last executing test programs: 1m19.927915242s ago: executing program 2 (id=2571): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f0000000040)=@v3={0x3000000, [{0x8, 0x8000}, {0x2, 0x2}], 0xee00}, 0x18, 0x1) r0 = creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf21963aaf523cb02) r1 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRESDEC=r1, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000380)={@empty, @private, 0x0}, &(0x7f00000003c0)=0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=r0, @ANYBLOB="f1ffffff0000000300"/20, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="01000000040000000400"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f0000000600)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x1, 0x8, 0x1, {0xffff}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000440)=@sr0, 0x0, &(0x7f0000000480)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) io_uring_enter(r4, 0x29ab, 0xd480, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) setxattr(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000240)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4028010}, 0x0) pivot_root(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00') setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='i2c_result\x00'}, 0x18) 1m19.786923068s ago: executing program 2 (id=2572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (fail_nth: 2) 1m19.486568801s ago: executing program 2 (id=2573): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000007c0)={[], [{@uid_eq}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000c80)='./file1\x00', 0x2200018, &(0x7f0000000d00)=ANY=[], 0x1, 0x364, &(0x7f0000000900)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000001400)=ANY=[]) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) select(0x4, &(0x7f0000000000), &(0x7f00000014c0)={0x1}, 0x0, 0x0) sync() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xffffffee}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m19.156811985s ago: executing program 2 (id=2579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f00000001c0)=ANY=[], 0x1, 0x54a, &(0x7f0000000580)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f00000002c0)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26, 0x0) 1m19.098553438s ago: executing program 2 (id=2580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x20, r3, 0x311, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xffffffffffffffeb}, 0x1, 0x0, 0x0, 0x24000801}, 0x24000010) 1m18.896683397s ago: executing program 2 (id=2582): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="3282db78e0ea", 0x6}], 0x1}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000800)="7e24225d7d1bf3f2c2e3350446b32bcc9a579c864b87c0b26e9513f1a964562cd0fb40e07a028a9e4a8509c6183dc2c51a7f307806ce093fad8f167b3f1656081a0f4b15e021952a5e40d65779b924ed3fd175df8673c7544e9e3b11bc621acae054258215e76d7f16569f3436c00fcc7c6c154f87afc22e0ad2a3737a8f6e1cdf815f357d0b10e57e633006dd00e8cc5c66ddb415a93124d45ef1e687b1e29d9fb742d4f8b91f69854f7ba2eaec1b2782a4807fba2fc86bb82f320faa5da21794d4e6b2795f823dd429c33bb5a117ec441e28", 0xd3}, {&(0x7f0000003ac0)="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", 0x43b}], 0x2}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 1m18.845494639s ago: executing program 32 (id=2582): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="3282db78e0ea", 0x6}], 0x1}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000800)="7e24225d7d1bf3f2c2e3350446b32bcc9a579c864b87c0b26e9513f1a964562cd0fb40e07a028a9e4a8509c6183dc2c51a7f307806ce093fad8f167b3f1656081a0f4b15e021952a5e40d65779b924ed3fd175df8673c7544e9e3b11bc621acae054258215e76d7f16569f3436c00fcc7c6c154f87afc22e0ad2a3737a8f6e1cdf815f357d0b10e57e633006dd00e8cc5c66ddb415a93124d45ef1e687b1e29d9fb742d4f8b91f69854f7ba2eaec1b2782a4807fba2fc86bb82f320faa5da21794d4e6b2795f823dd429c33bb5a117ec441e28", 0xd3}, {&(0x7f0000003ac0)="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", 0x43b}], 0x2}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 1m16.069900949s ago: executing program 4 (id=2605): syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1feb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) 1m16.03532582s ago: executing program 4 (id=2606): syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1210090, &(0x7f0000001300)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) pwrite64(r0, &(0x7f0000000100)="c6", 0x1, 0x8000) io_uring_setup(0x220c, &(0x7f0000000180)={0x0, 0xfffffffa, 0x40, 0x10000003, 0x6f}) 1m15.8044753s ago: executing program 5 (id=2583): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m15.518442673s ago: executing program 4 (id=2612): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="74726100003d0400008066646e6f3d", @ANYBLOB="ba8cebe57b30fb8fac13051af2f11f386ccfba8addc2da1bf855946c857024101b468f43b72d748b8ddaa70cf1505d9b51ccbb349b7a92bbe71cf09e3db7709b2234d6d6a695ea4b00752ffcfab6d85a2a54684ae40a77d4e25126b51c7ed838582f70533f9f1d942fdf9f6cc2de582317ee2073403f229ec497105e62ed8133b95aaaa066e592b0a3a8f7d9e8b5e90ac2739de413a632412cca4e261a5694ad2add775bd20991913b1c36b4cb26d7428acc688e19bb162fe503d3dc142a252f203db63e7acf0c09b2dd2a5ba134f4f9c61dda508eeec04f59082a06fb2f12f91ea9940ddaa7fa01842690b7979a01e401aca66226061ed1c936700ebc36", @ANYBLOB=',wfdno=', @ANYRES32=r0, @ANYBLOB=',\x00']) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000006c0)="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") symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) io_setup(0x8, &(0x7f00000001c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r3, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x580, 0x370, 0x1170, 0x1398, 0x370, 0x1170, 0x4b0, 0x1398, 0x1398, 0x4b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0xffffffff], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x308, 0x370, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x7, 0x891, 0x60, 0x9, 0x6, 0x80, 0x1, 0x6, 0x40}, {0x6}}}, @common=@inet=@recent1={{0x108}, {0xffffffff, 0x1, 0x4, 0x80, 'syz0\x00', 0x40, [0xffffff00, 0xffffff]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x3, 0x0, [0x3ff, 0x5, 0x4, 0x400, 0x268c, 0x1, 0x4, 0x7, 0x5, 0xfc5, 0x4, 0x2, 0x8, 0x6, 0xfffb, 0x63d7], 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e1e, @private=0xa010101}], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgKSFSkQEBzsIBpdGhTjokAxWYprFiFiR0llw0EFwcJCU6OzLP6D4BuIidnYUI4hCnCSjOBcUl0wprU+hrV3aYkp/fD5LuPece08u3yfwvxYPPzWbzVgIoZn4+6e/Pc1PFHunxqZnQoiF70MI+S+/+LUSizp+u/U8WpeidTGRqe3fjL+cdtz23VdTh/GofhEP4YcQwuLjUfLfvo1P31nuKrm+sVzYXM0tPBTWnobnB/I9W/mlnZGDbHm2OzsXfVgX8dbMT9VGj++apefd9sG2aq2RuY760rGPmc9/68/573VV6pXGZP/JylC6s35Z3o5yf5U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwc5yV8n1jeXC5mpu4aGw9jQ8P5Dv2cov7YwcZMuz3dm5+FvfRbw181O10eO7Zul5t32wrVprZK6jvnTs3dGvf/yYv0QLfRX+mP9eV6VeaUz2n6wMpTvrl+XtKPfX9/kDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyl/ESxd2pseiaEWPgshPDN/Xd9v+w3E2/1WNR3Hv2Wov1iIlPbvxl/Oe247buvpg6nEiEkfnfv4uNR8vNWPoR/5OcAAAD//8gGhpo=") setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2c, "24a113204f6b67ba709543f5bc2b841301cea822c8abd4c2fdae4e5d15c36ce12a904dc27f6ed93c40d5a7b2"}, &(0x7f00000000c0)=0x34) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='kfree\x00', r9, 0x0, 0x9}, 0x18) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x1, 0x8) 1m14.463080328s ago: executing program 4 (id=2621): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f00000001c0)=ANY=[], 0x1, 0x54a, &(0x7f0000000580)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1m14.346027213s ago: executing program 4 (id=2622): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0xae}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000780)='GPL\x00', 0x401, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x78) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r6, 0x0, 0x0, 0x1, 0x3000) msgrcv(r6, 0x0, 0x0, 0x1, 0x0) msgsnd(r6, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgrcv(r6, &(0x7f00000001c0)={0x0, ""/246}, 0xfe, 0x3, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") 1m14.202856489s ago: executing program 4 (id=2623): syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011}) 1m14.202530729s ago: executing program 33 (id=2623): syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011}) 1m13.288807968s ago: executing program 5 (id=2637): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0xa7, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 1m13.142682485s ago: executing program 5 (id=2639): pipe2(&(0x7f0000001cc0), 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xd, 0x9, 0x17, 0x660fbfdb}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000006000000050000000000000700000000000000000600000d0000000003000000010000000a000000010000000e000000040000000100000003000000090000000300000002000000050000000e0000000000000700000000003000610000aa5d8bb2325e1961b46277ef45fc"], &(0x7f0000000200)=""/73, 0x72, 0x49, 0x0, 0x6, 0x10000}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="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", 0x14c}], 0x1}, 0x20048812) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x40}], 0x1, 0x2, 0x0) 1m12.278326632s ago: executing program 5 (id=2649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f00000001c0)=ANY=[], 0x1, 0x54a, &(0x7f0000000580)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f00000002c0)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26, 0x0) 1m12.238044004s ago: executing program 5 (id=2650): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x840) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x9, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24068091}, 0x1004) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000400000080000000040000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff888237d0a000) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532302c00ca4faae4ec31cda85b753c67282c41ac26c7b5fabd8c35070bf28696b6e5b5a6fa57afc6772c9c3bf5ce4094029ce3b35650085a166cc965eba9cbb19dfddda01d2c1960e5987d7a8da4266f82d665237d601344ba"]) io_uring_setup(0x423, &(0x7f0000000500)={0x0, 0xa039, 0x4000, 0x2, 0x24f, 0x0, r7}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='io_uring_defer\x00', r8, 0x0, 0xa}, 0x18) 1m9.189660776s ago: executing program 5 (id=2689): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0xfffffffb, 0x0}, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x9, 0x3, 0xfc, 0x0, 0x4, 0x20501, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xd07, 0x7}, 0x103a28, 0xa, 0x80, 0x1, 0xf0a2, 0x20009, 0x8, 0x0, 0x7fff, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$eJzs3TtoJHUcB/Df7CMPEyRqI4gPEBENhFgIgo02CoEQgoigQkTEShIhJthlrWwstFZJZRPEztyVxzXhmoNrc3cpcs0VF664cMVdscfs7OY2yYbsZV8h8/nAZua/+38t7Pc/m5CZCSC3JiLio4goRsRkRJQjImmu8Eb2mKgX10e3FiKq1c/uJ7V6WTnTaDcWEZWI+CCi1HhtdfOr3Yfbn77920r5rX82vxzt1/trtre7M7v/99yv/8+8t1qoPzde3za/j25KWjxXSiJe7MVg50RSGvQMaMf8z//dTHP/UkS8Wct/OQr1yP6+PHS1HO/+dVLbP+7deKWfcwW6r1otp8fAShXInULtO3BSmIqIbL9QmJrKvsPfKibxw9LyT5PfL60sfjfolQroSNNv3eMRO59cHr40diT/d4tZ/tvyfq8mCpzJcHvV0vx/Pr9xO93fL/Z4TsD58Gq2SfM/+c3aOyH/kDvyD/l1kP9Z+Ye8cfyHC+CM2ZV/uKhO//da+Yf8kn+4wMqNnUrLl+Uf8kv+Ib+e5n8kzX/jDwZDA54W0AfNx38AIF+qw4M+AxkYlEGvPwAAAAAAAAAAAAAAAAAAwHHro1sLjUe/xrz2Z8TexxFROjx+dgvTYu1+xBEjtZ/PPUjSageSrFlHvn69ww469G+Xz76ea/Perw3P3+nu+M/q+mu96feXw8UTL4a/thhRSStPl0rHP/9J/fN3qhP7f+GUhuVv2xugW5Ij5Q+/6O/4Rz3eGOz4M9sRV9L1Z7rV+leIl2vb1uvPePMlls/ox0cddgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDfPAkAAP//Z9RrGg==") mkdirat(r5, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc9) listxattr(&(0x7f0000006440)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r6 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r6, &(0x7f0000000040)="0600", 0x2) sendfile(r6, r6, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) pivot_root(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000500000000000000001000009500000000000000950000000000cc0cc69297063fc7118fb255c0af971dd6fb563877478240d6d7753de0c0cc220bfcdbe58f064048aa161313b10ad77d210ff0a5e2e9ed49ec6f077f0fe04271a23a69714c0beb90c0d2035b4c0d82b3add03f419a39c3e938e7b37e"], &(0x7f00000002c0)='syzkaller\x00', 0x7f, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x25, '\x00', r2, @fallback, r8, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xd, 0x7fff, 0xfff}, 0x10, 0xffffffffffffffff, r4, 0x4, &(0x7f0000000400)=[r8], &(0x7f0000000440)=[{0x2, 0x4, 0xf, 0x2}, {0x1, 0x2, 0x3, 0x8}, {0x2, 0x3, 0x3, 0xb}, {0x4, 0x1, 0x5, 0xa}], 0x10, 0xfc5}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000000009000200", @ANYBLOB="d5"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x7fff}, 0x18) r13 = getpid() syz_pidfd_open(r13, 0x0) 1m9.143570167s ago: executing program 34 (id=2689): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0xfffffffb, 0x0}, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x9, 0x3, 0xfc, 0x0, 0x4, 0x20501, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xd07, 0x7}, 0x103a28, 0xa, 0x80, 0x1, 0xf0a2, 0x20009, 0x8, 0x0, 0x7fff, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") mkdirat(r5, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc9) listxattr(&(0x7f0000006440)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r6 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r6, &(0x7f0000000040)="0600", 0x2) sendfile(r6, r6, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) pivot_root(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000500000000000000001000009500000000000000950000000000cc0cc69297063fc7118fb255c0af971dd6fb563877478240d6d7753de0c0cc220bfcdbe58f064048aa161313b10ad77d210ff0a5e2e9ed49ec6f077f0fe04271a23a69714c0beb90c0d2035b4c0d82b3add03f419a39c3e938e7b37e"], &(0x7f00000002c0)='syzkaller\x00', 0x7f, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x25, '\x00', r2, @fallback, r8, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xd, 0x7fff, 0xfff}, 0x10, 0xffffffffffffffff, r4, 0x4, &(0x7f0000000400)=[r8], &(0x7f0000000440)=[{0x2, 0x4, 0xf, 0x2}, {0x1, 0x2, 0x3, 0x8}, {0x2, 0x3, 0x3, 0xb}, {0x4, 0x1, 0x5, 0xa}], 0x10, 0xfc5}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000000009000200", @ANYBLOB="d5"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x7fff}, 0x18) r13 = getpid() syz_pidfd_open(r13, 0x0) 4.86809953s ago: executing program 3 (id=3457): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70833ae628e0cb69ffdf8ff00000000bfa200000000000007020000f8ffffebb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022a287000fddbdf251800000008000700020000000c00028008000200001000000800070000800000cd5579daa6e42e3cca71ab98639fa298dc5a16e80ef12190ad8d2a51bf62b0fa96136554cb5a1d091d124fb032ccab3b6c62bfac1d8074cde9b6901188a3011d82ab9e2dceb7518465ad"], 0x30}, 0x1, 0x0, 0x0, 0x40815}, 0x44001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x18) syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0xc4642, 0x1eb) writev(r7, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000f00)=ANY=[@ANYRESDEC=r6, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRES16=r6, @ANYRES16=r2, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES8=r4, @ANYBLOB="714a03dce15adb40fd992c329d4e3d3b31282d54ff6e4c44f890e538a1217cf9eb57c85039ae4e03e0cce6ce9252253f4c0e2882d858297384df6105fcb7118a25edf43a2f2ecc16071af3c4a0e642b39bda112c1da9df561698ad9e85a9118fc55dfaed44bae016fbb32d73eb00b1d1e3bfd5ae62db785b1b7153e3c378d8096d486628732a7a727507a59b3c231b3c265815dafb5a399b0bfa2f345930feca0028109bc569aabf8007cf5f6e2bbfca7c0509dc7f2b7423b69f5b5f198b23b0c7fe25f7a2ba5b74de126397e9130491914c359c21042bd33f225660aaa58766fd7268f0bbfc4b150e8f3cd53d948f120e986113134dfe"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) pipe2$9p(0x0, 0x980) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df03558083906669027d61dcc3a633bb0b1250b5a293c3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) io_uring_enter(0xffffffffffffffff, 0x27e2, 0x0, 0x0, 0x0, 0x0) 4.181362959s ago: executing program 3 (id=3463): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="74726100003d0400008066646e6f3d", @ANYBLOB="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", @ANYBLOB=',wfdno=', @ANYRES32=r0, @ANYBLOB=',\x00']) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000006c0)="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") symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) io_setup(0x8, &(0x7f00000001c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r3, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x580, 0x370, 0x1170, 0x1398, 0x370, 0x1170, 0x4b0, 0x1398, 0x1398, 0x4b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0xffffffff], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x308, 0x370, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x7, 0x891, 0x60, 0x9, 0x6, 0x80, 0x1, 0x6, 0x40}, {0x6}}}, @common=@inet=@recent1={{0x108}, {0xffffffff, 0x1, 0x4, 0x80, 'syz0\x00', 0x40, [0xffffff00, 0xffffff]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x3, 0x0, [0x3ff, 0x5, 0x4, 0x400, 0x268c, 0x1, 0x4, 0x7, 0x5, 0xfc5, 0x4, 0x2, 0x8, 0x6, 0xfffb, 0x63d7], 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e1e, @private=0xa010101}], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgKSFSkQEBzsIBpdGhTjokAxWYprFiFiR0llw0EFwcJCU6OzLP6D4BuIidnYUI4hCnCSjOBcUl0wprU+hrV3aYkp/fD5LuPece08u3yfwvxYPPzWbzVgIoZn4+6e/Pc1PFHunxqZnQoiF70MI+S+/+LUSizp+u/U8WpeidTGRqe3fjL+cdtz23VdTh/GofhEP4YcQwuLjUfLfvo1P31nuKrm+sVzYXM0tPBTWnobnB/I9W/mlnZGDbHm2OzsXfVgX8dbMT9VGj++apefd9sG2aq2RuY760rGPmc9/68/573VV6pXGZP/JylC6s35Z3o5yf5U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwc5yV8n1jeXC5mpu4aGw9jQ8P5Dv2cov7YwcZMuz3dm5+FvfRbw181O10eO7Zul5t32wrVprZK6jvnTs3dGvf/yYv0QLfRX+mP9eV6VeaUz2n6wMpTvrl+XtKPfX9/kDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyl/ESxd2pseiaEWPgshPDN/Xd9v+w3E2/1WNR3Hv2Wov1iIlPbvxl/Oe247buvpg6nEiEkfnfv4uNR8vNWPoR/5OcAAAD//8gGhpo=") setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2c, "24a113204f6b67ba709543f5bc2b841301cea822c8abd4c2fdae4e5d15c36ce12a904dc27f6ed93c40d5a7b2"}, &(0x7f00000000c0)=0x34) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='kfree\x00', r9, 0x0, 0x9}, 0x18) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x1, 0x8) 3.146244354s ago: executing program 3 (id=3473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r2, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc131b8e11e775", 0x1c) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) gettid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 2.989953281s ago: executing program 7 (id=3475): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0xc}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="28974fd5137e257ff30af2ee34a66f2b32ef98df3e0761ee8eded843244fbbb10f89ef1b986ef2bf17483d2a43a4bf660bb7a7f4bbe9793a5748937b1bc2fe70f80235852185470bad5493a4625c0bd39f58cb2922165f569880f0af", &(0x7f0000000100)=""/155, &(0x7f0000000080)="a3a791d34e6b9deb2465b1f4ed494698cabf371ddc07be516cf3", &(0x7f00000001c0)="8fc2a5eb89ac3812b127f005dd26520110d0b480b4a48638e951b3c1817ab19200077644d9fbf66bed7dc872ff3fc21d6536cc25437fb8c6d16a8bb7b764dd08eabe42220e60422817f93eb47b18dfd6ad15d70d08aabbf817056628d188ed8a3673561c4fb687823a16e2c2818c77f5e5a105bebb4d02fea6d117a95b421fb00305ec81ace36efb732fae72508df907813d774019321dc994e6960f", 0x8, r0, 0x4}, 0x38) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCSIG(r1, 0x40045436, 0x25) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0xe72, 0x0, 0x51141, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xffffffff, 0x0, 0x0, @void, @value, @value=r2}, 0x50) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000026c0)={[{@numtail}, {@uni_xlateno}, {@shortname_win95}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_win95}, {@shortname_mixed}, {@uni_xlate}, {@fat=@usefree}, {@uni_xlate}, {@shortname_win95}, {@numtail}, {@numtail}, {@fat=@nfs_nostale_ro}, {@nonumtail}, {@shortname_mixed}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0x36b, &(0x7f0000000a00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r5, &(0x7f0000000e80)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x79, 0xb3, 0x1, 0x4, 0x2, 0x6, 0x7, 0x32e, 0x40, 0x1de, 0x7, 0xc40, 0x38, 0x1, 0x7, 0x8, 0xa1}, [{0x2, 0xff, 0x4, 0x800, 0x3, 0x3, 0x6, 0x7}]}, 0x78) sendfile(r5, r5, &(0x7f0000000000)=0x9, 0xffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x8, 0xd, 0x200, &(0x7f0000001500)="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"}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f00000003c0)={'nat\x00', 0x3f, "db573563c02533dcf03ddf74d44c00f3c336d10b6eb844b804c6766405767df92db740ea43f676bff02b6323bd07a204bff31416f7bb899b858da8a81e1592"}, &(0x7f0000000340)=0x63) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r7 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0), &(0x7f0000000140)) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000380)=[r8], 0x1) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000080), 0x8) r10 = openat(0xffffffffffffffff, 0x0, 0x981, 0x108) getsockname$llc(r10, &(0x7f0000000100), &(0x7f0000000880)=0x10) unshare(0x22020500) 2.77776736s ago: executing program 7 (id=3476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0xc, [@fwd={0xa}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x1}, @ptr={0xf, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xb, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x8}, {0xf, 0x3}]}, @union={0x4, 0x2, 0x0, 0x5, 0x0, 0x2, [{0xe, 0x2, 0x2}, {0x3, 0x5, 0x7}]}]}, {0x0, [0x2e, 0x0, 0x5f, 0x0, 0x5f, 0x2e, 0x30, 0x0, 0x61, 0x5f]}}, &(0x7f0000000300)=""/63, 0xa0, 0x3f, 0x0, 0x6}, 0x28) 2.713458023s ago: executing program 7 (id=3477): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES32], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 2.634475226s ago: executing program 7 (id=3479): setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x3) listen(0xffffffffffffffff, 0xfffffffc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x272) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) 2.633584386s ago: executing program 1 (id=3480): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4001) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002080)=@newtfilter={0xa0, 0x2c, 0xd27, 0x3, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x5}, {}, {0x1c, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x70, 0x2, [@TCA_FLOWER_ACT={0x6c, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x34, 0x1a, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.445209294s ago: executing program 3 (id=3481): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0x43, 0xa0, 0xe0, 0x98, 0x220, 0x178, 0x178, 0x220, 0x178, 0x49, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x2, 0x3a}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlabel={{0x28}, {0x3, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x80, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xff, '\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x2e, 0x1, 0x18}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ipvlan1\x00', {0x2, 0x7, 0x0, 0x8005, 0xc227, 0x9, 0xee, 0x20, 0x40}, {0x562}}}, @common=@addrtype={{0x30}, {0x135, 0x50c, 0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x5ab, 0x0, 'netbios-ns\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="8e1958faef30ab99923a1025e8e949961a26a7db0fe54d393d163bd7cf97386c409b9e6d6a4861cf4297073a0e6f64ac3e829424195436074bde277d72d4880caa2ac5566d119355728a48f2c03275b28c4655f58013fa92bb4cbac5e538e3236bb13fc140b7abd71f78cb50d1b954843e614623fbe7ee876c6fdab81bbc9024fb77044a54467115a9870c1aff5f0404b80279bb190b52226aa7ae0f008485919955e96d0d5b861e6f0fa388b88ed9fec18a3858ab174bb7cb9b82cd7109c719ca1bfa98fe", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.023428073s ago: executing program 6 (id=3487): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 1.945044276s ago: executing program 6 (id=3488): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0xc, [@fwd={0xa}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x1}, @ptr={0xf, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xb, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x8}, {0xf, 0x3}]}, @union={0x4, 0x2, 0x0, 0x5, 0x0, 0x2, [{0xe, 0x2, 0x2}, {0x3, 0x5, 0x7}]}]}, {0x0, [0x2e, 0x0, 0x5f, 0x0, 0x5f, 0x2e, 0x30, 0x0, 0x61, 0x5f]}}, &(0x7f0000000300)=""/63, 0xa0, 0x3f, 0x0, 0x6}, 0x28) 1.870681939s ago: executing program 6 (id=3489): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES32], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 1.870171589s ago: executing program 6 (id=3490): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70833ae628e0cb69ffdf8ff00000000bfa200000000000007020000f8ffffebb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022a287000fddbdf251800000008000700020000000c00028008000200001000000800070000800000cd5579daa6e42e3cca71ab98639fa298dc5a16e80ef12190ad8d2a51bf62b0fa96136554cb5a1d091d124fb032ccab3b6c62bfac1d8074cde9b6901188a3011d82ab9e2dceb7518465ad"], 0x30}, 0x1, 0x0, 0x0, 0x40815}, 0x44001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x18) syz_read_part_table(0x60e, &(0x7f00000007c0)="$eJzs3D9olGccB/DvJbk7o9A4OLnUOHQSiuLoDVWSq2IhnJZCcLD/EGmmCIGTHqbo0GaImEE6dpHCdYhxUjM4KQqdizi0CBlcCnaR2iFX7u4luUAplkZK8fMZ7ve8Lz+e7/uDZ30u/K8NpVysOtVeefeTv+3vjG2u5/Nhe2LyeKfT6ZxOSjmTcsbLb60kGcnWXbM/SWVgnxvf7Vz95rf3y+0np168c/b+wtDGntXsTrJrsDmjf/Up1X82Ka/Dcu3BWC3JYveh3lpb/yi5+XyicefkwtLKifKxz7rvLyUPi/7+wRjNhTRzMV/k45FXjvpqc1nakj9/Zba+2Kydf1xvrX3bfnpwfW99+Pa5Iy/3rV69dyiZ60ZMpXfYN1X+5eAD+ZcH8ufGr00vtY4euLXn+uHm3UeNZ8O/d/qKyPL25AIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Hosd3+uzNYXm7Xzj+utta9/+vGDm88nGndOLiytnKgc+7noe1jUkaJeSDMXU04yk5l8ntlXj5wuDebXHoxd3sj/Y2fy9OD63nr79rkjLydXr9471OsqZapbhrZj4q2WR9LLz+7+89z4teml1tEDt/ZcP9y8+6jxbLj/fqaaT3vjJqlu/2cAAAAAAAAAAAAAAAAAAADwhpuYPL5v6r3G6aSUMzuS/Ppl75Z9pzr6Q3o37/v2F7VS1Bs7+v8F0H5y6kXl7P2FX4pL8fOpZj7Jru+7nW9v5FzaGlve3Jn/0p8BAAD//83YiVM=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0xc4642, 0x1eb) writev(r7, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000f00)=ANY=[@ANYRESDEC=r6, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRES16=r6, @ANYRES16=r2, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES8=r4, @ANYBLOB="714a03dce15adb40fd992c329d4e3d3b31282d54ff6e4c44f890e538a1217cf9eb57c85039ae4e03e0cce6ce9252253f4c0e2882d858297384df6105fcb7118a25edf43a2f2ecc16071af3c4a0e642b39bda112c1da9df561698ad9e85a9118fc55dfaed44bae016fbb32d73eb00b1d1e3bfd5ae62db785b1b7153e3c378d8096d486628732a7a727507a59b3c231b3c265815dafb5a399b0bfa2f345930feca0028109bc569aabf8007cf5f6e2bbfca7c0509dc7f2b7423b69f5b5f198b23b0c7fe25f7a2ba5b74de126397e9130491914c359c21042bd33f225660aaa58766fd7268f0bbfc4b150e8f3cd53d948f120e986113134dfe"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) pipe2$9p(0x0, 0x980) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) io_uring_enter(0xffffffffffffffff, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1.751999924s ago: executing program 1 (id=3491): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) msgrcv(0x0, &(0x7f00000001c0)={0x0, ""/246}, 0xfe, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") 1.595188621s ago: executing program 3 (id=3492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x62, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000640)='devfreq_frequency\x00', r0, 0x0, 0x400}, 0x18) mount$bind(&(0x7f0000000840)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = semget(0x0, 0x0, 0x620) clock_gettime(0x5, &(0x7f0000000180)={0x0, 0x0}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) semtimedop(r4, &(0x7f0000000040)=[{0x1, 0x1}, {0x1, 0x3, 0x1000}], 0x2, &(0x7f00000001c0)={r5, r6+60000000}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r9, r8, 0x25, 0x2, @void}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.532143634s ago: executing program 3 (id=3494): setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x3) listen(0xffffffffffffffff, 0xfffffffc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x272) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) 1.331162862s ago: executing program 6 (id=3498): pipe2(&(0x7f0000001cc0), 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xd, 0x9, 0x17, 0x660fbfdb}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000006000000050000000000000700000000000000000600000d0000000003000000010000000a000000010000000e000000040000000100000003000000090000000300000002000000050000000e0000000000000700000000003000610000aa5d8bb2325e1961b46277ef45fcc51b44b433ec97e43f8eacc9ce9b2c6057a0a9a640949fafa80fbf2824d6762250757bfd4ab53fe4f7ba"], &(0x7f0000000200)=""/73, 0x72, 0x49, 0x0, 0x6, 0x10000}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="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", 0x138}], 0x1}, 0x20048812) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x40}], 0x1, 0x2, 0x0) 1.298722304s ago: executing program 0 (id=3499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 901.986961ms ago: executing program 1 (id=3500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0xc, [@fwd={0xa}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x1}, @ptr={0xf, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xb, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x8}, {0xf, 0x3}]}, @union={0x4, 0x2, 0x0, 0x5, 0x0, 0x2, [{0xe, 0x2, 0x2}, {0x3, 0x5, 0x7}]}]}, {0x0, [0x2e, 0x0, 0x5f, 0x0, 0x5f, 0x2e, 0x30, 0x0, 0x61, 0x5f]}}, &(0x7f0000000300)=""/63, 0xa0, 0x3f, 0x0, 0x6}, 0x28) 846.533064ms ago: executing program 1 (id=3501): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00'}, 0x18) syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x2000300, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe2$9p(0x0, 0x980) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df03558083906669027d61dcc3a633bb0b1250b5a293c3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) 819.265814ms ago: executing program 1 (id=3502): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc131b8e11e775", 0x1c) sendfile(r1, r0, 0x0, 0x3ffff) 552.126096ms ago: executing program 1 (id=3503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="c50f00000008000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a008421"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x3, 0x0, 0xc, 0x2, 0xd, 0x30, 0x110}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x10, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0x1, 0x0) 474.050979ms ago: executing program 6 (id=3504): r0 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') r6 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x500) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffc, 0x2, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000008c0)="52ef", 0x0, 0x0, 0x0, 0x0, 0x0}) readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r8, 0x0, 0x0, 0x0, 0x0, 0x0) 420.628142ms ago: executing program 0 (id=3505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x62, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000640)='devfreq_frequency\x00', r0, 0x0, 0x400}, 0x18) mount$bind(&(0x7f0000000840)='./file0\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = semget(0x0, 0x0, 0x620) clock_gettime(0x5, &(0x7f0000000180)={0x0, 0x0}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) semtimedop(r4, &(0x7f0000000040)=[{0x1, 0x1}, {0x1, 0x3, 0x1000}], 0x2, &(0x7f00000001c0)={r5, r6+60000000}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r9, r8, 0x25, 0x2, @void}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) 405.590692ms ago: executing program 0 (id=3506): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0xc}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="28974fd5137e257ff30af2ee34a66f2b32ef98df3e0761ee8eded843244fbbb10f89ef1b986ef2bf17483d2a43a4bf660bb7a7f4bbe9793a5748937b1bc2fe70f80235852185470bad5493a4625c0bd39f58cb2922165f569880f0af", &(0x7f0000000100)=""/155, &(0x7f0000000080)="a3a791d34e6b9deb2465b1f4ed494698cabf371ddc07be516cf3", &(0x7f00000001c0)="8fc2a5eb89ac3812b127f005dd26520110d0b480b4a48638e951b3c1817ab19200077644d9fbf66bed7dc872ff3fc21d6536cc25437fb8c6d16a8bb7b764dd08eabe42220e60422817f93eb47b18dfd6ad15d70d08aabbf817056628d188ed8a3673561c4fb687823a16e2c2818c77f5e5a105bebb4d02fea6d117a95b421fb00305ec81ace36efb732fae72508df907813d774019321dc994e6960f", 0x8, r0, 0x4}, 0x38) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCSIG(r1, 0x40045436, 0x25) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0xe72, 0x0, 0x51141, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xffffffff, 0x0, 0x0, @void, @value, @value=r2}, 0x50) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000026c0)={[{@numtail}, {@uni_xlateno}, {@shortname_win95}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_win95}, {@shortname_mixed}, {@uni_xlate}, {@fat=@usefree}, {@uni_xlate}, {@shortname_win95}, {@numtail}, {@numtail}, {@fat=@nfs_nostale_ro}, {@nonumtail}, {@shortname_mixed}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0x36b, &(0x7f0000000a00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r5, &(0x7f0000000e80)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x79, 0xb3, 0x1, 0x4, 0x2, 0x6, 0x7, 0x32e, 0x40, 0x1de, 0x7, 0xc40, 0x38, 0x1, 0x7, 0x8, 0xa1}, [{0x2, 0xff, 0x4, 0x800, 0x3, 0x3, 0x6, 0x7}]}, 0x78) sendfile(r5, r5, &(0x7f0000000000)=0x9, 0xffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000ed4d9a4a091c6a55000100100000000018127285cb0520c6a1ad28a39b63c05709bfc4000000001489169f320d6869516d05392ffef5613265d92022f6a1fe3650b9a82eba379f423c2222934d3f11", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f00000003c0)={'nat\x00', 0x3f, "db573563c02533dcf03ddf74d44c00f3c336d10b6eb844b804c6766405767df92db740ea43f676bff02b6323bd07a204bff31416f7bb899b858da8a81e1592"}, &(0x7f0000000340)=0x63) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r9 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0), &(0x7f0000000140)) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000380)=[r10], 0x1) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r11, &(0x7f0000000080), 0x8) openat(0xffffffffffffffff, 0x0, 0x981, 0x108) unshare(0x22020500) 296.164687ms ago: executing program 0 (id=3507): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f0000000040)=@v3={0x3000000, [{0x8, 0x8000}, {0x2, 0x2}], 0xee00}, 0x18, 0x1) r0 = creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf21963aaf523cb02) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000380)={@empty, @private, 0x0}, &(0x7f00000003c0)=0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=r0, @ANYBLOB="f1ffffff000000030000", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="01000000040000000400"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f0000000600)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x1, 0x8, 0x1, {0xffff}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000440)=@sr0, 0x0, &(0x7f0000000480)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) io_uring_enter(r3, 0x29ab, 0xd480, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) setxattr(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000240)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4028010}, 0x0) pivot_root(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00') sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x2400c0c1) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='i2c_result\x00'}, 0x18) 155.908373ms ago: executing program 0 (id=3508): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0xc}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="28974fd5137e257ff30af2ee34a66f2b32ef98df3e0761ee8eded843244fbbb10f89ef1b986ef2bf17483d2a43a4bf660bb7a7f4bbe9793a5748937b1bc2fe70f80235852185470bad5493a4625c0bd39f58cb2922165f569880f0af", &(0x7f0000000100)=""/155, &(0x7f0000000080)="a3a791d34e6b9deb2465b1f4ed494698cabf371ddc07be516cf3", &(0x7f00000001c0)="8fc2a5eb89ac3812b127f005dd26520110d0b480b4a48638e951b3c1817ab19200077644d9fbf66bed7dc872ff3fc21d6536cc25437fb8c6d16a8bb7b764dd08eabe42220e60422817f93eb47b18dfd6ad15d70d08aabbf817056628d188ed8a3673561c4fb687823a16e2c2818c77f5e5a105bebb4d02fea6d117a95b421fb00305ec81ace36efb732fae72508df907813d774019321dc994e6960f", 0x8, r0, 0x4}, 0x38) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCSIG(r1, 0x40045436, 0x25) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0xe72, 0x0, 0x51141, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xffffffff, 0x0, 0x0, @void, @value, @value=r2}, 0x50) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000026c0)={[{@numtail}, {@uni_xlateno}, {@shortname_win95}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_win95}, {@shortname_mixed}, {@uni_xlate}, {@fat=@usefree}, {@uni_xlate}, {@shortname_win95}, {@numtail}, {@numtail}, {@fat=@nfs_nostale_ro}, {@nonumtail}, {@shortname_mixed}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0x36b, &(0x7f0000000a00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r5, &(0x7f0000000e80)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x79, 0xb3, 0x1, 0x4, 0x2, 0x6, 0x7, 0x32e, 0x40, 0x1de, 0x7, 0xc40, 0x38, 0x1, 0x7, 0x8, 0xa1}, [{0x2, 0xff, 0x4, 0x800, 0x3, 0x3, 0x6, 0x7}]}, 0x78) sendfile(r5, r5, &(0x7f0000000000)=0x9, 0xffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000ed4d9a4a091c6a55000100100000000018127285cb0520c6a1ad28a39b63c05709bfc4000000001489169f320d6869516d05392ffef5613265d92022f6a1fe3650b9a82eba379f423c2222934d3f11", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x8, 0xd, 0x200, &(0x7f0000001500)="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"}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f00000003c0)={'nat\x00', 