last executing test programs: 4m6.48005747s ago: executing program 2 (id=420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) 4m5.565615434s ago: executing program 2 (id=431): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x78}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m5.457121296s ago: executing program 2 (id=432): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) unshare(0x68040200) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r7, 0x29, 0x49, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) ftruncate(0xffffffffffffffff, 0x2007ffc) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") chdir(0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 4m3.867090721s ago: executing program 2 (id=447): r0 = syz_io_uring_setup(0xd59, &(0x7f00000000c0)={0x0, 0x79ae, 0x3180, 0x7ffe, 0x40024e}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x21, 0x4fb, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40018, 0x0, {0x0, r5}}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0xfc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000402100"/25, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00'}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x3, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x2], 0x80000001, 0x29, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{}, &(0x7f0000001340), &(0x7f0000001380)}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@rand_addr, @local, 0x0}, &(0x7f0000000480)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d80)={'erspan0\x00', &(0x7f0000000d00)={'gre0\x00', r9, 0x7800, 0x0, 0x40, 0x2, {{0x13, 0x4, 0x3, 0x3a, 0x4c, 0x66, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x86, 0x8, "390fd6673f51"}, @lsrr={0x83, 0x17, 0x82, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @broadcast]}, @lsrr={0x83, 0x17, 0x98, [@multicast2, @loopback, @private=0xa010100, @loopback, @empty]}, @end]}}}}}) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0x301080, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="9feb0100180000000000000005000000000000000a0000000b0000000000000c0500000000002e3000005f1e2e0090eea63bf31f41d1a656ffb8ead08db673899c23ba7beb16914ba080a67b62"], &(0x7f0000000e40)=""/73, 0x2e, 0xffffffffffffffaa, 0x0, 0x4}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file1\x00', 0x0, 0x8, r10}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001180)=ANY=[@ANYBLOB], 0x0, 0x2b, 0x0, 0x1}, 0x28) 4m3.565176276s ago: executing program 2 (id=452): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x100000001, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m3.046465664s ago: executing program 2 (id=460): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x14507e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0xa, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 4m3.038701364s ago: executing program 32 (id=460): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x14507e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0xa, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 3m5.038293025s ago: executing program 5 (id=1514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000280), &(0x7f0000000300)=r1}, 0x20) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x98999919, 0x0) 3m4.931757587s ago: executing program 5 (id=1517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="00000000000021f3b708000000101374d58ef20000107b8af8ff0000007502a200000000000007020000f8ffff19b80c000008000000b70400000000925e850000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) readv(r8, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x51c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1500010000000000000000007721f5438b20ffdf0300000008000900", @ANYRESDEC], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000033c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x37, "3601496ce3c12ea2c740e201a3bb7183c381cf9490856377473de8741cebb999ed0845fa6c50818cc8c2746f940f890000000000000000"}}) 3m4.06494844s ago: executing program 5 (id=1541): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044050) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000a40)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='dlm_lock_start\x00', r2, 0x0, 0x5}, 0x18) r3 = syz_io_uring_setup(0x5d0, &(0x7f0000000240)={0x0, 0xc845, 0x80, 0x3, 0x34f}, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) dup2(r3, r1) 3m3.977492702s ago: executing program 5 (id=1543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000010000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) getxattr(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)=@known='user.incfs.size\x00', &(0x7f00000002c0)=""/173, 0xad) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x100) 3m3.969883211s ago: executing program 5 (id=1545): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r3 = gettid() prctl$PR_SET_KEEPCAPS(0x8, 0xfdfffffffffffffb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) unshare(0x6060600) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = epoll_create(0xff) epoll_pwait2(r4, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) getpgid(r5) unshare(0x60000480) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x701}, 0x14}}, 0x0) 3m3.611116877s ago: executing program 5 (id=1552): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioprio_set$pid(0x1, 0x0, 0x0) (fail_nth: 12) 3m3.610802288s ago: executing program 33 (id=1552): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioprio_set$pid(0x1, 0x0, 0x0) (fail_nth: 12) 2m58.792810752s ago: executing program 6 (id=1615): mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) 2m58.779191802s ago: executing program 6 (id=1617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) 2m58.621089715s ago: executing program 6 (id=1619): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_interrupt={0x1, {0xe}, 0x182c, 0x0, &(0x7f00000002c0)="9d4346f934e7b5973d89c8f1b3557b381f5e985d335cb335a90b7a8dffa151d7d7a9b3d49377f30d636f7e26ca51ac2b6a5c346cda99622739d9df0eada9215c07512532a6309497d5adc2e7b44dd6fcbce19152ba95dc16b2e20f3b85bc7cd14cd7331787a53aea83f7ef673a3b2bfddd03d0842a93c2fe4a7a74cf0a41712c4e68959e92eb1e2af3feda3eedab403789e0bfcd56fb149d1f5b7a36f7e738f2f899bece3d471a29a784cc866c10e7b2a21bdc1fd8323880fc7f16ae50382a819c5a71422a0cf0f014694a97bd153fc812a4ffc3967db7764bc1", 0xda, 0x0, 0x2c68, 0x0, 0x7fff, 0x6, &(0x7f0000000040)="ada5488cc3af92cbe59a046f5312181ff85c548485e6ae9832cb94aeb4edfcc98fe1b254aa519fdc95663b229f"}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) 2m57.770125508s ago: executing program 6 (id=1646): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xfffffffd, 0x80, 0xffffffff, 0xfffffffd}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1c, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], 0x0}, 0x94) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0xffbfff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @ib={0x1b, 0x0, 0x0, {"b9322b534f61cd1848a76d94f0ba2078"}}}}, 0x118) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m57.536534562s ago: executing program 6 (id=1647): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56561, 0x4000, 0xfffffdfc, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000810) 2m55.614136122s ago: executing program 6 (id=1685): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000"], 0x30}}], 0x1, 0x4008804) 2m55.571563802s ago: executing program 34 (id=1685): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000"], 0x30}}], 0x1, 0x4008804) 5.755909681s ago: executing program 0 (id=4294): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x26, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='bcache_write\x00', r3, 0x0, 0x7}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r5}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000000)=0xc) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r10}}], [{@flag='dirsync'}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, '!