parms(): no params data found [ 301.278408][ T272] bridge_slave_1: left allmulticast mode [ 301.284346][ T272] bridge_slave_1: left promiscuous mode [ 301.290323][ T272] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.298614][ T272] bridge_slave_0: left allmulticast mode [ 301.304948][ T272] bridge_slave_0: left promiscuous mode [ 301.312077][ T272] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.461632][T15704] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4165'. [ 301.811553][T15707] loop2: detected capacity change from 0 to 1024 [ 301.818555][T15707] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 301.829629][T15707] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 301.842104][T15707] JBD2: no valid journal superblock found [ 301.847862][T15707] EXT4-fs (loop2): Could not load journal inode [ 301.857398][T15707] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 302.046767][T15711] program syz.1.4167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.062102][ T272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.078953][ T272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.091585][ T272] bond0 (unregistering): Released all slaves [ 302.104147][T15713] loop1: detected capacity change from 0 to 128 [ 302.109775][T15699] smc: net device bond0 applied user defined pnetid SYZ0 [ 302.119855][T15713] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.124538][T15702] smc: net device bond0 erased user defined pnetid SYZ0 [ 302.151539][T15713] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 302.171394][T15673] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.179716][T15673] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.195294][T15673] bridge_slave_0: entered allmulticast mode [ 302.205113][T15673] bridge_slave_0: entered promiscuous mode [ 302.215131][T15673] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.224393][T15673] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.235866][T15673] bridge_slave_1: entered allmulticast mode [ 302.243654][T15673] bridge_slave_1: entered promiscuous mode [ 302.263711][T13711] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 302.284687][ T272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.302533][ T272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.318894][T15719] loop4: detected capacity change from 0 to 8192 [ 302.326043][T15723] loop0: detected capacity change from 0 to 1024 [ 302.340106][T15723] EXT4-fs: inline encryption not supported [ 302.348029][T15723] EXT4-fs: Ignoring removed bh option [ 302.372120][ T272] team0 (unregistering): Port device team_slave_1 removed [ 302.386121][ T272] team0 (unregistering): Port device team_slave_0 removed [ 302.400965][ T29] kauditd_printk_skb: 504 callbacks suppressed [ 302.400988][ T29] audit: type=1326 audit(1758150529.083:11162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 302.444879][ T29] audit: type=1326 audit(1758150529.083:11163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 302.476070][ T29] audit: type=1326 audit(1758150529.083:11164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 302.510838][ T29] audit: type=1326 audit(1758150529.083:11165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 302.524017][ T272] team0 (unregistering): Port device dummy0 removed [ 302.545188][ T29] audit: type=1326 audit(1758150529.083:11166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 302.588554][ T29] audit: type=1326 audit(1758150529.083:11167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 302.627160][ T29] audit: type=1326 audit(1758150529.083:11168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 302.656619][ T29] audit: type=1326 audit(1758150529.083:11169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 302.692087][ T29] audit: type=1326 audit(1758150529.083:11170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3130beba9 code=0x7ffc0000 [ 302.735968][T15673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.751321][T15719] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4171'. [ 302.775171][T15673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.790442][T15741] smc: net device bond0 applied user defined pnetid SYZ0 [ 302.806572][ T29] audit: type=1326 audit(1758150529.483:11171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15738 comm="syz.0.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20bdeeba9 code=0x7ffc0000 [ 302.826521][T15741] smc: net device bond0 erased user defined pnetid SYZ0 [ 302.857027][T15673] team0: Port device team_slave_0 added [ 302.867210][T15673] team0: Port device team_slave_1 added [ 302.894128][T15673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.901939][T15673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.932197][T15673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.945714][T15673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.954629][T15673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.986952][T15673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.021748][T15673] hsr_slave_0: entered promiscuous mode [ 303.028836][T15673] hsr_slave_1: entered promiscuous mode [ 303.031794][T15748] loop4: detected capacity change from 0 to 1024 [ 303.047033][T15748] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 303.062008][T15748] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 303.080285][T15748] JBD2: no valid journal superblock found [ 303.087763][T15748] EXT4-fs (loop4): Could not load journal inode [ 303.102789][T15747] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 303.123166][T15753] loop2: detected capacity change from 0 to 128 [ 303.131254][T15753] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 303.150488][T15753] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 303.181654][ T272] IPVS: stop unused estimator thread 0... [ 303.218667][ T51] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 303.239218][T15759] program syz.1.4184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.278349][T15765] loop2: detected capacity change from 