0x3f, "db573563c02533dcf03ddf74d44c00f3c336d10b6eb844b804c6766405767df92db740ea43f676bff02b6323bd07a204bff31416f7bb899b858da8a81e1592"}, &(0x7f0000000340)=0x63) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0), &(0x7f0000000140)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r10, &(0x7f0000000080), 0x8) openat(0xffffffffffffffff, 0x0, 0x981, 0x108) unshare(0x22020500) 53.320648ms ago: executing program 7 (id=3509): sigaltstack(&(0x7f0000000400)={0x0, 0x80000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000107b8af8ff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000a000000010000060400000003000000018000001000000000000001000000001100610400415f2e5f002e00d58a7e095bb2accb915d5a6e88c468b00c287fc2efbd855aaecd8b2239416d5f91a946827f887f51c21ccb95ff15ce35baa1853421c2c144ec6f88b776b3f383c4015265def5dd3b86fa9961f357ebd9274a37afe6da780c1212b981d3ab6bf1057ccc71aa78e66f519caecd983f86cc7f62fcc8a0662112cc21d6e8bc3b7f56fdf60978dbe28a113a0b625fdd09bdc22d13"], &(0x7f0000000300)=""/136, 0x44, 0x88, 0x1, 0x1, 0x10000}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 20.675109ms ago: executing program 7 (id=3510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r2, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc131b8e11e775", 0x1c) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) gettid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 0s ago: executing program 0 (id=3511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_delete(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) kernel console output (not intermixed with test programs): [T14555] ext4 filesystem being mounted at /582/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.449538][T14556] loop3: detected capacity change from 0 to 2048 [ 304.491516][T14565] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2969'. [ 304.501547][T14565] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2969'. [ 304.513008][T14556] Alternate GPT is invalid, using primary GPT. [ 304.519415][T14556] loop3: p2 p3 p7 [ 304.770100][T14576] loop7: detected capacity change from 0 to 512 [ 304.777412][T14576] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 304.823230][T14576] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 304.826147][T14578] loop0: detected capacity change from 0 to 1024 [ 304.832058][T14576] FAT-fs (loop7): Filesystem has been set read-only [ 304.845664][T14576] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 304.866641][T14578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 304.871620][T14576] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 304.888987][T14576] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 304.894247][T14578] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.911465][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.926027][T14576] netlink: 'syz.7.2972': attribute type 12 has an invalid length. [ 304.948290][T14583] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.963288][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 305.006161][T14583] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.060096][T14583] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.080625][T14593] xt_hashlimit: max too large, truncated to 1048576 [ 305.096176][T14593] can0: slcan on ttyS3. [ 305.110246][T14583] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.138249][T14593] can0 (unregistered): slcan off ttyS3. [ 305.155261][T14597] loop0: detected capacity change from 0 to 512 [ 305.171585][T14597] EXT4-fs (loop0): too many log groups per flexible block group [ 305.192456][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.202417][T14597] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 305.210966][T14597] EXT4-fs (loop0): mount failed [ 305.232061][T14605] loop7: detected capacity change from 0 to 2048 [ 305.237484][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.279843][ T2945] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.295466][ T2945] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.310345][ T3307] Alternate GPT is invalid, using primary GPT. [ 305.317138][ T3307] loop7: p2 p3 p7 [ 305.353627][T14605] Alternate GPT is invalid, using primary GPT. [ 305.360144][T14605] loop7: p2 p3 p7 [ 305.369172][T14618] IPv6: Can't replace route, no match found [ 305.924179][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 305.924209][ T29] audit: type=1326 audit(1764347883.050:16214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.0.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4794bff749 code=0x7ffc0000 [ 305.954329][ T29] audit: type=1326 audit(1764347883.050:16215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.0.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4794bff749 code=0x7ffc0000 [ 306.023579][T14639] loop0: detected capacity change from 0 to 2048 [ 306.079767][T14641] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2984'. [ 306.086551][ T29] audit: type=1326 audit(1764347883.120:16216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.0.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4794bff749 code=0x7ffc0000 [ 306.112439][ T29] audit: type=1326 audit(1764347883.120:16217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.0.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4794bff749 code=0x7ffc0000 [ 306.136085][ T29] audit: type=1326 audit(1764347883.120:16218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.0.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4794bff749 code=0x7ffc0000 [ 306.159888][ T29] audit: type=1326 audit(1764347883.120:16219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.0.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4794bff749 code=0x7ffc0000 [ 306.183748][ T29] audit: type=1326 audit(1764347883.120:16220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.0.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4794bff749 code=0x7ffc0000 [ 306.208016][ T29] audit: type=1326 audit(1764347883.120:16221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.0.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4794bff749 code=0x7ffc0000 [ 306.231807][ T29] audit: type=1326 audit(1764347883.120:16222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.0.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4794bff749 code=0x7ffc0000 [ 306.255489][ T29] audit: type=1326 audit(1764347883.120:16223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.0.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4794bff749 code=0x7ffc0000 [ 306.281376][ T3307] loop0: p1 < > p4 [ 306.300098][T14641] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2984'. [ 306.303037][ T3307] loop0: p4 size 8388608 extends beyond EOD, truncated [ 306.356852][T14646] loop3: detected capacity change from 0 to 2048 [ 306.364156][T14639] loop0: p1 < > p4 [ 306.368950][T14639] loop0: p4 size 8388608 extends beyond EOD, truncated [ 306.418931][ T3521] loop3: p1 < > p4 [ 306.431942][ T3521] loop3: p4 size 8388608 extends beyond EOD, truncated [ 306.452400][T14652] loop1: detected capacity change from 0 to 512 [ 306.464107][T14652] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 306.480126][T14646] loop3: p1 < > p4 [ 306.496467][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 306.505262][T14658] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2992'. [ 306.510284][ T3586] udevd[3586]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 306.517278][T14646] loop3: p4 size 8388608 extends beyond EOD, truncated [ 306.542929][ T3005] loop3: p1 < > p4 [ 306.547096][T14658] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2992'. [ 306.547577][ T3005] loop3: p4 size 8388608 extends beyond EOD, truncated [ 306.582297][T14652] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 306.591125][T14652] FAT-fs (loop1): Filesystem has been set read-only [ 306.599723][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 306.601956][ T7831] udevd[7831]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 306.622788][T14664] netlink: 'syz.1.2989': attribute type 12 has an invalid length. [ 306.623403][T14652] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 306.656368][T14666] vhci_hcd: invalid port number 23 [ 306.662641][ T3005] udevd[3005]: worker [3307] terminated by signal 33 (Unknown signal 33) [ 306.710754][ T3576] printk: udevd: 29 output lines suppressed due to ratelimiting [ 306.803642][T14674] loop1: detected capacity change from 0 to 512 [ 306.819401][T14674] EXT4-fs (loop1): too many log groups per flexible block group [ 306.827476][T14674] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 306.834339][T14674] EXT4-fs (loop1): mount failed [ 306.853533][T14673] loop3: detected capacity change from 0 to 512 [ 306.869002][T14673] EXT4-fs (loop3): too many log groups per flexible block group [ 306.876952][T14673] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 306.883858][T14673] EXT4-fs (loop3): mount failed [ 307.138433][T14680] loop6: detected capacity change from 0 to 1024 [ 307.149554][T14680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 307.161875][T14680] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.183052][T12850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 307.201251][T14684] usb usb8: usbfs: process 14684 (syz.6.2997) did not claim interface 0 before use [ 307.388827][T14695] xt_hashlimit: max too large, truncated to 1048576 [ 307.403592][T14695] can0: slcan on ttyS3. [ 307.448267][T14695] can0 (unregistered): slcan off ttyS3. [ 307.463495][T14697] loop0: detected capacity change from 0 to 512 [ 307.470591][T14697] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 307.497948][T14697] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 307.506744][T14697] FAT-fs (loop0): Filesystem has been set read-only [ 307.513772][T14697] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 307.526164][T14695] loop7: detected capacity change from 0 to 2048 [ 307.530524][T14697] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 307.548403][T14697] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 307.584487][T14695] Alternate GPT is invalid, using primary GPT. [ 307.591016][T14695] loop7: p2 p3 p7 [ 307.606774][T14697] netlink: 'syz.0.3003': attribute type 12 has an invalid length. [ 307.678753][T14716] loop0: detected capacity change from 0 to 2048 [ 307.719375][T14716] loop0: p1 < > p4 [ 307.723963][T14716] loop0: p4 size 8388608 extends beyond EOD, truncated [ 308.339491][T14735] loop6: detected capacity change from 0 to 2048 [ 308.388499][T14735] loop6: p1 < > p4 [ 308.399397][T14735] loop6: p4 size 8388608 extends beyond EOD, truncated [ 308.525475][T14738] lo speed is unknown, defaulting to 1000 [ 308.571092][T14754] loop1: detected capacity change from 0 to 512 [ 308.585799][T14738] chnl_net:caif_netlink_parms(): no params data found [ 308.601951][T14754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.615978][T14760] loop6: detected capacity change from 0 to 512 [ 308.618299][T14754] ext4 filesystem being mounted at /590/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.650646][T14760] EXT4-fs (loop6): too many log groups per flexible block group [ 308.684392][T14760] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 308.706357][T14738] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.713684][T14738] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.721087][T14760] EXT4-fs (loop6): mount failed [ 308.741812][T14738] bridge_slave_0: entered allmulticast mode [ 308.755903][T14738] bridge_slave_0: entered promiscuous mode [ 308.764555][ T2945] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.774394][ T2945] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 308.784149][ T2945] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 308.818491][T14738] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.825610][T14738] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.832949][T14738] bridge_slave_1: entered allmulticast mode [ 308.839524][T14738] bridge_slave_1: entered promiscuous mode [ 308.868610][ T2945] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.878448][ T2945] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 308.888863][ T2945] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 308.890648][T14773] xt_hashlimit: max too large, truncated to 1048576 [ 308.919247][T14738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.930067][T14773] can0: slcan on ttyS3. [ 308.931561][T14738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.956311][ T2945] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.966393][ T2945] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 308.976204][ T2945] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 308.988044][T14738] team0: Port device team_slave_0 added [ 308.994695][T14738] team0: Port device team_slave_1 added [ 309.000706][T14773] can0 (unregistered): slcan off ttyS3. [ 309.017174][T14738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.024229][T14738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.050227][T14738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.062006][T14738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.068559][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.069011][T14738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.078424][T14773] loop7: detected capacity change from 0 to 2048 [ 309.103939][T14738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.121751][ T2945] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.131642][ T2945] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 309.141486][ T2945] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 309.170923][T14773] Alternate GPT is invalid, using primary GPT. [ 309.177421][T14773] loop7: p2 p3 p7 [ 309.179476][T14738] hsr_slave_0: entered promiscuous mode [ 309.187283][T14738] hsr_slave_1: entered promiscuous mode [ 309.194093][T14738] debugfs: 'hsr0' already exists in 'hsr' [ 309.199910][T14738] Cannot create hsr debugfs directory [ 309.227577][ T2945] bridge_slave_1: left allmulticast mode [ 309.233331][ T2945] bridge_slave_1: left promiscuous mode [ 309.239208][ T2945] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.256610][ T2945] bridge_slave_0: left allmulticast mode [ 309.262338][ T2945] bridge_slave_0: left promiscuous mode [ 309.268012][ T2945] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.384817][ T2945] bond0 (unregistering): (slave 30): Releasing backup interface [ 309.402919][ T2945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.416958][ T2945] bond0 (unregistering): Released all slaves [ 309.460050][T14784] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.493909][ T2945] hsr_slave_0: left promiscuous mode [ 309.503035][ T2945] hsr_slave_1: left promiscuous mode [ 309.515636][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.523092][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.544845][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.552379][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.570504][ T2945] veth1_macvtap: left promiscuous mode [ 309.576219][ T2945] veth0_macvtap: left promiscuous mode [ 309.582624][ T2945] veth1_vlan: left promiscuous mode [ 309.588180][ T2945] veth0_vlan: left promiscuous mode [ 309.687178][ T2945] team0 (unregistering): Port device team_slave_1 removed [ 309.699293][ T2945] team0 (unregistering): Port device team_slave_0 removed [ 309.725275][T14797] __nla_validate_parse: 7 callbacks suppressed [ 309.725345][T14797] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3030'. [ 309.741490][T14797] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3030'. [ 309.764825][ T10] lo speed is unknown, defaulting to 1000 [ 309.770724][ T10] infiniband syz0: ib_query_port failed (-19) [ 309.786951][T14784] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.837192][T14776] tipc: Enabling of bearer rejected, already enabled [ 309.871347][T14784] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.983094][T14784] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.090155][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.110997][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.141588][ T2945] IPVS: stop unused estimator thread 0... [ 310.193904][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.210567][T14816] smc: net device bond0 applied user defined pnetid SYZ0 [ 310.212637][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.230902][T14816] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3037'. [ 310.278839][T14816] syzkaller1: entered promiscuous mode [ 310.284467][T14816] syzkaller1: entered allmulticast mode [ 310.319156][T14738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.332447][T14738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.341869][T14804] tipc: Enabling of bearer rejected, already enabled [ 310.349767][T14738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.362306][T14738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.441134][T14738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.467424][T14738] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.477831][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.485054][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.506901][T14738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.517494][T14738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.533833][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.541011][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.552527][T14831] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3041'. [ 310.562261][T14831] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3041'. [ 310.575864][T14829] loop7: detected capacity change from 0 to 2048 [ 310.610489][T14835] loop6: detected capacity change from 0 to 2048 [ 310.631749][T14738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.639272][T14829] loop7: p1 < > p4 [ 310.644571][T14829] loop7: p4 size 8388608 extends beyond EOD, truncated [ 310.659037][T14835] loop6: p1 < > p4 [ 310.664200][T14835] loop6: p4 size 8388608 extends beyond EOD, truncated [ 310.724850][T14738] veth0_vlan: entered promiscuous mode [ 310.733547][T14738] veth1_vlan: entered promiscuous mode [ 310.750274][T14738] veth0_macvtap: entered promiscuous mode [ 310.758131][T14738] veth1_macvtap: entered promiscuous mode [ 310.769499][T14738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.780001][T14738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.792017][ T2892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.801933][ T2892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.811523][ T2892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.821904][ T2892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.089215][T14856] loop0: detected capacity change from 0 to 128 [ 311.130021][T14858] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3047'. [ 311.159137][T14858] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3047'. [ 311.173508][ T29] kauditd_printk_skb: 931 callbacks suppressed [ 311.173526][ T29] audit: type=1326 audit(1764347888.300:17155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.1.