}*$[[%'}}], 0x6b}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000ac0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x34, 0x32, 0x65, 0x33, 0xc0c42cfff374324e, 0x35, 0x35], 0x2d, [0x65, 0x34, 0x33, 0x37], 0x2d, [0x38, 0x37, 0x63, 0x38], 0x2d, [0x37, 0x30, 0x0, 0x38], 0x2d, [0x33, 0x63, 0x2, 0xb, 0x32, 0x37, 0x37, 0x38]}}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@dont_measure}, {@seclabel}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 4.711753167s ago: executing program 0 (id=4301): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8405, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 3.379473688s ago: executing program 0 (id=4310): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)}}], 0x5, 0x200040d1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$eJzs3c1uG1UfBvBnEsf221fCXrBCSIwEC1ZV0ytwhFIJkRVVFsACIppKKI6QWikSH8Ltii0bFiy4AiQkLoQNd8AFILGjlSoNmvE4toubj6pu+fj9Nj45c54z/zMZJ5NFjj969fjoVpnb97/8Nf1+kY1RRnlQZJiNzNzLktE3AQD+yR5UVX6vplYdL+6tzhVJ+muuDQBYj/N+/7deOm391L52114aALAmN997/52dvb3dd8uynxvHX5/s13/Z16/T4zu380nGOcy1DPIoaR4UttI8LdTNG1VVTTrlw7Ish3njeHKyXyePP/y5nX/nt6TJb2eQYdN1+rTR5N/e290upxbyk7qOK+35R3X+egZ5+TS8lL++Ip/9bt58faH+qxnkl4/zaca51RQxzfeyt/vVdlm+VX37xxcf1OXV+WJyst9rxs1Vm8/5WwMAAAAAAAAAAAAAAAAAAAAAwL/Y1XbvnF6a/Xvqrnb/nc1H9RdbKWeGy/vzTPPFbKLF/YGqqppU+X62P8+1siyrduA838krnXRezKoBAAAAAAAAAAAAAAAAAADg7+XuZ58fHYzHh3eeSaPYmM7aSfLwZvK084wWel7L8phRstTTa1dyMB63Z8/4cLgwYafpaePZnI0pkjPLqBfxjC7LeY3/LVa42Pjhx8tO2D9/zNbqcz1V48rqazi7u44OitXXsJdZT7+9Sb7rJvMx3VywjO6TDlW5zO3XXVFhMrhIfLbW6Tz/bw5NzkileHJhm6fvy7aneHwV3eaqroxvtY089gaZ3xsXup/Tn8b/+rOisFsHAAAAAAAAAAAAAAAAAACs1fy/f1ccvH9mdKPqra0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiu5p//f4nGpA1fYHA3d+6+4CUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH/BnAAAA//+lXFN6") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) unlink(&(0x7f0000000100)='./file0/file1\x00') 2.60500726s ago: executing program 1 (id=4318): socket(0x11, 0x3, 0x73) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfff, 0x0, "ec28a144f13d7607"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r4, @ANYBLOB="88728798874f50e0cd4e0404d5938bc70a6ff110ff1a5d1877251dbf2569ec9674e08453487a92c7273421621f220bcdf0237c82e1b8689d333678ea5e3f082ead42e98ed32b01c8d6e65da6c54d6769006dc8ac50671a1b13c2a39391108a79670b162d35cc9e2c6d36a64c65ef9211d8557b76c4ad06473e5534cb68e24395c77ec9f3758455bcfa075cdef26c9841131c492f038d842faa5d9ea80e5ba5e23278c02705d1cc32337b15e631b673b4e7cb4efe5e4ff0520434cf0fdd9a6f8738e4dcda855e2b8a7045"], 0x28}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}, {0x8, 0x7, 0xf3, 0xfffffffffffffffd, 0xd, 0x80000000006, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x32}, 0xa, @in6=@local, 0x1502, 0x4, 0x3, 0x0, 0xc36, 0xfffffffb}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r5 = syz_open_pts(r0, 0x0) r6 = dup3(r5, r0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) setuid(0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.520302561s ago: executing program 7 (id=4320): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r0, 0x0, 0x7ffff000) 2.490287872s ago: executing program 0 (id=4321): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r0, 0x0, 0x7ffff000) 2.150975737s ago: executing program 3 (id=4325): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)}}], 0x5, 0x200040d1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 2.062314129s ago: executing program 7 (id=4326): r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x9d, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000300)) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200ff020000000000000000000000000001080008000206"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000080)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@grpjquota}, {@nomblk_io_submit}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") open(&(0x7f0000000000)='./file1\x00', 0x147042, 0x60) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r7) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x8004587d, &(0x7f0000000080)) getpgrp(0x0) 2.014279669s ago: executing program 3 (id=4327): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) connect$unix(r5, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r7 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync(r5) sendmsg$netlink(r7, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="100000002500040026bd7000ff0b15cd03a616aad3a6dbdf2590f94195b68e4763219c49f9fff69daa80c372afdecd3f5546435ccde367050b98ecc5c211e0c25dd875e26d22e1a184ffad7ac7ad358639c2d9729bcf854ccb17a7ddf9b2e30577a1c5397ba64cb3a7ad"], 0x10}], 0x1, 0x0, 0x0, 0x24000801}, 0x40010) r8 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/146, 0x92}, {&(0x7f0000000880)=""/4111, 0x100f}, {&(0x7f00000007c0)=""/97, 0x61}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1000}], 0x3, 0x8042, 0x0) write$char_usb(r6, &(0x7f0000000040)="e2", 0x12d8) unshare(0x42000000) 1.95758259s ago: executing program 7 (id=4330): r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x9d, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000300)) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200ff020000000000000000000000000001080008000206"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000080)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@grpjquota}, {@nomblk_io_submit}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") open(&(0x7f0000000000)='./file1\x00', 0x147042, 0x60) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0x0) 1.95589839s ago: executing program 0 (id=4331): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000010a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001400000008000a00", @ANYRES32=r4, @ANYBLOB="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"], 0x24}}, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYRES8=r8, @ANYRESOCT=r9], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0x80, '\x00', r9, r1, 0x1, 0x2, 0x2}, 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/205, 0xcd}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.677195105s ago: executing program 7 (id=4332): io_setup(0x3, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsn(&(0x7f00000001c0), 0x9, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000700), 0xfd, 0x585, &(0x7f0000002480)="$eJzs3d9rFNceAPDvbDZGjfcmF0Su9+Ei+FCLuDFJf1goaB9LKxXad7ska5BsXMkPaVKh8aG+9KVIoZQKpX9A3/rQR+k/0L9CaAUpEtqHUkiZ3dm4Zn9kEzfd1P18YHTOzuycc3Lme3LOzGw2gIF1Kv0nF3EyIj5PIsYatuUj23iqtt/Gk9sz6ZLE5ub7vyZxcduxkuz/0Szx34j48dOIs7nmfJdW1+aL5XJpMUtPLC/cnFhaXTt3faE4V5or3Zianr7w6vTUG6+/1kUthruq68tXfv/qvQdvX/js9MaX3z36z70kLsWxbFtar64O0tl6Y+JU8c+t8l3atuNkDzI7SJJ+F4A9GcriPI2gkzEWQ1nUAy++TyJiExhQifiHAVUfB9Tn9j2aB/9jPH6rNgFqqP9QbUu+dm0kDlfnRkc3kmdmRul8d7wH+ad5/PDL/XvpEp2vQxzZIQ2wK+t3IuJ8Pt/c/ydZ/7d356sXjzvbnkcv+lSgOw/S8U+yHtEU/7mt8U+0GP+Mtojdvdh+jObxT+5RD7JpKx3/vdly/LvVdY0PZal/Vfun4eTa9XLpfET8OyLOxPBImu50P+fCxsPNdtsax3/pkuZfHwtm5XiUH3n2PbPF5eLz1LnR4zsR/8u3qn+y1f5Ji/ZPfx5XuszjROn+/9tt27n++2vz24iXWrb/0ztaSef7kxPV82GiflY0++3uiZ/a5d/v+qftf7Rz/ceTxvu1S7vP45vDf5Tabdvr+X8o+aC6fih77aPi8vLiZMSh5N386PbXp56+t56u75/W/8zp1vHf6fxPJ18fdln/u8fvtt31ILT/7K7af/crD9/5+Ot2+XfX/q9U185kr3TT/3VbwOf52QEAAAAAAMBBk4uIY5HkClvruVyhUHu+43gczZUrS8tnr1VWbsxG9bOy4zGcq9/pHmt4HmIye3arnp7alp6O2mO1XwwdqaYLM5XybL8rDwAAAAAAAAAAAAAAAAAAAAfEaJvP/6d+Hup36YB9V/1ig5F+lwLohx2/8r8X3/QEHEg7xj/wwtp9/LsyAC8Kv/9hcIl/GFziHwZXt/E/PLbPBQH+dn7/w+AS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBTVy5fTpfNjSe3Z9L07K3VlfnKrXOzpaX5wsLKTGGmsnizMFepzJVLhZnKwk7HK1cqNydjvZZYnlhaXbu6UFm5sXz1+kJxrnS1NOyPDQMAAAAAAAAAAAAAAAAAAECTpdW1+WK5XFq00nblYhyIYuxnBauG9/T2fJ8L/312Ju97XiODFTL96pEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNlfAQAA//+BlSf2") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x600a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 1.643501635s ago: executing program 1 (id=4333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioperm(0x0, 0xd, 0x4000000000000020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480)='devpts\x00', 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020022e372a19086100004000000060079a37a524c52a82445933e1a43ca8192e780ff7ac3552ffcf48e026b008268bb794a0719910dfe58e7bef63fa0e029f7e82a4bf04a1684fe1d9f8ab25236417fd4528ca86cdf1950ac63b3c3be624c1f8053913447d1adcd4503902541cd8562fb24da97b40cfebf359e9444b2a419a89c35bee75ea08ccefb481134f07ff85f91009e100476a39fdce3d275f7"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) 1.556506097s ago: executing program 4 (id=4334): syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r0], 0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.511330897s ago: executing program 1 (id=4335): r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x1, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={&(0x7f0000000040), 0xe}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) msgctl$IPC_RMID(r0, 0x0) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) setns(0xffffffffffffffff, 0x20000000) ppoll(&(0x7f00000000c0)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x4e) connect$unix(r5, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 1.400949949s ago: executing program 4 (id=4336): socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb02adeb7430d0955, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) 694.25755ms ago: executing program 7 (id=4337): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@prjquota}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noblock_validity}, {@noblock_validity}, {@debug_want_extra_isize}, {@user_xattr}, {@bh}, {@dioread_nolock}], [{@fowner_eq}, {@euid_lt}, {@measure}, {@euid_eq}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000060000000c00000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000055c67c9b29e4339000"/33], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x105000, 0x28) vmsplice(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) utimes(&(0x7f0000001ac0)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000380)={0x9, 0x2b, 0x17, 0x1c, 0x3, 