0 to 1024 [ 303.292223][T15765] EXT4-fs: inline encryption not supported [ 303.300053][T15765] EXT4-fs: Ignoring removed bh option [ 303.312910][T15761] loop4: detected capacity change from 0 to 1024 [ 303.321251][T15761] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 303.336411][T15761] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 303.338195][T15767] loop1: detected capacity change from 0 to 8192 [ 303.349893][T15761] JBD2: no valid journal superblock found [ 303.365125][T15761] EXT4-fs (loop4): Could not load journal inode [ 303.378670][T15761] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 303.452877][T15772] loop4: detected capacity change from 0 to 512 [ 303.460830][T15772] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 303.484017][T15673] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 303.495453][T15772] EXT4-fs (loop4): 1 truncate cleaned up [ 303.531595][T15673] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 303.557343][T15673] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.568990][T15673] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.592698][T15767] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4187'. [ 303.781637][T15673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.806696][T15795] loop0: detected capacity change from 0 to 1024 [ 303.832277][T15673] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.855773][T15795] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 303.869336][T15795] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 303.887999][T15795] JBD2: no valid journal superblock found [ 303.895123][T15795] EXT4-fs (loop0): Could not load journal inode [ 303.910504][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.919991][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.932860][T15795] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 303.933772][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.954708][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.015495][T15804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4196'. [ 304.146089][T15814] netlink: 'syz.0.4198': attribute type 7 has an invalid length. [ 304.157014][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4198'. [ 304.177843][T15807] loop2: detected capacity change from 0 to 1024 [ 304.196601][T15818] loop4: detected capacity change from 0 to 8192 [ 304.201026][T15673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.213381][T15807] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 304.226724][T15807] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 304.254772][T15821] loop0: detected capacity change from 0 to 512 [ 304.264185][T15807] JBD2: no valid journal superblock found [ 304.271926][T15807] EXT4-fs (loop2): Could not load journal inode [ 304.284517][T15807] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 304.309970][T15821] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.4200: Failed to acquire dquot type 1 [ 304.330112][T15821] EXT4-fs (loop0): 1 truncate cleaned up [ 304.337690][T15821] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.407248][T15818] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4199'. [ 304.442665][T15843] program syz.4.4203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.482044][T15673] veth0_vlan: entered promiscuous mode [ 304.491174][T15673] veth1_vlan: entered promiscuous mode [ 304.510837][T15673] veth0_macvtap: entered promiscuous mode [ 304.520923][T15673] veth1_macvtap: entered promiscuous mode [ 304.554246][T15673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.569238][T15850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4206'. [ 304.570265][T15673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.598414][T13711] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.612892][T13711] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.633415][T13711] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.654645][T13711] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.776579][T15858] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4156'. [ 304.787649][T15858] hsr_slave_0: left promiscuous mode [ 304.794902][T15858] hsr_slave_1: left promiscuous mode [ 304.821067][T15861] smc: net device bond0 applied user defined pnetid SYZ0 [ 304.829173][T15861] smc: net device bond0 erased user defined pnetid SYZ0 [ 304.912964][T15864] loop4: detected capacity change from 0 to 1024 [ 304.921886][T15864] EXT4-fs: Ignoring removed orlov option [ 305.208539][T15870] loop2: detected capacity change from 0 to 1024 [ 305.218936][T15870] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 305.234228][T15870] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 305.248215][T15870] JBD2: no valid journal superblock found [ 305.254979][T15870] EXT4-fs (loop2): Could not load journal inode [ 305.267340][T15870] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 305.313179][T15878] program syz.2.4213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.357376][T15877] loop0: detected capacity change from 0 to 8192 [ 305.393602][T15882] netlink: 'syz.1.4215': attribute type 13 has an invalid length. [ 305.486111][T15887] loop1: detected capacity change from 0 to 1024 [ 305.496784][T15887] EXT4-fs: Ignoring removed orlov option [ 305.499600][T15886] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4212'. [ 305.611904][T15887] ================================================================== [ 305.622581][T15887] BUG: KCSAN: data-race in filemap_read / filemap_read [ 305.631046][T15887] [ 305.633614][T15887] write to 0xffff88811a5e9468 of 8 bytes by task 15892 on cpu 0: [ 305.648628][T15887] filemap_read+0x974/0xa00 [ 305.658998][T15887] generic_file_read_iter+0x79/0x330 [ 305.667994][T15887] ext4_file_read_iter+0x1cc/0x290 [ 305.678842][T15887] copy_splice_read+0x442/0x660 [ 305.686910][T15887] splice_direct_to_actor+0x290/0x680 [ 305.697527][T15887] do_splice_direct+0xda/0x150 [ 305.704162][T15887] do_sendfile+0x380/0x650 [ 305.711067][T15887] __x64_sys_sendfile64+0x105/0x150 [ 