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b2ddf749 code=0x7ffc0000 [ 311.225651][ T29] audit: type=1326 audit(1764347888.330:17156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.1.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b2ddf749 code=0x7ffc0000 [ 311.249597][ T29] audit: type=1326 audit(1764347888.330:17157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.1.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b2ddf749 code=0x7ffc0000 [ 311.273466][ T29] audit: type=1326 audit(1764347888.330:17158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.1.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73b2ddf749 code=0x7ffc0000 [ 311.297142][ T29] audit: type=1326 audit(1764347888.330:17159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.1.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b2ddf749 code=0x7ffc0000 [ 311.320849][ T29] audit: type=1326 audit(1764347888.330:17160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.1.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b2ddf749 code=0x7ffc0000 [ 311.344535][ T29] audit: type=1326 audit(1764347888.330:17161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.1.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b2ddf749 code=0x7ffc0000 [ 311.368355][ T29] audit: type=1326 audit(1764347888.330:17162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.1.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f73b2ddf749 code=0x7ffc0000 [ 311.392040][ T29] audit: type=1326 audit(1764347888.330:17163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.1.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b2ddf749 code=0x7ffc0000 [ 311.415689][ T29] audit: type=1326 audit(1764347888.330:17164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.1.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b2ddf749 code=0x7ffc0000 [ 311.452269][T14869] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3050'. [ 311.489770][T14867] loop7: detected capacity change from 0 to 512 [ 311.496858][T14867] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 311.524250][T14867] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 311.533103][T14867] FAT-fs (loop7): Filesystem has been set read-only [ 311.541214][T14873] xt_hashlimit: max too large, truncated to 1048576 [ 311.542961][T14867] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 311.580206][T14873] can0: slcan on ttyS3. [ 311.582255][T14856] syz.0.3046: attempt to access beyond end of device [ 311.582255][T14856] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 311.595195][T14874] netlink: 'syz.7.3049': attribute type 12 has an invalid length. [ 311.597924][T14856] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 311.619118][T14861] syz.0.3046: attempt to access beyond end of device [ 311.619118][T14861] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 311.621949][T14867] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 311.632605][T14861] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 311.641626][T14867] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 311.708717][T14873] can0 (unregistered): slcan off ttyS3. [ 311.722193][T14883] loop7: detected capacity change from 0 to 512 [ 311.737940][T14873] loop1: detected capacity change from 0 to 2048 [ 311.766699][T14883] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.3054: error while reading EA inode 32 err=-116 [ 311.789474][T14883] EXT4-fs (loop7): Remounting filesystem read-only [ 311.796254][T14883] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 311.819480][T14883] EXT4-fs (loop7): 1 orphan inode deleted [ 311.834037][T14873] Alternate GPT is invalid, using primary GPT. [ 311.840449][T14873] loop1: p2 p3 p7 [ 311.875523][T14883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.890008][T14883] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.992027][T14881] tipc: Started in network mode [ 311.996989][T14881] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 312.006134][T14881] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 312.014413][T14881] tipc: Enabled bearer , priority 10 [ 312.441277][T14897] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3058'. [ 312.450775][T14897] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3058'. [ 312.480206][T14899] loop1: detected capacity change from 0 to 512 [ 312.487289][T14899] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 312.522951][T14899] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 312.531901][T14899] FAT-fs (loop1): Filesystem has been set read-only [ 312.538975][T14899] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 312.554792][T14899] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 312.563770][T14899] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 312.588599][T14899] netlink: 'syz.1.3059': attribute type 12 has an invalid length. [ 312.711306][T14905] loop6: detected capacity change from 0 to 512 [ 312.730914][T14905] EXT4-fs (loop6): too many log groups per flexible block group [ 312.744867][T14905] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 312.764508][T14905] EXT4-fs (loop6): mount failed [ 312.869624][T14928] usb usb8: usbfs: process 14928 (syz.7.3067) did not claim interface 0 before use [ 312.945910][T14932] loop7: detected capacity change from 0 to 2048 [ 312.955256][T14913] chnl_net:caif_netlink_parms(): no params data found [ 312.959464][T14935] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 312.998880][T14932] loop7: p1 < > p4 [ 313.004470][T14932] loop7: p4 size 8388608 extends beyond EOD, truncated [ 313.021896][ T2892] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.047156][T14940] loop0: detected capacity change from 0 to 2048 [ 313.061204][T14913] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.068377][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.075655][T14913] bridge_slave_0: entered allmulticast mode [ 313.082452][T14913] bridge_slave_0: entered promiscuous mode [ 313.091007][ T2892] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.101305][T14946] loop3: detected capacity change from 0 to 512 [ 313.102422][T14940] loop0: p1 < > p4 [ 313.114815][T14913] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.115192][T14940] loop0: p4 size 8388608 extends beyond EOD, truncated [ 313.121936][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.131072][T14946] EXT4-fs (loop3): too many log groups per flexible block group [ 313.141299][T14913] bridge_slave_1: entered allmulticast mode [ 313.150424][T14913] bridge_slave_1: entered promiscuous mode [ 313.156922][ T3394] tipc: Node number set to 1 [ 313.169381][ T2892] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.179534][T14946] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 313.187181][T14946] EXT4-fs (loop3): mount failed [ 313.195756][T14913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.206875][T14913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.225719][ T2892] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.244472][T14913] team0: Port device team_slave_0 added [ 313.250746][T14950] loop7: detected capacity change from 0 to 2048 [ 313.251845][T14913] team0: Port device team_slave_1 added [ 313.275849][T14913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.277191][T14950] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.282933][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.321128][T14913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.333649][T14913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.340680][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.366660][T14913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.412486][T14913] hsr_slave_0: entered promiscuous mode [ 313.420745][T14913] hsr_slave_1: entered promiscuous mode [ 313.426723][T14913] debugfs: 'hsr0' already exists in 'hsr' [ 313.432518][T14913] Cannot create hsr debugfs directory [ 313.487364][ T2892] bridge_slave_1: left allmulticast mode [ 313.493275][ T2892] bridge_slave_1: left promiscuous mode [ 313.499270][ T2892] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.507507][ T2892] bridge_slave_0: left allmulticast mode [ 313.513232][ T2892] bridge_slave_0: left promiscuous mode [ 313.518992][ T2892] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.527136][T13145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.624205][ T2892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.641205][ T2892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.665235][ T2892] bond0 (unregistering): Released all slaves [ 313.677719][T14966] usb usb8: usbfs: process 14966 (syz.0.3078) did not claim interface 0 before use [ 313.711714][ T2892] tipc: Disabling bearer [ 313.717114][ T2892] tipc: Left network mode [ 313.724287][ T2892] hsr_slave_0: left promiscuous mode [ 313.730425][ T2892] hsr_slave_1: left promiscuous mode [ 313.736541][ T2892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.744041][ T2892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.751752][ T2892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.759185][ T2892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.771603][ T2892] veth1_macvtap: left promiscuous mode [ 313.777462][ T2892] veth0_macvtap: left promiscuous mode [ 313.783908][ T2892] veth1_vlan: left promiscuous mode [ 313.789341][ T2892] veth0_vlan: left promiscuous mode [ 313.900808][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 314.344864][T14913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.353688][T14913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.362760][T14913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 314.371856][T14913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.411431][T14913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.424456][T14913] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.434105][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.441389][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.452904][ T2892] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.460024][ T2892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.528790][T14913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.607280][T15001] loop0: detected capacity change from 0 to 512 [ 314.608556][T15000] loop7: detected capacity change from 0 to 2048 [ 314.622142][T15001] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.628301][T14913] veth0_vlan: entered promiscuous mode [ 314.646314][T14913] veth1_vlan: entered promiscuous mode [ 314.656511][T15000] loop7: p1 < > p4 [ 314.657540][T15001] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 314.661208][T15000] loop7: p4 size 8388608 extends beyond EOD, truncated [ 314.669682][T15001] FAT-fs (loop0): Filesystem has been set read-only [ 314.688776][T14913] veth0_macvtap: entered promiscuous mode [ 314.694805][T15001] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 314.698363][T14913] veth1_macvtap: entered promiscuous mode [ 314.720829][T15001] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 314.731094][T15003] netlink: 'syz.0.3084': attribute type 12 has an invalid length. [ 314.741270][T15001] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 314.767196][T14913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.780501][T14913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.797189][ T2496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.807326][ T2496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.829498][ T2945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.843400][ T2892] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.873262][T15012] usb usb8: usbfs: process 15012 (syz.6.3089) did not claim interface 0 before use [ 314.915770][T15016] xt_hashlimit: max too large, truncated to 1048576 [ 314.947648][T15016] can0: slcan on ttyS3. [ 314.998257][T15016] can0 (unregistered): slcan off ttyS3. [ 315.008368][T15025] loop1: detected capacity change from 0 to 512 [ 315.019223][T15025] EXT4-fs (loop1): too many log groups per flexible block group [ 315.027009][T15025] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 315.033964][T15025] EXT4-fs (loop1): mount failed [ 315.067122][T15016] loop6: detected capacity change from 0 to 2048 [ 315.100256][T15016] Alternate GPT is invalid, using primary GPT. [ 315.106768][T15016] loop6: p2 p3 p7 [ 315.354500][T15032] tipc: Enabling of bearer rejected, already enabled [ 315.458518][T15039] __nla_validate_parse: 6 callbacks suppressed [ 315.458565][T15039] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3094'. [ 315.474076][T15039] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3094'. [ 315.867338][T15049] loop6: detected capacity change from 0 to 512 [ 315.874542][T15049] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 315.902394][T15049] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 315.911196][T15049] FAT-fs (loop6): Filesystem has been set read-only [ 315.918575][T15049] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 315.936167][T15049] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 315.945666][ T4127] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 315.946035][T15049] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 315.964980][T15051] netlink: 'syz.6.3099': attribute type 12 has an invalid length. [ 315.975981][T15053] usb usb8: usbfs: process 15053 (syz.1.3100) did not claim interface 0 before use [ 316.042296][T15061] usb usb8: usbfs: process 15061 (syz.1.3103) did not claim interface 0 before use [ 316.051917][T15061] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 316.134415][T15071] loop6: detected capacity change from 0 to 512 [ 316.141476][T15071] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.163582][T15073] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3108'. [ 316.171969][T15071] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 316.181710][T15071] FAT-fs (loop6): Filesystem has been set read-only [ 316.188565][T15073] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3108'. [ 316.188654][T15071] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 316.212140][T15071] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 316.221118][T15071] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 316.263991][T15078] xt_hashlimit: max too large, truncated to 1048576 [ 316.277819][T15078] can0: slcan on ttyS3. [ 316.308181][T15078] can0 (unregistered): slcan off ttyS3. [ 316.374234][T15083] loop6: detected capacity change from 0 to 2048 [ 316.420692][T15083] Alternate GPT is invalid, using primary GPT. [ 316.427101][T15083] loop6: p2 p3 p7 [ 316.465871][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 316.465891][ T29] audit: type=1326 audit(1764347893.590:17788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.1.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 316.501727][ T29] audit: type=1326 audit(1764347893.590:17789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.1.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 316.525699][ T29] audit: type=1326 audit(1764347893.590:17790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.1.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 316.549533][ T29] audit: type=1326 audit(1764347893.590:17791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.1.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87acc9f783 code=0x7ffc0000 [ 316.573080][T15091] loop3: detected capacity change from 0 to 8192 [ 316.579814][ T29] audit: type=1326 audit(1764347893.590:17792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.1.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87acc9f783 code=0x7ffc0000 [ 316.603360][ T29] audit: type=1326 audit(1764347893.590:17793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.1.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 316.626946][ T29] audit: type=1326 audit(1764347893.590:17794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.1.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 316.650948][ T29] audit: type=1326 audit(1764347893.590:17795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.1.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 316.655880][T15096] loop7: detected capacity change from 0 to 2048 [ 316.674694][ T29] audit: type=1326 audit(1764347893.590:17796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.1.