0x80000000, 0x2, 0x7e, 0x1}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bc27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 535.670752ms ago: executing program 4 (id=4338): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)}}], 0x5, 0x200040d1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 471.469343ms ago: executing program 1 (id=4339): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d3180000f100000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) utime(&(0x7f0000000000)='./file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x78, 0x20000, {r3}}, 0x20) sendto$inet(r3, &(0x7f0000000280)="e120d7ee6eb0c4184536ee406ef43d2754fdd48c9d20d5d35fcdc5768c318eaf61df49d38ef870802e8ba56a0977c561ccc75af1efb71416223de9c491147a742a78b608b2213d1e6f616f6555ba05f28a383be5c10651efeb29aa13117e9bb0418e4ab361a65b58a85e6b4e5b45bcd2", 0x70, 0x841, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000300)={0xff1e, 0xfffff801, 0x0, 0x200, 0x1a, "c1ef0578e3c418a6aaf67300376d4bad785bb2"}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e24, 0x4, @remote, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r6 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x441, &(0x7f0000000d80)="$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") r7 = openat(r6, &(0x7f0000000040)='./file1\x00', 0x0, 0x132) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 345.370015ms ago: executing program 3 (id=4340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, 0x0, 0x0) close(r2) 344.868375ms ago: executing program 4 (id=4341): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000b03"], 0x0, 0x5a}, 0x28) (async) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 302.359526ms ago: executing program 0 (id=4342): socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb02adeb7430d0955, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) 273.683226ms ago: executing program 3 (id=4343): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 209.166208ms ago: executing program 4 (id=4344): syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r0], 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 208.438277ms ago: executing program 1 (id=4345): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1bd6fe8c8d4c62d5}}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup2(r3, r3) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_delete(0x0) mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0x21) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r5 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x800000009) 147.768898ms ago: executing program 3 (id=4346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioperm(0x0, 0xd, 0x4000000000000020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480)='devpts\x00', 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020022e372a19086100004000000060079a37a524c52a82445933e1a43ca8192e780ff7ac3552ffcf48e026b008268bb794a0719910dfe58e7bef63fa0e029f7e82a4bf04a1684fe1d9f8ab25236417fd4528ca86cdf1950ac63b3c3be624c1f8053913447d1adcd4503902541cd8562fb24da97b40cfebf359e9444b2a419a89c35bee75ea08ccefb481134f07ff85f91009e100476a39fdce3d275f7"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) 87.20033ms ago: executing program 3 (id=4347): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8405, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 64.01573ms ago: executing program 1 (id=4348): r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x1, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={&(0x7f0000000040), 0xe}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) msgctl$IPC_RMID(r0, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) setns(0xffffffffffffffff, 0x20000000) ppoll(&(0x7f00000000c0)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x4e) connect$unix(r4, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 34.7297ms ago: executing program 4 (id=4349): r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x1, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={&(0x7f0000000040), 0xe}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) msgctl$IPC_RMID(r0, 0x0) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) setns(0xffffffffffffffff, 0x20000000) ppoll(&(0x7f00000000c0)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x4e) connect$unix(r5, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 0s ago: executing program 7 (id=4350): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) kernel console output (not intermixed with test programs): ot/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 279.615736][T13821] loop0: detected capacity change from 0 to 2048 [ 279.642135][ T29] audit: type=1326 audit(1751363808.131:12027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.0.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 279.659272][T13825] netlink: 'syz.1.3436': attribute type 21 has an invalid length. [ 279.666129][ T29] audit: type=1326 audit(1751363808.131:12028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.0.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 279.697598][ T29] audit: type=1326 audit(1751363808.131:12029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.0.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 279.703955][T13825] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 279.721211][ T29] audit: type=1326 audit(1751363808.131:12030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.0.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 279.721251][ T29] audit: type=1326 audit(1751363808.131:12031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.0.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 279.729093][T13825] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3436'. [ 279.785955][ T29] audit: type=1326 audit(1751363808.131:12032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.0.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 279.809995][ T29] audit: type=1326 audit(1751363808.131:12033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.0.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 279.833829][ T29] audit: type=1326 audit(1751363808.131:12034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.0.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 279.833868][ T29] audit: type=1326 audit(1751363808.131:12035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13820 comm="syz.0.3435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 279.880216][T13831] loop0: detected capacity change from 0 to 128 [ 279.914371][T13829] loop7: detected capacity change from 0 to 1024 [ 279.922604][T13801] EXT4-fs (loop4): pa ffff8881069bae00: logic 48, phys. 177, len 21 [ 279.930713][T13801] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 279.974908][T13829] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.991013][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.039652][T13840] tipc: Started in network mode [ 280.044625][T13840] tipc: Node identity a6a1da2c20a1, cluster identity 4711 [ 280.051808][T13840] tipc: Enabled bearer , priority 0 [ 280.055084][T13831] syz.0.3440: attempt to access beyond end of device [ 280.055084][T13831] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 280.074469][T13839] tipc: Resetting bearer [ 280.089039][T13839] tipc: Disabling bearer [ 280.116277][T13848] loop4: detected capacity change from 0 to 256 [ 280.124382][T13848] vfat: Unknown parameter '0x00000000000000040xffffffffffffffff' [ 280.131176][T13829] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.3438: Allocating blocks 449-513 which overlap fs metadata [ 280.148782][ T9185] kworker/u8:10: attempt to access beyond end of device [ 280.148782][ T9185] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 280.214648][T13852] pimreg: entered allmulticast mode [ 280.221602][T13852] pimreg: left allmulticast mode [ 280.242682][T13858] loop0: detected capacity change from 0 to 128 [ 280.327143][T13860] loop3: detected capacity change from 0 to 2048 [ 280.475136][T13877] random: crng reseeded on system resumption [ 280.650436][T13828] EXT4-fs (loop7): pa ffff888106a63540: logic 48, phys. 177, len 21 [ 280.658585][T13828] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 280.682768][T13883] loop1: detected capacity change from 0 to 1024 [ 280.844847][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.863555][T13883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.895565][T13895] pimreg: entered allmulticast mode [ 280.911245][T13897] loop4: detected capacity change from 0 to 2048 [ 280.918481][T13895] pimreg: left allmulticast mode [ 280.923343][T13878] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3457: Allocating blocks 449-513 which overlap fs metadata [ 281.290055][T13876] EXT4-fs (loop1): pa ffff8881069bad90: logic 48, phys. 177, len 21 [ 281.298314][T13876] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 281.449201][T13925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3476'. [ 