305.718608][T15887] x64_sys_call+0x2bb0/0x2ff0 [ 305.724729][T15887] do_syscall_64+0xd2/0x200 [ 305.729553][T15887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.737152][T15887] [ 305.740158][T15887] read to 0xffff88811a5e9468 of 8 bytes by task 15887 on cpu 1: [ 305.752743][T15887] filemap_read+0x6f/0xa00 [ 305.760413][T15887] generic_file_read_iter+0x79/0x330 [ 305.767390][T15887] ext4_file_read_iter+0x1cc/0x290 [ 305.773881][T15887] copy_splice_read+0x442/0x660 [ 305.780209][T15887] splice_direct_to_actor+0x290/0x680 [ 305.786941][T15887] do_splice_direct+0xda/0x150 [ 305.792763][T15887] do_sendfile+0x380/0x650 [ 305.797763][T15887] __x64_sys_sendfile64+0x105/0x150 [ 305.803363][T15887] x64_sys_call+0x2bb0/0x2ff0 [ 305.808885][T15887] do_syscall_64+0xd2/0x200 [ 305.814065][T15887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.825758][T15887] [ 305.831673][T15887] value changed: 0x0000000000000145 -> 0x0000000000000146 [ 305.840427][T15887] [ 305.844801][T15887] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 305.855110][T15887] CPU: 1 UID: 0 PID: 15887 Comm: syz.1.4216 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 305.874707][T15887] Tainted: [W]=WARN [ 305.881069][T15887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.897509][T15887] ================================================================== [ 306.296811][ T51] bridge_slave_1: left allmulticast mode [ 306.304134][ T51] bridge_slave_1: left promiscuous mode [ 306.310851][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.323940][ T51] bridge_slave_0: left allmulticast mode [ 306.330608][ T51] bridge_slave_0: left promiscuous mode [ 306.338613][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.861804][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.874628][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.886416][ T51] bond0 (unregistering): Released all slaves [ 306.944561][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.955094][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.988567][ T51] team0 (unregistering): Port device team_slave_1 removed [ 307.002787][ T51] team0 (unregistering): Port device team_slave_0 removed [ 307.362811][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.512337][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.562617][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.602055][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.234486][ T51] bridge_slave_1: left allmulticast mode [ 308.241806][ T51] bridge_slave_1: left promiscuous mode [ 308.249009][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.259516][ T51] bridge_slave_0: left allmulticast mode [ 308.265631][ T51] bridge_slave_0: left promiscuous mode [ 308.272339][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.283474][ T51] bridge_slave_1: left allmulticast mode [ 308.289633][ T51] bridge_slave_1: left promiscuous mode [ 308.296172][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.305702][ T51] bridge_slave_0: left allmulticast mode [ 308.311611][ T51] bridge_slave_0: left promiscuous mode [ 308.317603][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.332519][ T51] bridge_slave_1: left allmulticast mode [ 308.338783][ T51] bridge_slave_1: left promiscuous mode [ 308.345301][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.353314][ T51] bridge_slave_0: left allmulticast mode [ 308.359557][ T51] bridge_slave_0: left promiscuous mode [ 308.365590][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.378826][ T51] bridge_slave_1: left allmulticast mode [ 308.385577][ T51] bridge_slave_1: left promiscuous mode [ 308.392662][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.401323][ T51] bridge_slave_0: left allmulticast mode [ 308.407463][ T51] bridge_slave_0: left promiscuous mode [ 308.413417][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.501696][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.512436][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.522733][ T51] bond0 (unregistering): Released all slaves [ 309.221350][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.231637][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.241080][ T51] bond0 (unregistering): Released all slaves [ 309.851704][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.862778][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.873208][ T51] bond0 (unregistering): Released all slaves [ 310.171346][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.182721][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.192748][ T51] bond0 (unregistering): Released all slaves [ 310.283540][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.292085][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.301179][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.309333][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.319348][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.327755][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.337804][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.345636][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.355230][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.363007][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.373843][ T51] veth1_macvtap: left promiscuous mode [ 310.379802][ T51] veth0_macvtap: left promiscuous mode [ 310.385417][ T51] veth1_vlan: left promiscuous mode [ 310.390935][ T51] veth0_vlan: left promiscuous mode [ 310.454070][ T51] team0 (unregistering): Port device team_slave_1 removed [ 310.463413][ T51] team0 (unregistering): Port device team_slave_0 removed [ 310.515752][ T51] team0 (unregistering): Port device team_slave_1 removed [ 310.526025][ T51] team0 (unregistering): Port device team_slave_0 removed [ 310.577638][ T51] team0 (unregistering): Port device team_slave_1 removed [ 310.587525][ T51] team0 (unregistering): Port device team_slave_0 removed [ 310.640763][ T51] team0 (unregistering): Port device team_slave_1 removed [ 310.650339][ T51] team0 (unregistering): Port device team_slave_0 removed