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 316.704509][ T29] audit: type=1326 audit(1764347893.590:17797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.1.3112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 316.763780][T15100] loop3: detected capacity change from 0 to 512 [ 316.769242][T15096] loop7: p1 < > p4 [ 316.771239][T15100] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.774686][T15096] loop7: p4 size 8388608 extends beyond EOD, truncated [ 316.802347][T15100] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 316.811340][T15100] FAT-fs (loop3): Filesystem has been set read-only [ 316.819251][T15100] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 316.834202][T15100] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 316.836045][T15102] loop7: detected capacity change from 0 to 2048 [ 316.843479][T15100] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 316.862803][T15100] netlink: 'syz.3.3116': attribute type 12 has an invalid length. [ 316.878414][T15102] loop7: p1 < > p4 [ 316.882945][T15102] loop7: p4 size 8388608 extends beyond EOD, truncated [ 317.031651][T15109] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3120'. [ 317.041117][T15109] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3120'. [ 317.212086][T15112] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3121'. [ 317.221321][T15112] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3121'. [ 317.333697][T15118] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 317.446833][T15125] loop6: detected capacity change from 0 to 512 [ 317.459393][T15128] loop7: detected capacity change from 0 to 128 [ 317.470761][T15125] EXT4-fs (loop6): too many log groups per flexible block group [ 317.478752][T15125] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 317.485675][T15125] EXT4-fs (loop6): mount failed [ 317.692260][T15131] syz.7.3127: attempt to access beyond end of device [ 317.692260][T15131] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 317.705744][T15131] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 317.761032][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3128'. [ 317.882258][T15139] loop3: detected capacity change from 0 to 128 [ 317.947460][T15141] syz.3.3131: attempt to access beyond end of device [ 317.947460][T15141] loop3: rw=2049, sector=129, nr_sectors = 9 limit=128 [ 318.254122][T15146] loop7: detected capacity change from 0 to 2048 [ 318.278424][T15148] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3135'. [ 318.308688][T15146] loop7: p1 < > p4 [ 318.313094][T15146] loop7: p4 size 8388608 extends beyond EOD, truncated [ 318.396566][T15165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=15165 comm=syz.3.3141 [ 318.471769][T15166] loop0: detected capacity change from 0 to 512 [ 318.490035][T15166] EXT4-fs (loop0): too many log groups per flexible block group [ 318.498342][T15166] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 318.509926][T15166] EXT4-fs (loop0): mount failed [ 318.650640][T15187] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.699955][T15187] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.770300][T15187] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.829805][T15187] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.885564][T15192] netlink: 'syz.7.3147': attribute type 1 has an invalid length. [ 318.901672][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.924989][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.951619][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.990680][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.006982][T15200] FAULT_INJECTION: forcing a failure. [ 319.006982][T15200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.014575][T15199] loop3: detected capacity change from 0 to 2048 [ 319.020231][T15200] CPU: 0 UID: 0 PID: 15200 Comm: syz.7.3149 Not tainted syzkaller #0 PREEMPT(voluntary) [ 319.020294][T15200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.020313][T15200] Call Trace: [ 319.020323][T15200] [ 319.020349][T15200] __dump_stack+0x1d/0x30 [ 319.020379][T15200] dump_stack_lvl+0xe8/0x140 [ 319.020409][T15200] dump_stack+0x15/0x1b [ 319.020433][T15200] should_fail_ex+0x265/0x280 [ 319.020498][T15200] should_fail+0xb/0x20 [ 319.020521][T15200] should_fail_usercopy+0x1a/0x20 [ 319.020550][T15200] _copy_to_user+0x20/0xa0 [ 319.020587][T15200] simple_read_from_buffer+0xb5/0x130 [ 319.020622][T15200] proc_fail_nth_read+0x10e/0x150 [ 319.020678][T15200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.020771][T15200] vfs_read+0x1a8/0x770 [ 319.020805][T15200] ? __rcu_read_unlock+0x4f/0x70 [ 319.020840][T15200] ? __fget_files+0x184/0x1c0 [ 319.020881][T15200] ksys_read+0xda/0x1a0 [ 319.021066][T15200] __x64_sys_read+0x40/0x50 [ 319.021151][T15200] x64_sys_call+0x27c0/0x3000 [ 319.021225][T15200] do_syscall_64+0xd2/0x200 [ 319.021254][T15200] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 319.021294][T15200] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 319.021404][T15200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.021435][T15200] RIP: 0033:0x7fc673e8e15c [ 319.021455][T15200] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.021480][T15200] RSP: 002b:00007fc6728f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.021505][T15200] RAX: ffffffffffffffda RBX: 00007fc6740e5fa0 RCX: 00007fc673e8e15c [ 319.021523][T15200] RDX: 000000000000000f RSI: 00007fc6728f70a0 RDI: 0000000000000003 [ 319.021562][T15200] RBP: 00007fc6728f7090 R08: 0000000000000000 R09: 0000000000000000 [ 319.021591][T15200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.021608][T15200] R13: 00007fc6740e6038 R14: 00007fc6740e5fa0 R15: 00007ffce270e278 [ 319.021636][T15200] [ 319.240558][T15207] loop1: detected capacity change from 0 to 128 [ 319.251361][T15207] syz.1.3153: attempt to access beyond end of device [ 319.251361][T15207] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 319.265284][T15199] loop3: p1 < > p4 [ 319.266555][T15207] syz.1.3153: attempt to access beyond end of device [ 319.266555][T15207] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 319.282567][T15207] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 319.298920][T15199] loop3: p4 size 8388608 extends beyond EOD, truncated [ 319.311754][T15207] syz.1.3153: attempt to access beyond end of device [ 319.311754][T15207] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 319.325270][T15207] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 319.352386][T15207] syz.1.3153: attempt to access beyond end of device [ 319.352386][T15207] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 319.352418][T15214] xt_hashlimit: max too large, truncated to 1048576 [ 319.374625][T15207] syz.1.3153: attempt to access beyond end of device [ 319.374625][T15207] loop1: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 319.388293][T15207] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 319.399755][T15215] loop7: detected capacity change from 0 to 512 [ 319.401637][T15214] can0: slcan on ttyS3. [ 319.424352][T15207] syz.1.3153: attempt to access beyond end of device [ 319.424352][T15207] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 319.428416][T15220] FAULT_INJECTION: forcing a failure. [ 319.428416][T15220] name failslab, interval 1, probability 0, space 0, times 0 [ 319.437880][T15207] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 319.450543][T15220] CPU: 1 UID: 0 PID: 15220 Comm: syz.0.3157 Not tainted syzkaller #0 PREEMPT(voluntary) [ 319.450576][T15220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.450645][T15220] Call Trace: [ 319.450654][T15220] [ 319.450667][T15220] __dump_stack+0x1d/0x30 [ 319.450705][T15220] dump_stack_lvl+0xe8/0x140 [ 319.450736][T15220] dump_stack+0x15/0x1b [ 319.450761][T15220] should_fail_ex+0x265/0x280 [ 319.450860][T15220] ? proc_do_submiturb+0x83d/0x1d20 [ 319.450907][T15220] should_failslab+0x8c/0xb0 [ 319.451011][T15220] __kmalloc_cache_noprof+0x4c/0x4a0 [ 319.451064][T15220] proc_do_submiturb+0x83d/0x1d20 [ 319.451170][T15220] ? proc_do_submiturb+0x111/0x1d20 [ 319.451233][T15220] ? should_fail_ex+0xdb/0x280 [ 319.451317][T15220] proc_submiturb+0x7b/0xa0 [ 319.451359][T15220] usbdev_ioctl+0xcb6/0x1700 [ 319.451397][T15220] ? __pfx_usbdev_ioctl+0x10/0x10 [ 319.451433][T15220] __se_sys_ioctl+0xce/0x140 [ 319.451540][T15220] __x64_sys_ioctl+0x43/0x50 [ 319.451568][T15220] x64_sys_call+0x1816/0x3000 [ 319.451599][T15220] do_syscall_64+0xd2/0x200 [ 319.451630][T15220] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 319.451767][T15220] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 319.451814][T15220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.451924][T15220] RIP: 0033:0x7ff0c682f749 [ 319.451947][T15220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.451971][T15220] RSP: 002b:00007ff0c5297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.452030][T15220] RAX: ffffffffffffffda RBX: 00007ff0c6a85fa0 RCX: 00007ff0c682f749 [ 319.452043][T15220] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000004 [ 319.452061][T15220] RBP: 00007ff0c5297090 R08: 0000000000000000 R09: 0000000000000000 [ 319.452108][T15220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.452127][T15220] R13: 00007ff0c6a86038 R14: 00007ff0c6a85fa0 R15: 00007ffc5e4ec7c8 [ 319.452172][T15220] [ 319.481778][T15218] loop6: detected capacity change from 0 to 512 [ 319.483466][T15207] syz.1.3153: attempt to access beyond end of device [ 319.483466][T15207] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 319.489547][T15215] EXT4-fs (loop7): too many log groups per flexible block group [ 319.490101][T15207] syz.1.3153: attempt to access beyond end of device [ 319.490101][T15207] loop1: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 319.494396][T15215] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 319.498544][T15207] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 319.509669][T15218] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.3156: error while reading EA inode 32 err=-116 [ 319.515459][T15207] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 319.520035][T15215] EXT4-fs (loop7): mount failed [ 319.526848][T15207] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 319.528951][T15214] can0 (unregistered): slcan off ttyS3. [ 319.533770][T15207] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 319.551539][T15218] EXT4-fs (loop6): Remounting filesystem read-only [ 319.557512][T15227] loop3: detected capacity change from 0 to 2048 [ 319.565813][T15218] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 319.567267][T15207] Buffer I/O error on dev loop1, logical block 111, lost async page write [ 319.573217][T15218] EXT4-fs (loop6): 1 orphan inode deleted [ 319.803807][T15218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.815608][T15228] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.828257][T15218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.831123][T15227] Alternate GPT is invalid, using primary GPT. [ 319.843696][T15227] loop3: p2 p3 p7 [ 319.871443][T15228] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.912207][T15228] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.972198][T15228] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.026251][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.038646][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.049495][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.061643][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.070068][T15243] loop1: detected capacity change from 0 to 512 [ 320.079006][T15243] EXT4-fs (loop1): too many log groups per flexible block group [ 320.087029][T15243] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 320.099235][T15243] EXT4-fs (loop1): mount failed [ 320.106974][T15247] FAULT_INJECTION: forcing a failure. [ 320.106974][T15247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.120193][T15247] CPU: 1 UID: 0 PID: 15247 Comm: syz.0.3164 Not tainted syzkaller #0 PREEMPT(voluntary) [ 320.120324][T15247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.120416][T15247] Call Trace: [ 320.120424][T15247] [ 320.120433][T15247] __dump_stack+0x1d/0x30 [ 320.120455][T15247] dump_stack_lvl+0xe8/0x140 [ 320.120482][T15247] dump_stack+0x15/0x1b [ 320.120526][T15247] should_fail_ex+0x265/0x280 [ 320.120547][T15247] should_fail+0xb/0x20 [ 320.120615][T15247] should_fail_usercopy+0x1a/0x20 [ 320.120656][T15247] _copy_from_user+0x1c/0xb0 [ 320.120684][T15247] memdup_user+0x5e/0xd0 [ 320.120746][T15247] strndup_user+0x68/0xb0 [ 320.120775][T15247] __se_sys_mount+0x4d/0x2e0 [ 320.120805][T15247] ? fput+0x8f/0xc0 [ 320.120825][T15247] ? ksys_write+0x192/0x1a0 [ 320.120873][T15247] __x64_sys_mount+0x67/0x80 [ 320.120904][T15247] x64_sys_call+0x2b51/0x3000 [ 320.120978][T15247] do_syscall_64+0xd2/0x200 [ 320.121005][T15247] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 320.121155][T15247] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 320.121200][T15247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.121230][T15247] RIP: 0033:0x7ff0c682f749 [ 320.121249][T15247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.121344][T15247] RSP: 002b:00007ff0c5297038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 320.121369][T15247] RAX: ffffffffffffffda RBX: 00007ff0c6a85fa0 RCX: 00007ff0c682f749 [ 320.121385][T15247] RDX: 0000200000000040 RSI: 0000200000001400 RDI: 00002000000013c0 [ 320.121409][T15247] RBP: 00007ff0c5297090 R08: 00002000000000c0 R09: 0000000000000000 [ 320.121424][T15247] R10: 0000000000000840 R11: 0000000000000246 R12: 0000000000000001 [ 320.121445][T15247] R13: 00007ff0c6a86038 R14: 00007ff0c6a85fa0 R15: 00007ffc5e4ec7c8 [ 320.121469][T15247] [ 320.366887][ T2945] Bluetooth: hci0: Frame reassembly failed (-84) [ 320.416924][T15257] loop3: detected capacity change from 0 to 1024 [ 320.424413][T15257] ext4: Unknown parameter 'uid<00000000000000000000' [ 320.582339][T15277] __nla_validate_parse: 9 callbacks suppressed [ 320.582372][T15277] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3174'. [ 320.605078][T15277] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3174'. [ 320.614538][T15279] loop3: detected capacity change from 0 to 2048 [ 320.639435][T15281] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3176'. [ 320.648834][T15281] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3176'. [ 320.678449][T15279] loop3: p3 < > p4 < > [ 320.682653][T15279] loop3: partition table partially beyond EOD, truncated [ 320.689855][T15279] loop3: p3 start 4284289 is beyond EOD, truncated [ 320.731441][T15285] loop3: detected capacity change from 0 to 2048 [ 320.764334][T15287] loop1: detected capacity change from 0 to 2048 [ 320.778484][T15285] loop3: p1 < > p4 [ 320.783081][T15285] loop3: p4 size 8388608 extends beyond EOD, truncated [ 320.790445][T15289] FAULT_INJECTION: forcing a failure. [ 320.790445][T15289] name failslab, interval 1, probability 0, space 0, times 0 [ 320.803320][T15289] CPU: 1 UID: 0 PID: 15289 Comm: syz.6.3179 Not tainted syzkaller #0 PREEMPT(voluntary) [ 320.803350][T15289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.803367][T15289] Call Trace: [ 320.803375][T15289] [ 320.803384][T15289] __dump_stack+0x1d/0x30 [ 320.803437][T15289] dump_stack_lvl+0xe8/0x140 [ 320.803463][T15289] dump_stack+0x15/0x1b [ 320.803491][T15289] should_fail_ex+0x265/0x280 [ 320.803516][T15289] should_failslab+0x8c/0xb0 [ 320.803608][T15289] kmem_cache_alloc_noprof+0x50/0x480 [ 320.803651][T15289] ? audit_log_start+0x342/0x720 [ 320.803680][T15289] audit_log_start+0x342/0x720 [ 320.803707][T15289] ? kstrtouint+0x76/0xc0 [ 320.803801][T15289] audit_seccomp+0x48/0x100 [ 320.803842][T15289] ? __seccomp_filter+0x82d/0x1250 [ 320.803877][T15289] __seccomp_filter+0x83e/0x1250 [ 320.803932][T15289] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 320.803973][T15289] ? vfs_write+0x7e8/0x960 [ 320.804036][T15289] ? __rcu_read_unlock+0x4f/0x70 [ 320.804068][T15289] ? __fget_files+0x184/0x1c0 [ 320.804107][T15289] __secure_computing+0x82/0x150 [ 320.804220][T15289] syscall_trace_enter+0xcf/0x1e0 [ 320.804256][T15289] do_syscall_64+0xac/0x200 [ 320.804282][T15289] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 320.804316][T15289] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 320.804428][T15289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.804449][T15289] RIP: 0033:0x7fb3f146f749 [ 320.804465][T15289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.804487][T15289] RSP: 002b:00007fb3efed6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 320.804510][T15289] RAX: ffffffffffffffda RBX: 00000000000005e4 RCX: 00007fb3f146f749 [ 320.804525][T15289] RDX: 00007fb3efed6dec RSI: 0000000000000000 RDI: 00007fb3f14f4960 [ 320.804550][T15289] RBP: 0000200000000000 R08: 00007fb3efed6b07 R09: 0000000000000000 [ 320.804564][T15289] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 320.804577][T15289] R13: 00007fb3efed6dec R14: 00007fb3efed6df0 R15: 00007fffea79dc48 [ 320.804643][T15289] [ 321.027752][T15289] loop6: detected capacity change from 0 to 2048 [ 321.034637][T15287] loop1: p1 < > p4 [ 321.041914][T15287] loop1: p4 size 8388608 extends beyond EOD, truncated [ 321.044461][T15292] xt_hashlimit: max too large, truncated to 1048576 [ 321.063985][T15292] can0: slcan on ttyS3. [ 321.078249][T15289] loop6: p3 < > p4 < > [ 321.082441][T15289] loop6: partition table partially beyond EOD, truncated [ 321.089612][T15289] loop6: p3 start 4284289 is beyond EOD, truncated [ 321.128927][T15292] can0 (unregistered): slcan off ttyS3. [ 321.179386][T15292] loop0: detected capacity change from 0 to 2048 [ 321.231340][T15292] Alternate GPT is invalid, using primary GPT. [ 321.237776][T15292] loop0: p2 p3 p7 [ 321.603463][ T29] kauditd_printk_skb: 635 callbacks suppressed [ 321.603481][ T29] audit: type=1326 audit(1764347898.730:18431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15308 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 321.633444][ T29] audit: type=1326 audit(1764347898.730:18432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15308 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 321.659064][ T29] audit: type=1326 audit(1764347898.730:18433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15308 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 321.682818][ T29] audit: type=1326 audit(1764347898.730:18434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15308 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 321.706479][ T29] audit: type=1326 audit(1764347898.730:18435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15308 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 321.773133][T15316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3188'. [ 321.804897][ T29] audit: type=1326 audit(1764347898.930:18436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 321.828580][ T29] audit: type=1326 audit(1764347898.930:18437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 321.858123][ T29] audit: type=1326 audit(1764347898.990:18438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 321.881844][ T29] audit: type=1326 audit(1764347898.990:18439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87acc9f783 code=0x7ffc0000 [ 321.905309][ T29] audit: type=1326 audit(1764347898.990:18440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.1.