281.489294][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.719233][T13942] loop0: detected capacity change from 0 to 128 [ 281.744436][T13941] pimreg: entered allmulticast mode [ 281.932967][T13941] pimreg: left allmulticast mode [ 282.028439][T13947] random: crng reseeded on system resumption [ 282.588383][T13964] tipc: Started in network mode [ 282.593499][T13964] tipc: Node identity de4ad5caf818, cluster identity 4711 [ 282.600728][T13964] tipc: Enabled bearer , priority 0 [ 282.630972][T13963] tipc: Resetting bearer [ 282.644245][T13966] loop3: detected capacity change from 0 to 256 [ 282.645241][T13968] loop0: detected capacity change from 0 to 1024 [ 282.657455][T13966] vfat: Unknown parameter '0x00000000000000040xffffffffffffffff' [ 282.688055][T13963] tipc: Disabling bearer [ 282.700986][T13968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.743076][T13968] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.3491: Allocating blocks 449-513 which overlap fs metadata [ 282.810249][T13985] netlink: 'syz.4.3498': attribute type 21 has an invalid length. [ 282.839669][T13985] netlink: 'syz.4.3498': attribute type 1 has an invalid length. [ 282.847536][T13985] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3498'. [ 283.040061][T13967] EXT4-fs (loop0): pa ffff888106a63850: logic 48, phys. 177, len 21 [ 283.048280][T13967] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 283.217508][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.230428][T14000] loop3: detected capacity change from 0 to 128 [ 283.553122][T14007] random: crng reseeded on system resumption [ 284.035750][T14012] loop3: detected capacity change from 0 to 256 [ 284.045192][T14012] vfat: Unknown parameter '0x00000000000000040xffffffffffffffff' [ 284.224134][T14019] tipc: Enabled bearer , priority 0 [ 284.263455][T14015] tipc: Resetting bearer [ 284.321991][T14023] netlink: 'syz.3.3510': attribute type 21 has an invalid length. [ 284.342161][T14025] loop4: detected capacity change from 0 to 1024 [ 284.356758][T14025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.385656][T14025] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3511: Allocating blocks 449-513 which overlap fs metadata [ 284.462053][T14015] tipc: Disabling bearer [ 284.485734][T14023] netlink: 'syz.3.3510': attribute type 1 has an invalid length. [ 284.493613][T14023] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3510'. [ 284.517504][T14031] pimreg: entered allmulticast mode [ 284.561765][T14031] pimreg: left allmulticast mode [ 284.628935][T14035] loop3: detected capacity change from 0 to 1024 [ 284.678738][T14035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.717035][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 284.717055][ T29] audit: type=1326 audit(1751363813.241:12279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 284.746766][T14024] EXT4-fs (loop4): pa ffff888106a638c0: logic 48, phys. 177, len 21 [ 284.755194][T14024] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 284.769870][ T29] audit: type=1326 audit(1751363813.281:12280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 284.793698][ T29] audit: type=1326 audit(1751363813.281:12281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 284.798215][T14045] loop1: detected capacity change from 0 to 2048 [ 284.817418][ T29] audit: type=1326 audit(1751363813.281:12282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 284.847427][ T29] audit: type=1326 audit(1751363813.291:12283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 284.871152][ T29] audit: type=1326 audit(1751363813.291:12284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 284.894819][ T29] audit: type=1326 audit(1751363813.291:12285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 284.918563][ T29] audit: type=1326 audit(1751363813.291:12286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 284.942229][ T29] audit: type=1326 audit(1751363813.291:12287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 284.965906][ T29] audit: type=1326 audit(1751363813.291:12288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14043 comm="syz.1.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 284.969142][T14048] loop1: detected capacity change from 0 to 128 [ 285.015849][T14035] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3513: Allocating blocks 449-513 which overlap fs metadata [ 285.043071][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.126068][T14034] EXT4-fs (loop3): pa ffff888106a63930: logic 48, phys. 177, len 21 [ 285.134229][T14034] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 285.134351][T14048] syz.1.3517: attempt to access beyond end of device [ 285.134351][T14048] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 285.185761][T12359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.207100][T14063] tipc: Enabled bearer , priority 0 [ 285.214917][T14062] tipc: Resetting bearer [ 285.223854][ T9218] kworker/u8:37: attempt to access beyond end of device [ 285.223854][ T9218] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 285.258509][T14062] tipc: Disabling bearer [ 285.293070][T14069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3523'. [ 285.342276][T14074] loop0: detected capacity change from 0 to 2048 [ 285.380381][T14078] loop1: detected capacity change from 0 to 1024 [ 285.430760][T14078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.509660][T14093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3529'. [ 285.539432][T14078] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3528: Allocating blocks 449-513 which overlap fs metadata [ 285.573184][T14098] loop7: detected capacity change from 0 to 1024 [ 285.589350][T14100] loop3: detected capacity change from 0 to 128 [ 285.618373][T14100] syz.3.3535: attempt to access beyond end of device [ 285.618373][T14100] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 285.752765][T14077] EXT4-fs (loop1): pa ffff888106a637e0: logic 48, phys. 177, len 21 [ 285.760463][ T9230] kworker/u8:49: attempt to access beyond end of device [ 285.760463][ T9230] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 285.760802][T14077] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 285.797487][T14106] tipc: Enabled bearer , priority 0 [ 285.813431][T14105] tipc: Resetting bearer [ 285.833196][T14098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.849340][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.881467][T14105] tipc: Disabling bearer [ 285.929138][T14114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3540'. [ 285.931281][T14110] loop3: detected capacity change from 0 to 2048 [ 285.957880][T14098] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.3534: Allocating blocks 449-513 which overlap fs metadata [ 286.115694][T14131] loop4: detected capacity change from 0 to 128 [ 286.195676][T14097] EXT4-fs (loop7): pa ffff8881069bad20: logic 48, phys. 177, len 21 [ 286.203993][T14097] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 286.224480][T14131] syz.4.3546: attempt to access beyond end of device [ 286.224480][T14131] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 286.238541][T14139] tipc: Enabled bearer , priority 0 [ 286.263627][ T9194] kworker/u8:19: attempt to access beyond end of device [ 286.263627][ T9194] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 286.268377][T14138] tipc: Resetting bearer [ 286.297928][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.300829][T14138] tipc: Disabling bearer [ 286.336378][T14145] loop4: detected capacity change from 0 to 2048 [ 286.496033][T14168] loop4: detected capacity change from 0 to 1024 [ 286.516609][T14171] loop0: detected capacity change from 0 to 128 [ 286.541644][T14171] syz.0.3564: attempt to access beyond end of device [ 286.541644][T14171] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 286.555725][T14168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.585580][T14168] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3565: Allocating blocks 449-513 which overlap fs metadata [ 286.612261][ T9230] kworker/u8:49: attempt to access beyond end of device [ 286.612261][ T9230] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 286.664950][T14182] loop3: detected capacity change from 0 to 2048 [ 286.815314][T14167] EXT4-fs (loop4): pa ffff8881069baaf0: logic 48, phys. 177, len 21 [ 286.823499][T14167] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 286.878334][T14196] tipc: Enabled bearer , priority 0 [ 286.891468][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.904135][T14185] tipc: Resetting bearer [ 286.924868][T14202] loop3: detected capacity change from 0 to 128 [ 286.932407][T14185] tipc: Disabling bearer [ 287.049071][T14207] loop1: detected capacity change from 0 to 2048 [ 287.074216][T14202] syz.3.3578: attempt to access beyond end of device [ 287.074216][T14202] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 287.180472][ T9232] kworker/u8:51: attempt to access