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87acc9f783 code=0x7ffc0000 [ 321.959571][T15323] IPv6: Can't replace route, no match found [ 321.974900][T15325] loop6: detected capacity change from 0 to 128 [ 322.065703][T15330] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3194'. [ 322.078761][T15330] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3194'. [ 322.299862][T15337] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.339295][T15337] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.404101][T15337] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.414399][ T4127] Bluetooth: hci0: command 0x1003 tx timeout [ 322.421657][ T3936] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 322.500517][T15337] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.548478][T15344] FAULT_INJECTION: forcing a failure. [ 322.548478][T15344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.561587][T15344] CPU: 0 UID: 0 PID: 15344 Comm: syz.6.3199 Not tainted syzkaller #0 PREEMPT(voluntary) [ 322.561646][T15344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.561659][T15344] Call Trace: [ 322.561666][T15344] [ 322.561674][T15344] __dump_stack+0x1d/0x30 [ 322.561805][T15344] dump_stack_lvl+0xe8/0x140 [ 322.561826][T15344] dump_stack+0x15/0x1b [ 322.561844][T15344] should_fail_ex+0x265/0x280 [ 322.561864][T15344] should_fail+0xb/0x20 [ 322.561880][T15344] should_fail_usercopy+0x1a/0x20 [ 322.561933][T15344] _copy_to_user+0x20/0xa0 [ 322.561980][T15344] put_itimerspec64+0x65/0x110 [ 322.562083][T15344] __x64_sys_timer_gettime+0xad/0x120 [ 322.562126][T15344] x64_sys_call+0x2999/0x3000 [ 322.562156][T15344] do_syscall_64+0xd2/0x200 [ 322.562178][T15344] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 322.562208][T15344] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 322.562243][T15344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.562264][T15344] RIP: 0033:0x7fb3f146f749 [ 322.562280][T15344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.562305][T15344] RSP: 002b:00007fb3efed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e0 [ 322.562324][T15344] RAX: ffffffffffffffda RBX: 00007fb3f16c5fa0 RCX: 00007fb3f146f749 [ 322.562337][T15344] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 322.562349][T15344] RBP: 00007fb3efed7090 R08: 0000000000000000 R09: 0000000000000000 [ 322.562362][T15344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.562374][T15344] R13: 00007fb3f16c6038 R14: 00007fb3f16c5fa0 R15: 00007fffea79dc48 [ 322.562438][T15344] [ 322.784862][T15348] xt_hashlimit: max too large, truncated to 1048576 [ 322.799402][T15348] can0: slcan on ttyS3. [ 322.828094][T15348] can0 (unregistered): slcan off ttyS3. [ 322.828327][T15350] loop3: detected capacity change from 0 to 128 [ 322.902945][T15351] loop6: detected capacity change from 0 to 2048 [ 322.950238][T15351] Alternate GPT is invalid, using primary GPT. [ 322.956642][T15351] loop6: p2 p3 p7 [ 322.962256][ T2945] bio_check_eod: 38 callbacks suppressed [ 322.962273][ T2945] kworker/u8:7: attempt to access beyond end of device [ 322.962273][ T2945] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 322.983760][ T2945] kworker/u8:7: attempt to access beyond end of device [ 322.983760][ T2945] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 322.997611][ T2945] kworker/u8:7: attempt to access beyond end of device [ 322.997611][ T2945] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 323.011472][ T2945] kworker/u8:7: attempt to access beyond end of device [ 323.011472][ T2945] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 323.025184][ T2945] kworker/u8:7: attempt to access beyond end of device [ 323.025184][ T2945] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 323.046803][ T2945] kworker/u8:7: attempt to access beyond end of device [ 323.046803][ T2945] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 323.063704][T15356] xt_hashlimit: max too large, truncated to 1048576 [ 323.071206][ T2945] kworker/u8:7: attempt to access beyond end of device [ 323.071206][ T2945] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 323.085274][ T2945] kworker/u8:7: attempt to access beyond end of device [ 323.085274][ T2945] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 323.092258][T15356] can0: slcan on ttyS3. [ 323.100889][ T2945] kworker/u8:7: attempt to access beyond end of device [ 323.100889][ T2945] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 323.116378][ T2945] kworker/u8:7: attempt to access beyond end of device [ 323.116378][ T2945] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 323.144704][T15360] netlink: 'syz.3.3203': attribute type 1 has an invalid length. [ 323.152865][T15360] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3203'. [ 323.178199][T15356] can0 (unregistered): slcan off ttyS3. [ 323.191235][T15366] loop3: detected capacity change from 0 to 2048 [ 323.215663][T15356] loop1: detected capacity change from 0 to 2048 [ 323.228487][T15366] loop3: p1 < > p4 [ 323.232868][T15366] loop3: p4 size 8388608 extends beyond EOD, truncated [ 323.261675][T15356] Alternate GPT is invalid, using primary GPT. [ 323.268419][T15356] loop1: p2 p3 p7 [ 323.277272][T15362] loop7: detected capacity change from 0 to 512 [ 323.305677][T15376] loop3: detected capacity change from 0 to 128 [ 323.305931][T15362] EXT4-fs (loop7): too many log groups per flexible block group [ 323.320821][T15362] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 323.327706][T15362] EXT4-fs (loop7): mount failed [ 323.465260][T15376] buffer_io_error: 23 callbacks suppressed [ 323.465276][T15376] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 323.480174][T15376] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 323.526593][T15383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3211'. [ 323.550069][T15385] FAULT_INJECTION: forcing a failure. [ 323.550069][T15385] name failslab, interval 1, probability 0, space 0, times 0 [ 323.562835][T15385] CPU: 0 UID: 0 PID: 15385 Comm: syz.3.3212 Not tainted syzkaller #0 PREEMPT(voluntary) [ 323.562861][T15385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 323.562872][T15385] Call Trace: [ 323.562879][T15385] [ 323.562887][T15385] __dump_stack+0x1d/0x30 [ 323.563016][T15385] dump_stack_lvl+0xe8/0x140 [ 323.563040][T15385] dump_stack+0x15/0x1b [ 323.563064][T15385] should_fail_ex+0x265/0x280 [ 323.563089][T15385] should_failslab+0x8c/0xb0 [ 323.563116][T15385] __kvmalloc_node_noprof+0x12e/0x670 [ 323.563210][T15385] ? traverse+0xa2/0x3a0 [ 323.563228][T15385] traverse+0xa2/0x3a0 [ 323.563243][T15385] ? kstrtouint+0x76/0xc0 [ 323.563273][T15385] seq_read_iter+0x85f/0x950 [ 323.563321][T15385] ? __rcu_read_unlock+0x4f/0x70 [ 323.563344][T15385] ? get_pid_task+0x96/0xd0 [ 323.563365][T15385] ? avc_policy_seqno+0x15/0x30 [ 323.563435][T15385] proc_reg_read_iter+0x110/0x180 [ 323.563496][T15385] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 323.563515][T15385] vfs_read+0x64c/0x770 [ 323.563536][T15385] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 323.563559][T15385] __x64_sys_pread64+0xfd/0x150 [ 323.563584][T15385] x64_sys_call+0x29e6/0x3000 [ 323.563685][T15385] do_syscall_64+0xd2/0x200 [ 323.563704][T15385] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 323.563728][T15385] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 323.563757][T15385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.563849][T15385] RIP: 0033:0x7feaac34f749 [ 323.563862][T15385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.563909][T15385] RSP: 002b:00007feaaadaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 323.563925][T15385] RAX: ffffffffffffffda RBX: 00007feaac5a5fa0 RCX: 00007feaac34f749 [ 323.563936][T15385] RDX: 00000000000000d1 RSI: 00002000000024c0 RDI: 0000000000000004 [ 323.563947][T15385] RBP: 00007feaaadaf090 R08: 0000000000000000 R09: 0000000000000000 [ 323.563963][T15385] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 323.563974][T15385] R13: 00007feaac5a6038 R14: 00007feaac5a5fa0 R15: 00007ffc66c70998 [ 323.563991][T15385] [ 323.877750][T15391] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3215'. [ 323.967683][T15398] netlink: 'syz.7.3217': attribute type 1 has an invalid length. [ 324.027647][T15405] netlink: 'syz.7.3219': attribute type 1 has an invalid length. [ 324.076929][T15410] loop6: detected capacity change from 0 to 128 [ 324.161308][T15418] netlink: 'syz.1.3224': attribute type 1 has an invalid length. [ 324.316961][T15419] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 324.351127][T15410] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 324.445172][T15439] netlink: 'syz.7.3232': attribute type 1 has an invalid length. [ 324.464613][ T2496] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.488780][ T2496] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.506320][ T2496] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.524857][ T2496] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.614094][T15454] loop7: detected capacity change from 0 to 1024 [ 324.640789][T15454] EXT4-fs: inline encryption not supported [ 324.651524][T15463] loop1: detected capacity change from 0 to 128 [ 324.674201][T15454] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.721235][T15471] loop0: detected capacity change from 0 to 512 [ 324.735832][T15470] loop6: detected capacity change from 0 to 128 [ 324.779474][T13145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.788877][T15471] EXT4-fs (loop0): too many log groups per flexible block group [ 324.796701][T15471] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 324.803664][T15471] EXT4-fs (loop0): mount failed [ 324.864586][T15480] loop3: detected capacity change from 0 to 128 [ 325.099644][T15469] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 325.124714][T15463] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 325.182678][T15463] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 325.331525][T15476] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 325.341009][T15484] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 325.350823][T15480] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 325.366029][T15487] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.404258][T15489] loop6: detected capacity change from 0 to 128 [ 325.423093][T15487] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.493104][T15487] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.544082][T15487] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.597004][ T2945] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.609567][ T2496] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.637276][ T2496] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.652180][ T2945] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.706235][T15508] __nla_validate_parse: 17 callbacks suppressed [ 325.706332][T15508] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3250'. [ 325.726805][T15508] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3250'. [ 325.794068][T15518] loop1: detected capacity change from 0 to 512 [ 325.833614][T15518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.866566][T15518] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.881158][T15526] loop6: detected capacity change from 0 to 128 [ 325.986095][T15529] loop7: detected capacity change from 0 to 512 [ 326.020041][T15529] EXT4-fs (loop7): too many log groups per flexible block group [ 326.027892][T15529] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 326.046591][T15529] EXT4-fs (loop7): mount failed [ 326.071946][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3256'. [ 326.096413][T15536] team0 (unregistering): Port device team_slave_0 removed [ 326.107598][T15536] team0 (unregistering): Port device team_slave_1 removed [ 326.129538][T15538] loop0: detected capacity change from 0 to 128 [ 326.138689][T15538] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 326.151204][T15538] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 326.426156][T15543] loop6: detected capacity change from 0 to 512 [ 326.439360][T15543] EXT4-fs (loop6): too many log groups per flexible block group [ 326.447180][T15543] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 326.454121][T15543] EXT4-fs (loop6): mount failed [ 326.526334][T15547] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3258'. [ 326.535750][T15547] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3258'. [ 326.700738][T15553] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.721782][T15554] loop7: detected capacity change from 0 to 512 [ 326.722161][T14913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.745991][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 326.746010][ T29] audit: type=1326 audit(1764347903.870:18778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15555 comm="syz.1.3261" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87acc9f749 code=0x0 [ 326.776673][T15554] EXT4-fs (loop7): too many log groups per flexible block group [ 326.785076][T15554] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 326.791983][T15554] EXT4-fs (loop7): mount failed [ 326.793035][T15553] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.855487][T15553] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.900042][T15553] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.965269][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.985321][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.997578][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.006100][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.033729][T15563] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3262'. [ 327.043606][T15563] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3262'. [ 327.171074][ T29] audit: type=1326 audit(1764347904.300:18779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15574 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f146f749 code=0x7ffc0000 [ 327.203463][ T29] audit: type=1326 audit(1764347904.300:18780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15574 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f146f749 code=0x7ffc0000 [ 327.227533][ T29] audit: type=1326 audit(1764347904.300:18781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15574 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fb3f146f749 code=0x7ffc0000 [ 327.251477][ T29] audit: type=1326 audit(1764347904.300:18782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15574 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f146f749 code=0x7ffc0000 [ 327.302399][ T29] audit: type=1326 audit(1764347904.430:18783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.3.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 327.327789][T15579] netlink: 'syz.3.3267': attribute type 1 has an invalid length. [ 327.335649][T15579] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3267'. [ 327.337371][ T29] audit: type=1326 audit(1764347904.460:18784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.3.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 327.369171][ T29] audit: type=1326 audit(1764347904.460:18785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.3.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 327.369204][ T29] audit: type=1326 audit(1764347904.460:18786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.3.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 327.369314][ T29] audit: type=1326 audit(1764347904.460:18787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.3.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 327.495897][T15585] loop6: detected capacity change from 0 to 512 [ 327.502970][T15585] EXT4-fs: Ignoring removed nobh option [ 327.528137][T15585] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.3268: corrupted inode contents [ 327.540558][T15585] EXT4-fs (loop6): Remounting filesystem read-only [ 327.547277][T15585] EXT4-fs (loop6): 1 truncate cleaned up [ 327.553702][T15585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.566290][ T37] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 327.566838][T15585] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.576909][ T37] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 327.599599][ T37] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 327.610697][T15585] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.624085][T15593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3271'. [ 327.649866][T15596] loop1: detected capacity change from 0 to 136 [ 327.657006][T15596] iso9660: Unknown parameter '' [ 327.667538][T15596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3272'. [ 327.676520][T15596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.684161][T15596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.699891][T15596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.707377][T15596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.720300][T15594] loop7: detected capacity change from 0 to 512 [ 327.732633][T15601] loop1: detected capacity change from 0 to 512 [ 327.749694][T15601] EXT4-fs: old and new quota format mixing [ 327.776082][T15585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.785154][T15594] EXT4-fs (loop7): too many log groups per flexible block group [ 327.789851][T15600] infiniband syz!: set active [ 327.794971][T15585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.797633][T15600] infiniband syz!: added team_slave_0 [ 327.811026][T15594] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 327.820093][T15594] EXT4-fs (loop7): mount failed [ 327.833293][T15600] RDS/IB: syz!: added [ 327.837334][T15600] smc: adding ib device syz! with port count 1 [ 327.843595][T15600] smc: ib device syz! port 1 has no pnetid [ 328.368450][T15623] loop0: detected capacity change from 0 to 128 [ 328.607257][T15632] loop6: detected capacity change from 0 to 512 [ 328.608533][T15626] bio_check_eod: 119 callbacks suppressed [ 328.608552][T15626] syz.0.3278: attempt to access beyond end of device [ 328.608552][T15626] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 328.630271][T15632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.632938][T15626] buffer_io_error: 7 callbacks suppressed [ 328.632958][T15626] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 328.645852][T15632] ext4 filesystem being mounted at /135/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.953247][T15643] loop3: detected capacity change from 0 to 512 [ 328.980357][T15643] EXT4-fs (loop3): too many log groups per flexible block group [ 328.988423][T15643] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 328.995507][T15643] EXT4-fs (loop3): mount failed [ 329.366268][T15651] loop7: detected capacity change from 0 to 128 [ 329.528162][T15652] syz.7.3286: attempt to access beyond end of device [ 329.528162][T15652] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 329.541827][T15652] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 329.550660][T15651] syz.7.3286: attempt to access beyond end of device [ 329.550660][T15651] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 329.564154][T15651] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 329.574161][T12850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.785564][T15664] loop7: detected capacity change from 0 to 512 [ 329.799996][T15664] EXT4-fs (loop7): too many log groups per flexible block group [ 329.808073][T15664] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 329.815390][T15664] EXT4-fs (loop7): mount failed [ 329.881011][T15661] tipc: Enabling of bearer rejected, already enabled [ 330.042107][T15677] loop6: detected capacity change from 0 to 2048 [ 330.076757][T15681] loop3: detected capacity change from 0 to 512 [ 330.098596][T15677] loop6: p1 < > p4 [ 330.103021][T15677] loop6: p4 size 8388608 extends beyond EOD, truncated [ 