beyond end of device [ 287.180472][ T9232] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 287.236868][T14224] loop4: detected capacity change from 0 to 1024 [ 287.272398][T14224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.310472][T14224] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3588: Allocating blocks 449-513 which overlap fs metadata [ 287.348411][T14232] tipc: Enabled bearer , priority 0 [ 287.356132][T14230] tipc: Resetting bearer [ 287.358272][T14240] loop7: detected capacity change from 0 to 2048 [ 287.420642][T14230] tipc: Disabling bearer [ 287.480089][T14220] EXT4-fs (loop4): pa ffff888106a63930: logic 48, phys. 177, len 21 [ 287.488184][T14220] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 287.529437][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.539668][T14250] loop3: detected capacity change from 0 to 128 [ 287.683625][T14271] loop7: detected capacity change from 0 to 2048 [ 287.730201][T14274] netlink: 'syz.7.3608': attribute type 21 has an invalid length. [ 287.800705][T14274] netlink: 'syz.7.3608': attribute type 1 has an invalid length. [ 287.808558][T14274] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3608'. [ 287.844960][T14276] tipc: Enabled bearer , priority 0 [ 287.879708][T14273] tipc: Resetting bearer [ 287.907055][T14273] tipc: Disabling bearer [ 288.124318][T14290] loop3: detected capacity change from 0 to 128 [ 288.137314][T14292] loop7: detected capacity change from 0 to 1024 [ 288.165548][T14292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.279555][T14292] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.3612: Allocating blocks 449-513 which overlap fs metadata [ 288.296688][T14305] loop0: detected capacity change from 0 to 2048 [ 288.336288][T14308] netlink: 'syz.0.3621': attribute type 21 has an invalid length. [ 288.344512][T14308] netlink: 'syz.0.3621': attribute type 1 has an invalid length. [ 288.352338][T14308] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3621'. [ 288.506638][T14315] tipc: Enabled bearer , priority 0 [ 288.538813][T14306] tipc: Resetting bearer [ 288.569504][T14306] tipc: Disabling bearer [ 288.624344][T14291] EXT4-fs (loop7): pa ffff888106a637e0: logic 48, phys. 177, len 21 [ 288.632514][T14291] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 288.706496][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.772697][T14337] loop3: detected capacity change from 0 to 2048 [ 288.803886][T14340] netlink: 'syz.7.3632': attribute type 21 has an invalid length. [ 288.812271][T14340] netlink: 'syz.7.3632': attribute type 1 has an invalid length. [ 288.820069][T14340] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3632'. [ 288.873975][T14347] loop1: detected capacity change from 0 to 1024 [ 288.895059][T14347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.059851][T14347] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3635: Allocating blocks 449-513 which overlap fs metadata [ 289.194305][T14369] loop3: detected capacity change from 0 to 1024 [ 289.235403][T14369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.314387][T14345] EXT4-fs (loop1): pa ffff8881069baaf0: logic 48, phys. 177, len 21 [ 289.322533][T14345] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 289.377958][T14369] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3640: Allocating blocks 449-513 which overlap fs metadata [ 289.407010][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.492353][T14382] netlink: 'syz.0.3644': attribute type 21 has an invalid length. [ 289.500374][T14382] netlink: 'syz.0.3644': attribute type 1 has an invalid length. [ 289.508239][T14382] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3644'. [ 289.716357][T14368] EXT4-fs (loop3): pa ffff8881069bac40: logic 48, phys. 177, len 21 [ 289.724537][T14368] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 289.808600][T12359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.840246][T14409] netlink: 'syz.0.3656': attribute type 21 has an invalid length. [ 289.860702][T14409] netlink: 'syz.0.3656': attribute type 1 has an invalid length. [ 289.868789][T14409] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3656'. [ 289.897488][T14411] loop3: detected capacity change from 0 to 1024 [ 289.913663][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 289.913760][ T29] audit: type=1326 audit(1751363818.441:12896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.0.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 289.990099][ T29] audit: type=1326 audit(1751363818.471:12897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.0.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 290.013857][ T29] audit: type=1326 audit(1751363818.471:12898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.0.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 290.037576][ T29] audit: type=1326 audit(1751363818.471:12899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.0.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 290.061303][ T29] audit: type=1326 audit(1751363818.471:12900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.0.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 290.085108][ T29] audit: type=1326 audit(1751363818.471:12901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.0.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 290.108790][ T29] audit: type=1326 audit(1751363818.471:12902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.0.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 290.132433][ T29] audit: type=1326 audit(1751363818.471:12903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.0.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 290.156096][ T29] audit: type=1326 audit(1751363818.471:12904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.0.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 290.179802][ T29] audit: type=1326 audit(1751363818.471:12905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.0.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 290.208530][T14411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.285187][T14411] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3654: Allocating blocks 449-513 which overlap fs metadata [ 290.506683][T14410] EXT4-fs (loop3): pa ffff8881069babd0: logic 48, phys. 177, len 21 [ 290.514855][T14410] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 290.534377][T14447] loop7: detected capacity change from 0 to 1024 [ 290.546488][T12359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.567220][T14447] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.611166][T14453] loop3: detected capacity change from 0 to 128 [ 290.625980][T14455] netlink: 'syz.4.3668': attribute type 21 has an invalid length. [ 290.636617][T14447] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.3665: Allocating blocks 449-513 which overlap fs metadata [ 290.660790][T14455] netlink: 'syz.4.3668': attribute type 1 has an invalid length. [ 290.668781][T14455] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3668'. [ 290.898263][T14469] random: crng reseeded on system resumption [ 291.133033][T14446] EXT4-fs (loop7): pa ffff8881069bab60: logic 48, phys. 177, len 21 [ 291.141157][T14446] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 291.185925][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.341469][T14494] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3682'. [ 291.350798][T14492] loop1: detected capacity change from 0 to 128 [ 291.358744][T14496] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3676'. [ 291.408007][T14500] loop4: detected capacity change from 0 to 2048 [ 291.449547][T14492] bio_check_eod: 4 callbacks suppressed [ 291.449628][T14492] syz.1.3681: attempt to access beyond end of device [ 291.449628][T14492] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 291.482320][ T9218] kworker/u8:37: attempt to access beyond end of device [ 291.482320][ T9218] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 291.551395][T14509] loop1: detected capacity change from 0 to 1024 [ 291.579504][T14509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.616103][T14522] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3693'. [ 291.673806][T14509] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3687: Allocating blocks 449-513 which overlap fs metadata [ 291.778481][T14534] syzkaller0: entered promiscuous mode [ 291.784122][T14534] syzkaller0: entered allmulticast mode [ 291.873393][T14543] loop3: detected capacity change from 0 to 128 [ 291.910247][T14550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3702'. [ 291.944973][T14543] syz.3.3699: attempt to access beyond end of device [ 291.944973][T14543] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 291.976243][T14556] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3701'. [ 292.043842][ T9194] kworker/u8:19: attempt to access beyond end of device [ 292.043842][ T9194] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 292.086073][T14560] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3706'. [ 292.095258][T14508] EXT4-fs (loop1): pa ffff888106a639a0: logic 48, phys. 177, len 21 [ 292.103398][T14508] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 292.161426][T14568] syzkaller0: entered promiscuous mode [ 292.167141][T14568] syzkaller0: entered allmulticast mode [ 292.178110][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.237139][T14576] syzkaller0: entered promiscuous mode [ 292.242920][T14576] syzkaller0: entered allmulticast mode [ 292.297373][T14574] pimreg: entered allmulticast mode [ 292.341601][T14573] pimreg: left allmulticast mode [ 292.360017][T14583] loop4: detected capacity change from 0 to 128 [ 292.393199][T14583] syz.4.3715: attempt to access beyond end of device [ 292.393199][T14583] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 292.429280][T14593] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3719'. [ 292.446394][ T9232] kworker/u8:51: attempt to access beyond end of device [ 292.446394][ T9232] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 292.477354][T14600] loop3: detected capacity change from 0 to 1024 [ 292.504619][T14600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.518266][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3721'. [ 292.531959][T14600] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3722: Allocating blocks 449-513 which overlap fs metadata [ 292.603061][T14612] syzkaller0: entered promiscuous mode [ 292.608605][T14612] syzkaller0: entered allmulticast mode [ 292.762277][T14599] EXT4-fs (loop3): pa ffff8881069bacb0: logic 48, phys. 177, len 21 [ 292.770387][T14599] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 292.802997][T12359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.840376][T14625] syzkaller0: entered promiscuous mode [ 292.846093][T14625] syzkaller0: entered allmulticast mode [ 292.955889][T14633] loop1: detected capacity change from 0 to 128 [ 292.957160][T14632] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3732'. [ 292.989325][T14633] syz.1.3731: attempt to access beyond end of device [ 292.989325][T14633] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 293.029331][ T9218] kworker/u8:37: attempt to access beyond end of device [ 293.029331][ T9218] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 293.102338][T14646] syzkaller0: entered promiscuous mode [ 293.107878][T14646] syzkaller0: entered allmulticast mode [ 293.177003][T14650] loop7: detected capacity change from 0 to 1024 [ 293.209605][T14650] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.270375][T14661] loop0: detected capacity change from 0 to 1024 [ 293.277613][T14661] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 293.325171][T14650] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.3738: Allocating blocks 449-513 which overlap fs metadata [ 293.348550][T14665] validate_nla: 10 callbacks suppressed [ 293.348572][T14665] netlink: 'syz.1.3744': attribute type 21 has an invalid length. [ 293.356812][T14667] loop3: detected capacity change from 0 to 128 [ 293.365932][T14661] loop0: detected capacity change from 0 to 1024 [ 293.376169][T14665] netlink: 'syz.1.3744': attribute type 1 has an invalid length. [ 293.394131][T14661] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 293.404519][T14667] syz.3.3745: attempt to access beyond end of device [ 293.404519][T14667] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 293.465790][ T9232] kworker/u8:51: attempt to access beyond end of device [ 293.465790][ T9232] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 293.533679][T14676] loop3: detected capacity change from 0 to 128 [ 293.664319][T14649] EXT4-fs (loop7): pa ffff888106a63930: logic 48, phys. 177, len 21 [ 293.672576][T14649] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 293.756195][T14688] random: crng reseeded on system resumption [ 293.775686][T14679] loop0: detected capacity change from 0 to 2048 [ 293.827139][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.951440][T14693] netlink: 'syz.0.3756': attribute type 21 has an invalid length. [ 293.971917][T14695] loop1: detected capacity change from 0 to 128 [ 293.982768][T14693] netlink: 'syz.0.3756': attribute type 1 has an invalid length. [ 294.160585][T14706] loop0: detected capacity change from 0 to 1024 [ 294.198474][T14713] loop1: detected capacity change from 0 to 1024 [ 294.206490][T14706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.224121][T14713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.235878][T14706] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.3761: Allocating blocks 449-513 which overlap fs metadata [ 294.270804][T14713] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3765: Allocating blocks 449-513 which overlap fs metadata [ 294.286840][T14721] loop7: detected capacity change from 0 to 2048 [ 294.321658][T14723] netlink: 'syz.7.3768': attribute type 21 has an invalid length. [ 294.334306][T14723] netlink: 'syz.7.3768': attribute type 1 has an invalid length. [ 294.479476][T14704] EXT4-fs (loop0): pa ffff888106a63a10: logic 48, phys. 177, len 21 [ 294.487714][T14704] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 294.525536][T14712] EXT4-fs (loop1): pa ffff8881069ba850: logic 48, phys. 177, len 21 [ 294.533717][T14712] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 294.550799][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.606411][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.647201][T14748] loop3: detected capacity change from 0 to 128 [ 294.722536][T14749] netlink: 'syz.0.3779': attribute type 21 has an invalid length. [ 294.740166][T14751] loop1: detected capacity change from 0 to 2048 [ 294.747811][T14749] netlink: 'syz.0.3779': attribute type 1 has an invalid length. [ 294.788748][T14764] loop4: detected capacity change from 0 to 1024 [ 294.804546][T14764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.839269][T14764] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3786: Allocating blocks 449-513 which overlap fs metadata [ 294.872901][T14773] random: crng reseeded on system resumption [ 295.012498][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 295.012514][ T29] audit: type=1326 audit(1751363823.511:13453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14776 comm="syz.1.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 295.042444][ T29] audit: type=1326 audit(1751363823.511:13454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14776 comm="syz.1.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 295.066253][ T29] audit: type=1326 audit(1751363823.511:13455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14776 comm="syz.1.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 295.089833][ T29] audit: type=1326 audit(1751363823.511:13456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14776 comm="syz.1.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 295.113502][ T29] audit: type=1326 audit(1751363823.521:13457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14776 comm="syz.1.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 295.190609][T14779] loop0: detected capacity change from 0 to 1024 [ 295.206944][T14779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.264780][ T29] audit: type=1326 audit(1751363823.761:13458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14784 comm="syz.1.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 295.288505][ T29] audit: type=1326 audit(1751363823.761:13459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14784 comm="syz.1.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 295.312313][ T29] audit: type=1326 audit(1751363823.761:13460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14784 comm="syz.1.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 295.335996][ T29] audit: type=1326 audit(1751363823.761:13461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14784 comm="syz.1.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 295.354226][T14779] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.3789: Allocating blocks 449-513 which overlap fs metadata [ 295.359766][ T29] audit: type=1326 audit(1751363823.761:13462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14784 comm="syz.1.