330.104947][T15681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.122722][T15681] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.490619][T14335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.598964][T15707] loop0: detected capacity change from 0 to 512 [ 330.629860][T15707] EXT4-fs (loop0): too many log groups per flexible block group [ 330.637845][T15707] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 330.649025][T15707] EXT4-fs (loop0): mount failed [ 330.685750][T15713] IPv6: Can't replace route, no match found [ 330.760950][T15719] netlink: 'syz.3.3308': attribute type 1 has an invalid length. [ 330.768838][T15719] __nla_validate_parse: 7 callbacks suppressed [ 330.768853][T15719] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3308'. [ 330.809167][T15723] loop3: detected capacity change from 0 to 128 [ 330.982415][T15724] syz.3.3309: attempt to access beyond end of device [ 330.982415][T15724] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 330.996070][T15724] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 331.005160][T15723] syz.3.3309: attempt to access beyond end of device [ 331.005160][T15723] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 331.018617][T15723] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 331.027619][T15723] syz.3.3309: attempt to access beyond end of device [ 331.027619][T15723] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 331.041410][T15723] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 331.121189][T15729] loop1: detected capacity change from 0 to 512 [ 331.129391][T15731] netlink: 'syz.3.3312': attribute type 1 has an invalid length. [ 331.137186][T15731] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3312'. [ 331.140144][T15729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.159155][T15729] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.502761][T15746] netlink: 'syz.0.3316': attribute type 1 has an invalid length. [ 331.512335][T15746] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3316'. [ 331.537035][T14913] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.574598][T15754] loop7: detected capacity change from 0 to 128 [ 331.801989][T15760] syz.7.3319: attempt to access beyond end of device [ 331.801989][T15760] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 331.815630][T15760] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 331.825434][T15754] syz.7.3319: attempt to access beyond end of device [ 331.825434][T15754] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 331.839142][T15754] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 331.852113][T15760] syz.7.3319: attempt to access beyond end of device [ 331.852113][T15760] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 331.865581][T15760] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 331.980894][T15770] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3324'. [ 331.990338][T15770] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3324'. [ 332.049620][T15773] xt_hashlimit: max too large, truncated to 1048576 [ 332.063733][T15773] can0: slcan on ttyS3. [ 332.085477][ T29] kauditd_printk_skb: 496 callbacks suppressed [ 332.085496][ T29] audit: type=1326 audit(1764347909.210:19278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.3.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 332.115619][ T29] audit: type=1326 audit(1764347909.210:19279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.3.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 332.139363][ T29] audit: type=1326 audit(1764347909.210:19280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.3.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 332.163050][ T29] audit: type=1326 audit(1764347909.210:19281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.3.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 332.186793][ T29] audit: type=1326 audit(1764347909.210:19282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.3.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 332.187410][T15773] can0 (unregistered): slcan off ttyS3. [ 332.210395][ T29] audit: type=1326 audit(1764347909.210:19283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.3.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 332.217926][T15778] loop6: detected capacity change from 0 to 2048 [ 332.239709][ T29] audit: type=1326 audit(1764347909.210:19284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.3.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 332.269727][ T29] audit: type=1326 audit(1764347909.210:19285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.3.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 332.274520][T15780] usb usb8: usbfs: process 15780 (syz.7.3327) did not claim interface 0 before use [ 332.293426][ T29] audit: type=1326 audit(1764347909.210:19286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.3.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 332.293463][ T29] audit: type=1326 audit(1764347909.210:19287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15775 comm="syz.3.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaac34f749 code=0x7ffc0000 [ 332.331833][T15782] loop7: detected capacity change from 0 to 512 [ 332.359833][T15782] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.372899][T15782] ext4 filesystem being mounted at /132/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.390625][T15778] Alternate GPT is invalid, using primary GPT. [ 332.397069][T15778] loop6: p2 p3 p7 [ 332.447225][T15792] netlink: 'syz.3.3331': attribute type 1 has an invalid length. [ 332.455210][T15792] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3331'. [ 332.497496][T15795] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.550554][T15795] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.590098][T15807] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3335'. [ 332.604729][T15807] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3335'. [ 332.615350][T15795] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.651585][T15795] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.666161][T15812] loop3: detected capacity change from 0 to 128 [ 332.697391][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.731065][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.743417][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.749234][T15815] usb usb8: usbfs: process 15815 (syz.1.3338) did not claim interface 0 before use [ 332.766082][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.809889][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 332.814247][T15820] xt_hashlimit: max too large, truncated to 1048576 [ 332.845280][T13145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.846765][T15820] can0: slcan on ttyS3. [ 332.899207][T15820] can0 (unregistered): slcan off ttyS3. [ 332.918586][T15814] syz.3.3337: attempt to access beyond end of device [ 332.918586][T15814] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 332.932089][T15814] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 332.974789][T15829] loop1: detected capacity change from 0 to 2048 [ 332.997048][T15831] loop7: detected capacity change from 0 to 512 [ 333.007268][T15833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3345'. [ 333.012512][T15829] Alternate GPT is invalid, using primary GPT. [ 333.020097][T15831] EXT4-fs (loop7): too many log groups per flexible block group [ 333.022688][T15829] loop1: p2 p3 p7 [ 333.030750][T15831] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 333.041467][T15831] EXT4-fs (loop7): mount failed [ 333.068803][T15839] netlink: 'syz.6.3346': attribute type 1 has an invalid length. [ 333.076687][T15839] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3346'. [ 333.164223][T15849] loop6: detected capacity change from 0 to 2048 [ 333.228564][T15849] loop6: p1 < > p4 [ 333.233011][T15849] loop6: p4 size 8388608 extends beyond EOD, truncated [ 333.739375][T15851] loop1: detected capacity change from 0 to 128 [ 333.771759][T15853] usb usb8: usbfs: process 15853 (syz.6.3350) did not claim interface 0 before use [ 333.804932][T15855] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.827486][T15858] loop6: detected capacity change from 0 to 512 [ 333.843307][T15858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.865921][T15855] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.871556][T15858] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.920464][T15855] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.980718][T15855] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.055981][ T52] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.076201][ T52] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.097998][T15856] bio_check_eod: 1 callbacks suppressed [ 334.098016][T15856] syz.1.3349: attempt to access beyond end of device [ 334.098016][T15856] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 334.117129][T15856] buffer_io_error: 1 callbacks suppressed [ 334.117144][T15856] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 334.123036][ T52] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.140849][T15856] syz.1.3349: attempt to access beyond end of device [ 334.140849][T15856] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 334.154429][T15856] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 334.164443][ T52] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.250844][T15869] loop7: detected capacity change from 0 to 2048 [ 334.268617][T15869] loop7: p1 < > p4 [ 334.272953][T15869] loop7: p4 size 8388608 extends beyond EOD, truncated [ 334.307618][T15873] loop1: detected capacity change from 0 to 128 [ 334.479239][T15874] syz.1.3356: attempt to access beyond end of device [ 334.479239][T15874] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 334.492954][T15874] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 334.503343][T15873] syz.1.3356: attempt to access beyond end of device [ 334.503343][T15873] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 334.516865][T15873] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 334.526090][T15873] syz.1.3356: attempt to access beyond end of device [ 334.526090][T15873] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 334.526710][T15871] tipc: Enabling of bearer rejected, already enabled [ 334.539621][T15873] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 334.730463][T12850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.759447][T15888] loop1: detected capacity change from 0 to 2048 [ 334.765525][T15892] loop6: detected capacity change from 0 to 2048 [ 334.809477][T15888] loop1: p1 < > p4 [ 334.814330][T15888] loop1: p4 size 8388608 extends beyond EOD, truncated [ 334.822447][T15892] loop6: p1 < > p4 [ 334.826927][T15892] loop6: p4 size 8388608 extends beyond EOD, truncated [ 334.835025][T15897] IPv6: Can't replace route, no match found [ 334.845006][ T2892] Bluetooth: hci1: Frame reassembly failed (-84) [ 334.888293][ T3936] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 334.888432][T15898] Bluetooth: hci0: command 0x1003 tx timeout [ 335.393469][T15904] netlink: 'syz.1.3366': attribute type 1 has an invalid length. [ 335.448242][T15908] loop0: detected capacity change from 0 to 512 [ 335.455248][T15908] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 335.482374][T15908] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 335.491187][T15908] FAT-fs (loop0): Filesystem has been set read-only [ 335.497918][T15908] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 335.514380][T15908] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 335.523250][T15908] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 335.537456][T15908] netlink: 'syz.0.3367': attribute type 12 has an invalid length. [ 335.643296][T15925] loop3: detected capacity change from 0 to 128 [ 335.651552][T15924] netlink: 'syz.6.3371': attribute type 1 has an invalid length. [ 335.654404][T15925] syz.3.3372: attempt to access beyond end of device [ 335.654404][T15925] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 335.673481][T15925] syz.3.3372: attempt to access beyond end of device [ 335.673481][T15925] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 335.686929][T15925] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 335.695552][T15925] syz.3.3372: attempt to access beyond end of device [ 335.695552][T15925] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 335.709070][T15925] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 335.737132][T15925] syz.3.3372: attempt to access beyond end of device [ 335.737132][T15925] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 335.751663][T15925] syz.3.3372: attempt to access beyond end of device [ 335.751663][T15925] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 335.765400][T15925] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 335.774793][T15925] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 335.785959][T15925] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 335.886572][T15935] loop6: detected capacity change from 0 to 2048 [ 335.909579][T15935] loop6: p1 < > p4 [ 335.914092][T15935] loop6: p4 size 8388608 extends beyond EOD, truncated [ 335.961403][T15937] loop0: detected capacity change from 0 to 2048 [ 336.002484][ T2892] Bluetooth: hci0: Frame reassembly failed (-84) [ 336.008801][T15937] loop0: p1 < > p4 [ 336.013512][T15937] loop0: p4 size 8388608 extends beyond EOD, truncated [ 336.307782][T15946] loop1: detected capacity change from 0 to 512 [ 336.314622][T15946] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 336.337945][T15946] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 336.346823][T15946] FAT-fs (loop1): Filesystem has been set read-only [ 336.353627][T15946] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 336.367584][T15946] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 336.376392][T15946] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 336.389533][T15946] netlink: 'syz.1.3380': attribute type 12 has an invalid length. [ 336.508579][T15953] IPv6: Can't replace route, no match found [ 336.578534][T15955] __nla_validate_parse: 2 callbacks suppressed [ 336.578550][T15955] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3383'. [ 336.604348][T15955] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3383'. [ 336.733419][T15965] xt_hashlimit: max too large, truncated to 1048576 [ 336.749740][T15965] can0: slcan on ttyS3. [ 336.759735][T15967] IPv6: Can't replace route, no match found [ 336.788123][T15965] can0 (unregistered): slcan off ttyS3. [ 336.853330][T15968] loop1: detected capacity change from 0 to 2048 [ 336.888040][T15898] Bluetooth: hci1: command 0x1003 tx timeout [ 336.894102][ T4127] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 336.900216][T15968] Alternate GPT is invalid, using primary GPT. [ 336.906603][T15968] loop1: p2 p3 p7 [ 337.444330][T15979] loop7: detected capacity change from 0 to 512 [ 337.451067][T15979] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 337.473515][T15979] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 337.482288][T15979] FAT-fs (loop7): Filesystem has been set read-only [ 337.489209][T15979] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 337.503279][T15979] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 337.512196][T15979] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 337.524863][T15979] netlink: 'syz.7.3391': attribute type 12 has an invalid length. [ 337.552566][T15982] loop7: detected capacity change from 0 to 128 [ 337.683298][T15989] loop1: detected capacity change from 0 to 128 [ 337.903692][ T29] kauditd_printk_skb: 855 callbacks suppressed [ 337.903710][ T29] audit: type=1326 audit(1764347915.030:20143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15997 comm="syz.1.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87acc9f749 code=0x7ffc0000 [ 337.930038][T16000] loop7: detected capacity change from 0 to 2048 [ 337.952874][T15998] loop1: detected capacity change from 0 to 2048 [ 337.959732][ T29] audit: type=1326 audit(1764347915.040:20144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.7.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 337.983529][ T29] audit: type=1326 audit(1764347915.040:20145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.7.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 338.007222][ T29] audit: type=1326 audit(1764347915.040:20146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.7.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 338.030917][ T4127] Bluetooth: hci0: command 0x1003 tx timeout [ 338.030921][ T29] audit: type=1326 audit(1764347915.040:20147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.7.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 338.031062][ T3936] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 338.037042][ T29] audit: type=1326 audit(1764347915.040:20148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.7.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 338.090306][ T29] audit: type=1326 audit(1764347915.040:20149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.7.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 338.114105][ T29] audit: type=1326 audit(1764347915.040:20150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.7.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 338.137823][ T29] audit: type=1326 audit(1764347915.040:20151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.7.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 338.161515][ T29] audit: type=1326 audit(1764347915.040:20152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15999 comm="syz.7.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 338.203148][T16000] loop7: p1 < > p4 [ 338.207367][T15998] loop1: p1 < > p4 [ 338.209361][T16000] loop7: p4 size 8388608 extends beyond EOD, truncated [ 338.212091][T15998] loop1: p4 size 8388608 extends beyond EOD, truncated [ 338.252328][T16004] usb usb8: usbfs: process 16004 (syz.1.3400) did not claim interface 0 before use [ 338.312204][T16010] loop6: detected capacity change from 0 to 512 [ 338.331225][T16010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.344202][T16010] ext4 filesystem being mounted at /161/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.673727][T16018] loop0: detected capacity change from 0 to 2048 [ 338.712473][T16020] loop3: detected capacity change from 0 to 2048 [ 338.719308][T16018] loop0: p1 < > p4 [ 338.723819][T16018] loop0: p4 size 8388608 extends beyond EOD, truncated [ 338.758371][T16020] loop3: p1 < > p4 [ 338.763059][T16020] loop3: p4 size 8388608 extends beyond EOD, truncated [ 338.799048][T16026] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3409'. [ 338.808996][T16026] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3409'. [ 339.186804][T16041] netlink: 'syz.7.3415': attribute type 1 has an invalid length. [ 339.194647][T16041] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3415'. [ 339.213782][T12850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.253488][T16045] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3416'. [ 339.275163][T16045] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3416'. [ 339.326679][T16052] IPv6: Can't replace route, no match found [ 339.691467][T16039] tipc: Started in network mode [ 339.696441][T16039] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 339.705462][T16039] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 339.713749][T16039] tipc: Enabled bearer , priority 10 [ 339.797369][T16064] xt_hashlimit: max too large, truncated to 1048576 [ 339.815032][T16064] can0: slcan on ttyS3. [ 339.848353][T16064] can0 (unregistered): slcan off ttyS3. [ 339.917345][T16064] loop1: detected capacity change from 0 to 2048 [ 339.971530][T16064] Alternate GPT is invalid, using primary GPT. [ 339.978043][T16064] loop1: p2 p3 p7 [ 340.195633][T16074] loop7: detected capacity change from 0 to 512 [ 340.211903][T16074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.224809][T16074] ext4 filesystem being mounted at /152/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.378515][T16084] loop3: detected capacity change from 0 to 2048 [ 340.397800][T16087] loop6: detected capacity change from 0 to 512 [ 340.419985][T16087] EXT4-fs (loop6): too many log groups per flexible block group [ 340.428109][T16087] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 340.440258][T16084] loop3: p1 < > p4 [ 340.449174][T16087] EXT4-fs (loop6): mount failed [ 340.454354][T16084] loop3: p4 size 8388608 extends beyond EOD, truncated [ 340.513113][T16092] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3432'. [ 340.522499][T16092] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3432'. [ 340.684748][T16097] loop1: detected capacity change from 0 to 128 [ 340.828027][ T3401] tipc: Node number set to 1 [ 340.853791][T16097] bio_check_eod: 83 callbacks suppressed [ 340.853811][T16097] syz.1.3433: attempt to access beyond end of device [ 340.853811][T16097] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 340.872999][T16097] buffer_io_error: 55 callbacks suppressed [ 340.873014][T16097] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 340.887756][T16097] syz.1.3433: attempt to access beyond end of device [ 340.887756][T16097] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 340.901702][T16097] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 341.004010][T16105] loop3: detected capacity change from 0 to 512 [ 341.011445][T16105] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 341.046367][T16105] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 341.054903][T16109] loop0: detected capacity change from 0 to 2048 [ 341.055318][T16105] FAT-fs (loop3): Filesystem has been set read-only [ 341.068485][T16105] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 341.078454][T16109] loop0: p1 < > p4 [ 341.082827][T16109] loop0: p4 size 8388608 extends beyond EOD, truncated [ 341.083996][T16105] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 341.102630][T16105] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 341.111581][T16110] netlink: 'syz.3.3436': attribute type 12 has an invalid length. [ 341.131514][T13145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.155985][T16114] loop7: detected capacity change from 0 to 512 [ 341.163375][T16114] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 341.185668][T16117] IPv6: Can't replace route, no match found [ 341.207325][T16114] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 341.216220][T16114] FAT-fs (loop7): Filesystem has been set read-only [ 341.226304][T16119] loop3: detected capacity change from 0 to 128 [ 341.233351][T16114] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 341.249855][T16120] netlink: 'syz.7.3439': attribute type 12 has an invalid length. [ 341.265786][T16114] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 341.276198][T16114] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 341.501787][T16119] syz.3.3441: attempt to access beyond end of device [ 341.501787][T16119] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 341.515704][T16119] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 341.534142][T16122] syz.3.3441: attempt to access beyond end of device [ 341.534142][T16122] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 341.547755][T16122] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 341.557281][T16122] syz.3.3441: attempt to access beyond end of device [ 341.557281][T16122] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 341.571029][T16122] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 341.862822][T16131] tipc: Enabling of bearer rejected, already enabled [ 341.983494][T16141] loop7: detected capacity change from 0 to 2048 [ 342.035973][T16146] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 342.043855][T16146] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3450'. [ 342.048531][T16141] loop7: p1 < > p4 [ 342.059473][T16141] loop7: p4 size 8388608 extends beyond EOD, truncated [ 342.077520][T16150] loop6: detected capacity change from 0 to 512 [ 342.083207][T16151] loop1: detected capacity change from 0 to 512 [ 342.085109][T16150] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 342.116669][T16150] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 342.125512][T16150] FAT-fs (loop6): Filesystem has been set read-only [ 342.131921][T16151] EXT4-fs (loop1): too many log groups per flexible block group [ 342.140994][T16151] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 342.148113][T16150] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 342.164332][T16151] EXT4-fs (loop1): mount failed [ 342.185664][T16150] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 342.194647][T16150] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 342.252134][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.272595][T16164] loop3: detected capacity change from 0 to 2048 [ 342.319352][T16164] loop3: p1 < > p4 [ 342.328435][T16164] loop3: p4 size 8388608 extends beyond EOD, truncated [ 342.693719][T16174] IPv6: Can't replace route, no match found [ 342.924340][T16181] xt_hashlimit: max too large, truncated to 1048576 [ 342.941624][T16181] can0: slcan on ttyS3. [ 343.008086][T16181] can0 (unregistered): slcan off ttyS3. [ 343.059510][T16181] loop3: detected capacity change from 0 to 2048 [ 343.122698][T16181] Alternate GPT is invalid, using primary GPT. [ 343.129156][T16181] loop3: p2 p3 p7 [ 343.496518][T16197] loop7: detected capacity change from 0 to 512 [ 343.504149][T16197] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 343.528076][T16197] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 343.536825][T16197] FAT-fs (loop7): Filesystem has been set read-only [ 343.543570][T16197] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 343.557760][T16197] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 343.566605][T16197] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 343.579587][T16197] netlink: 'syz.7.3469': attribute type 12 has an invalid length. [ 343.605089][ T29] kauditd_printk_skb: 791 callbacks suppressed [ 343.605107][ T29] audit: type=1326 audit(1764347920.730:20944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.7.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 343.635436][ T29] audit: type=1326 audit(1764347920.730:20945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.7.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 343.635778][T16200] loop7: detected capacity change from 0 to 2048 [ 343.659973][ T29] audit: type=1326 audit(1764347920.750:20946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.7.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 343.689393][ T29] audit: type=1326 audit(1764347920.750:20947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.7.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 343.713517][ T29] audit: type=1326 audit(1764347920.750:20948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.7.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 343.737228][ T29] audit: type=1326 audit(1764347920.750:20949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.7.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 343.760956][ T29] audit: type=1326 audit(1764347920.750:20950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.7.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 343.784707][ T29] audit: type=1326 audit(1764347920.750:20951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.7.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 343.808405][ T29] audit: type=1326 audit(1764347920.750:20952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.7.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 343.832033][ T29] audit: type=1326 audit(1764347920.750:20953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.7.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc673e8f749 code=0x7ffc0000 [ 343.860386][T16200] loop7: p1 < > p4 [ 343.864962][T16200] loop7: p4 size 8388608 extends beyond EOD, truncated [ 343.875526][T16202] loop1: detected capacity change from 0 to 128 [ 343.907508][T16204] loop7: detected capacity change from 0 to 512 [ 343.914528][T16204] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 343.955137][T16207] loop3: detected capacity change from 0 to 128 [ 343.963388][T16204] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 343.972237][T16204] FAT-fs (loop7): Filesystem has been set read-only [ 343.981394][T16204] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 344.003590][T16204] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 344.013209][T16209] netlink: 'syz.7.3472': attribute type 12 has an invalid length. [ 344.024230][T16204] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 344.096978][T16212] loop0: detected capacity change from 0 to 128 [ 344.108746][T16215] loop7: detected capacity change from 0 to 512 [ 344.115879][T16215] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 344.146696][T16205] syz.1.3471: attempt to access beyond end of device [ 344.146696][T16205] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 344.160312][T16205] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 344.175101][T16215] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 344.178702][T16202] syz.1.3471: attempt to access beyond end of device [ 344.178702][T16202] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 344.184000][T16215] FAT-fs (loop7): Filesystem has been set read-only [ 344.197436][T16202] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 344.216010][T16202] syz.1.3471: attempt to access beyond end of device [ 344.216010][T16202] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 344.216045][T16202] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 344.230842][T16215] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 344.253684][T16215] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 344.254532][T16215] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 344.328343][ T4127] Bluetooth: hci0: command 0x1003 tx timeout [ 344.334585][ T3936] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 344.423922][ T2496] Bluetooth: hci0: Frame reassembly failed (-84) [ 344.483350][T16207] syz.3.3473: attempt to access beyond end of device [ 344.483350][T16207] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 344.496847][T16207] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 344.533663][T16207] syz.3.3473: attempt to access beyond end of device [ 344.533663][T16207] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 344.547166][T16207] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 344.882552][T16239] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3484'. [ 344.898195][T16239] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3484'. [ 345.002949][T16243] loop6: detected capacity change from 0 to 512 [ 345.009991][T16243] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 345.030826][T16243] netlink: 'syz.6.3486': attribute type 12 has an invalid length. [ 345.195790][T16251] loop6: detected capacity change from 0 to 2048 [ 345.218726][T16251] loop6: p1 < > p4 [ 345.223455][T16251] loop6: p4 size 8388608 extends beyond EOD, truncated [ 345.392741][T16254] loop1: detected capacity change from 0 to 512 [ 345.409122][T16254] EXT4-fs (loop1): too many log groups per flexible block group [ 345.416977][T16254] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 345.423914][T16254] EXT4-fs (loop1): mount failed [ 345.496742][T16258] netlink: 'syz.3.3492': attribute type 1 has an invalid length. [ 345.504588][T16258] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3492'. [ 345.604598][T16268] loop0: detected capacity change from 0 to 512 [ 345.611584][T16268] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 345.635929][T16268] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 345.645211][T16268] FAT-fs (loop0): Filesystem has been set read-only [ 345.652291][T16268] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 345.666449][T16268] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 345.675247][T16268] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 345.696344][T16268] netlink: 'syz.0.3496': attribute type 12 has an invalid length. [ 345.817592][T16277] IPv6: Can't replace route, no match found [ 346.209779][T16282] loop1: detected capacity change from 0 to 2048 [ 346.238671][T16282] loop1: p1 < > p4 [ 346.243131][T16282] loop1: p4 size 8388608 extends beyond EOD, truncated [ 346.273350][T16284] loop1: detected capacity change from 0 to 128 [ 346.470705][T16284] bio_check_eod: 2 callbacks suppressed [ 346.470720][T16284] syz.1.3502: attempt to access beyond end of device [ 346.470720][T16284] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 346.489867][T16284] buffer_io_error: 2 callbacks suppressed [ 346.489960][T16284] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 346.504237][ T3936] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 346.504251][T15898] Bluetooth: hci0: command 0x1003 tx timeout [ 346.640382][T16290] netlink: 'syz.0.3505': attribute type 1 has an invalid length. [ 346.648345][T16290] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3505'. [ 346.686623][T16294] loop0: detected capacity change from 0 to 512 [ 346.693718][T16294] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 346.717630][T16294] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 346.726437][T16294] FAT-fs (loop0): Filesystem has been set read-only [ 346.733172][T16294] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 346.747305][T16294] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 346.756182][T16294] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 346.766755][T16294] netlink: 'syz.0.3506': attribute type 12 has an invalid length. [ 346.937494][T16300] loop0: detected capacity change from 0 to 512 [ 346.944616][T16300] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 346.970835][T16300] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 346.979698][T16300] FAT-fs (loop0): Filesystem has been set read-only [ 346.986447][T16300] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 347.001114][T16300] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 347.009936][T16300] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 347.037359][T16303] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3509'. [ 347.046898][T16303] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3509'. [ 347.060376][T16300] netlink: 'syz.0.3508': attribute type 12 has an invalid length. [ 347.072240][T16305] loop7: detected capacity change from 0 to 128 [ 347.321091][T16305] ================================================================== [ 347.329215][T16305] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 347.337253][T16305] [ 347.339593][T16305] write to 0xffff88810061dc28 of 4 bytes by task 16308 on cpu 0: [ 347.347332][T16305] __mark_inode_dirty+0x248/0x750 [ 347.352389][T16305] mark_buffer_dirty+0x133/0x210 [ 347.357351][T16305] block_write_end+0x12d/0x210 [ 347.362144][T16305] generic_write_end+0x56/0x150 [ 347.364856][T16308] syz.7.3510: attempt to access beyond end of device [ 347.364856][T16308] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 347.367034][T16305] fat_write_end+0x4f/0x160 [ 347.367070][T16305] generic_perform_write+0x312/0x490 [ 347.380498][T16308] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 347.384933][T16305] __generic_file_write_iter+0x9e/0x120 [ 347.404528][T16305] generic_file_write_iter+0x8d/0x2f0 [ 347.409929][T16305] iter_file_splice_write+0x666/0xa60 [ 347.415336][T16305] direct_splice_actor+0x156/0x2a0 [ 347.420482][T16305] splice_direct_to_actor+0x312/0x680 [ 347.425888][T16305] do_splice_direct+0xda/0x150 [ 347.430675][T16305] do_sendfile+0x380/0x650 [ 347.435129][T16305] __x64_sys_sendfile64+0x105/0x150 [ 347.440365][T16305] x64_sys_call+0x2bb4/0x3000 [ 347.445054][T16305] do_syscall_64+0xd2/0x200 [ 347.449570][T16305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.455478][T16305] [ 347.457887][T16305] read to 0xffff88810061dc28 of 4 bytes by task 16305 on cpu 1: [ 347.465528][T16305] __mark_inode_dirty+0x55/0x750 [ 347.470787][T16305] fat_update_time+0x1ec/0x200 [ 347.475656][T16305] touch_atime+0x148/0x340 [ 347.480091][T16305] filemap_splice_read+0x6ba/0x740 [ 347.485238][T16305] splice_direct_to_actor+0x26f/0x680 [ 347.490718][T16305] do_splice_direct+0xda/0x150 [ 347.495490][T16305] do_sendfile+0x380/0x650 [ 347.499935][T16305] __x64_sys_sendfile64+0x105/0x150 [ 347.505241][T16305] x64_sys_call+0x2bb4/0x3000 [ 347.509928][T16305] do_syscall_64+0xd2/0x200 [ 347.514435][T16305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.520329][T16305] [ 347.522650][T16305] value changed: 0x00000010 -> 0x00000070 [ 347.528363][T16305] [ 347.530692][T16305] Reported by Kernel Concurrency Sanitizer on: [ 347.536841][T16305] CPU: 1 UID: 0 PID: 16305 Comm: syz.7.3510 Not tainted syzkaller #0 PREEMPT(voluntary) [ 347.546655][T16305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 347.556713][T16305] ================================================================== [ 347.568683][T16305] syz.7.3510: attempt to access beyond end of device [ 347.568683][T16305] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 347.582276][T16305] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 347.608078][ T4127] Bluetooth: hci1: Opcode 0x1003 failed: -110