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7941e929 code=0x7ffc0000 [ 295.518562][T14763] EXT4-fs (loop4): pa ffff8881069bab60: logic 48, phys. 177, len 21 [ 295.528680][T14763] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 295.571450][T14799] loop3: detected capacity change from 0 to 2048 [ 295.614989][T14803] netlink: 'syz.7.3799': attribute type 21 has an invalid length. [ 295.629262][T14805] loop3: detected capacity change from 0 to 1024 [ 295.639495][T14805] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 295.643593][T14803] netlink: 'syz.7.3799': attribute type 1 has an invalid length. [ 295.677179][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.684227][T14809] __nla_validate_parse: 6 callbacks suppressed [ 295.684315][T14809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3802'. [ 295.703765][T14805] loop3: detected capacity change from 0 to 1024 [ 295.740071][T14805] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 295.758797][T14778] EXT4-fs (loop0): pa ffff8881069ba850: logic 48, phys. 177, len 21 [ 295.766966][T14778] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 295.811599][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.861593][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3807'. [ 295.889382][T14828] loop0: detected capacity change from 0 to 2048 [ 295.938491][T14842] loop1: detected capacity change from 0 to 128 [ 295.947854][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3816'. [ 296.029224][T14846] lo speed is unknown, defaulting to 1000 [ 296.035743][T14846] lo speed is unknown, defaulting to 1000 [ 296.168665][T14841] loop0: detected capacity change from 0 to 1024 [ 296.256110][T14841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.465064][T14841] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.3814: Allocating blocks 449-513 which overlap fs metadata [ 296.629383][T14858] loop1: detected capacity change from 0 to 1024 [ 296.690329][T14858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.966501][T14858] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3821: Allocating blocks 449-513 which overlap fs metadata [ 297.019115][T14872] loop7: detected capacity change from 0 to 2048 [ 297.104148][T14839] EXT4-fs (loop0): pa ffff888106a63af0: logic 48, phys. 177, len 21 [ 297.112303][T14839] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 297.221906][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.289775][T14857] EXT4-fs (loop1): pa ffff888106a63b60: logic 48, phys. 177, len 21 [ 297.297981][T14857] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 297.351521][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.390809][T14886] loop0: detected capacity change from 0 to 128 [ 297.414562][T14890] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3831'. [ 297.468794][T14886] bio_check_eod: 4 callbacks suppressed [ 297.468861][T14886] syz.0.3828: attempt to access beyond end of device [ 297.468861][T14886] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 297.566023][ T9194] kworker/u8:19: attempt to access beyond end of device [ 297.566023][ T9194] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 297.641977][T14904] loop0: detected capacity change from 0 to 2048 [ 297.663033][T14898] tipc: Started in network mode [ 297.668049][T14898] tipc: Node identity 827b90a9465f, cluster identity 4711 [ 297.675344][T14898] tipc: Enabled bearer , priority 0 [ 297.682985][T14897] tipc: Resetting bearer [ 297.698844][T14897] tipc: Disabling bearer [ 297.706251][T14908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3840'. [ 297.758480][T14913] loop0: detected capacity change from 0 to 1024 [ 297.785919][T14913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.816580][T14913] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.3842: Allocating blocks 449-513 which overlap fs metadata [ 297.878650][T14932] loop1: detected capacity change from 0 to 128 [ 297.927027][T14932] syz.1.3848: attempt to access beyond end of device [ 297.927027][T14932] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 297.952979][T14934] lo speed is unknown, defaulting to 1000 [ 297.959228][T14934] lo speed is unknown, defaulting to 1000 [ 298.215472][ T9194] kworker/u8:19: attempt to access beyond end of device [ 298.215472][ T9194] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 298.307538][T14940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3851'. [ 298.731174][T14912] EXT4-fs (loop0): pa ffff888106a63af0: logic 48, phys. 177, len 21 [ 298.739357][T14912] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 298.810255][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.021802][T14963] loop4: detected capacity change from 0 to 128 [ 299.045836][T14968] syzkaller0: entered promiscuous mode [ 299.051425][T14968] syzkaller0: entered allmulticast mode [ 299.093832][T14970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3862'. [ 299.137526][T14963] syz.4.3860: attempt to access beyond end of device [ 299.137526][T14963] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 299.249381][T14978] loop7: detected capacity change from 0 to 1024 [ 299.268520][ T9201] kworker/u8:22: attempt to access beyond end of device [ 299.268520][ T9201] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 299.309825][T14978] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 299.366939][T14978] loop7: detected capacity change from 0 to 1024 [ 299.377362][T14986] loop4: detected capacity change from 0 to 1024 [ 299.409358][T14978] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 299.434912][T14986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.555161][T14986] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3867: Allocating blocks 449-513 which overlap fs metadata [ 299.616157][T15009] loop3: detected capacity change from 0 to 128 [ 299.640472][T15009] syz.3.3877: attempt to access beyond end of device [ 299.640472][T15009] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 299.655860][T15007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3876'. [ 299.702825][ T9194] kworker/u8:19: attempt to access beyond end of device [ 299.702825][ T9194] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 299.760416][T14985] EXT4-fs (loop4): pa ffff8881069ba850: logic 48, phys. 177, len 21 [ 299.768737][T14985] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 299.790318][T15019] loop1: detected capacity change from 0 to 128 [ 299.801742][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.939943][T15029] lo speed is unknown, defaulting to 1000 [ 299.946475][T15029] lo speed is unknown, defaulting to 1000 [ 300.132006][T15026] syzkaller0: entered promiscuous mode [ 300.137760][T15026] syzkaller0: entered allmulticast mode [ 300.894915][T15043] loop0: detected capacity change from 0 to 128 [ 300.920482][T15042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3890'. [ 301.063451][T15058] syz.0.3891: attempt to access beyond end of device [ 301.063451][T15058] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 301.189711][ T9185] kworker/u8:10: attempt to access beyond end of device [ 301.189711][ T9185] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 301.334951][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 301.334968][ T29] audit: type=1326 audit(1751363829.861:13963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15069 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 301.398730][T15070] loop0: detected capacity change from 0 to 2048 [ 301.487882][ T29] audit: type=1326 audit(1751363829.891:13964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15069 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 301.511750][ T29] audit: type=1326 audit(1751363829.891:13965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15069 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 301.535480][ T29] audit: type=1326 audit(1751363829.891:13966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15069 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 301.559134][ T29] audit: type=1326 audit(1751363829.891:13967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15069 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 301.582831][ T29] audit: type=1326 audit(1751363829.891:13968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15069 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 301.606487][ T29] audit: type=1326 audit(1751363829.891:13969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15069 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 301.630243][ T29] audit: type=1326 audit(1751363829.891:13970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15069 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 301.654027][ T29] audit: type=1326 audit(1751363829.891:13971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15069 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 301.677679][ T29] audit: type=1326 audit(1751363829.891:13972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15069 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 301.755108][T15088] syzkaller0: entered promiscuous mode [ 301.760671][T15088] syzkaller0: entered allmulticast mode [ 301.818943][T15089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3902'. [ 301.916533][T15092] loop4: detected capacity change from 0 to 1024 [ 301.947051][T15092] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 301.975310][T15098] loop1: detected capacity change from 0 to 128 [ 302.103157][T15104] loop3: detected capacity change from 0 to 1024 [ 302.111616][T15092] loop4: detected capacity change from 0 to 1024 [ 302.127230][T15108] loop0: detected capacity change from 0 to 1024 [ 302.137529][T15092] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 302.165412][T15108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.165414][T15104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.203977][T15108] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.3912: Allocating blocks 449-513 which overlap fs metadata [ 302.244870][T15117] loop7: detected capacity change from 0 to 2048 [ 302.372141][T12359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.401364][T15133] syzkaller0: entered promiscuous mode [ 302.407000][T15133] syzkaller0: entered allmulticast mode [ 302.448138][T15107] EXT4-fs (loop0): pa ffff8881069bab60: logic 48, phys. 177, len 21 [ 302.456370][T15107] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 302.489636][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.522776][T15140] loop7: detected capacity change from 0 to 128 [ 302.538014][T15144] validate_nla: 2 callbacks suppressed [ 302.538042][T15144] netlink: 'syz.3.3921': attribute type 21 has an invalid length. [ 302.551777][T15144] netlink: 'syz.3.3921': attribute type 1 has an invalid length. [ 302.554092][T15140] bio_check_eod: 2 callbacks suppressed [ 302.554169][T15140] syz.7.3920: attempt to access beyond end of device [ 302.554169][T15140] loop7: rw=0, sector=121, nr_sectors = 120 limit=128 [ 302.559577][T15144] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3921'. [ 302.650573][T15146] lo speed is unknown, defaulting to 1000 [ 302.656591][T15146] lo speed is unknown, defaulting to 1000 [ 302.753384][ T9194] kworker/u8:19: attempt to access beyond end of device [ 302.753384][ T9194] loop7: rw=1, sector=241, nr_sectors = 800 limit=128 [ 302.985774][T15151] loop3: detected capacity change from 0 to 1024 [ 303.022019][T15151] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 303.080653][T15157] loop7: detected capacity change from 0 to 1024 [ 303.128315][T15157] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.328813][T15167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3928'. [ 303.506941][T15173] loop4: detected capacity change from 0 to 1024 [ 303.565901][T15173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.590777][T15151] loop3: detected capacity change from 0 to 1024 [ 303.657656][T15177] syzkaller0: entered promiscuous mode [ 303.663304][T15177] syzkaller0: entered allmulticast mode [ 303.697540][T15173] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3930: Allocating blocks 449-513 which overlap fs metadata [ 303.812540][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.910584][T15186] loop7: detected capacity change from 0 to 128 [ 303.944453][T15188] loop3: detected capacity change from 0 to 1024 [ 304.021014][T15172] EXT4-fs (loop4): pa ffff888106a63a80: logic 48, phys. 177, len 21 [ 304.029102][T15172] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 304.080533][T15188] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 304.109109][T15186] syz.7.3933: attempt to access beyond end of device [ 304.109109][T15186] loop7: rw=0, sector=121, nr_sectors = 120 limit=128 [ 304.126476][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.149310][T15188] loop3: detected capacity change from 0 to 1024 [ 304.171605][T15188] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 304.221575][T15197] netlink: 'syz.1.3939': attribute type 21 has an invalid length. [ 304.232742][ T9201] kworker/u8:22: attempt to access beyond end of device [ 304.232742][ T9201] loop7: rw=1, sector=241, nr_sectors = 800 limit=128 [ 304.249746][T15197] netlink: 'syz.1.3939': attribute type 1 has an invalid length. [ 304.257587][T15197] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3939'. [ 304.333419][T15206] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3940'. [ 304.342620][T15210] loop1: detected capacity change from 0 to 1024 [ 304.349615][T15212] syzkaller0: entered promiscuous mode [ 304.355329][T15212] syzkaller0: entered allmulticast mode [ 304.362246][T15210] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 304.398287][T15210] loop1: detected capacity change from 0 to 1024 [ 304.421602][T15215] loop7: detected capacity change from 0 to 2048 [ 304.457964][T15222] loop3: detected capacity change from 0 to 1024 [ 304.484528][T15226] loop7: detected capacity change from 0 to 128 [ 304.488217][T15222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.523527][T15232] netlink: 'syz.1.3952': attribute type 21 has an invalid length. [ 304.531549][T15232] netlink: 'syz.1.3952': attribute type 1 has an invalid length. [ 304.537884][T15222] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3948: Allocating blocks 449-513 which overlap fs metadata [ 304.539376][T15232] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3952'. [ 304.558662][T15226] syz.7.3950: attempt to access beyond end of device [ 304.558662][T15226] loop7: rw=0, sector=121, nr_sectors = 120 limit=128 [ 304.633229][T15235] lo speed is unknown, defaulting to 1000 [ 304.640325][T15235] lo speed is unknown, defaulting to 1000 [ 304.897463][ T9232] kworker/u8:51: attempt to access beyond end of device [ 304.897463][ T9232] loop7: rw=1, sector=241, nr_sectors = 800 limit=128 [ 305.188573][T15242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3955'. [ 305.404228][T15221] EXT4-fs (loop3): pa ffff888106a63b60: logic 48, phys. 177, len 21 [ 305.412382][T15221] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 305.489177][T15257] syzkaller0: entered promiscuous mode [ 305.494904][T15257] syzkaller0: entered allmulticast mode [ 305.627814][T12359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.645410][T15259] loop1: detected capacity change from 0 to 2048 [ 305.800826][T15266] loop1: detected capacity change from 0 to 128 [ 305.867168][T15271] netlink: 'syz.7.3964': attribute type 21 has an invalid length. [ 305.875145][T15271] netlink: 'syz.7.3964': attribute type 1 has an invalid length. [ 305.883022][T15271] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3964'. [ 305.953817][T15266] syz.1.3963: attempt to access beyond end of device [ 305.953817][T15266] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 306.050245][ T9194] kworker/u8:19: attempt to access beyond end of device [ 306.050245][ T9194] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 306.177530][T15279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3968'. [ 306.281491][T15289] syzkaller0: entered promiscuous mode [ 306.287054][T15289] syzkaller0: entered allmulticast mode [ 306.344832][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 306.344850][ T29] audit: type=1326 audit(1751363834.871:14325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 306.374857][ T29] audit: type=1326 audit(1751363834.871:14326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 306.398586][ T29] audit: type=1326 audit(1751363834.871:14327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 306.422261][ T29] audit: type=1326 audit(1751363834.871:14328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 306.446008][ T29] audit: type=1326 audit(1751363834.871:14329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 306.469655][ T29] audit: type=1326 audit(1751363834.871:14330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 306.493371][ T29] audit: type=1326 audit(1751363834.871:14331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 306.535694][T15294] loop1: detected capacity change from 0 to 1024 [ 306.542569][ T29] audit: type=1326 audit(1751363834.991:14332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 306.566237][ T29] audit: type=1326 audit(1751363834.991:14333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 306.590005][ T29] audit: type=1326 audit(1751363834.991:14334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15290 comm="syz.0.3973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 306.616555][T15294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.639486][T15291] loop0: detected capacity change from 0 to 2048 [ 306.655199][T15301] netlink: 'syz.4.3976': attribute type 21 has an invalid length. [ 306.678766][T15301] netlink: 'syz.4.3976': attribute type 1 has an invalid length. [ 306.686719][T15301] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3976'. [ 306.829128][T15309] loop4: detected capacity change from 0 to 1024 [ 306.837072][T15309] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 306.855911][T15309] loop4: detected capacity change from 0 to 1024 [ 306.866712][T15309] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 306.959074][T15315] lo speed is unknown, defaulting to 1000 [ 306.965926][T15315] lo speed is unknown, defaulting to 1000 [ 307.218085][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.556996][T15321] loop0: detected capacity change from 0 to 256 [ 307.835723][T15326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3986'. [ 307.893538][T15328] tipc: Enabled bearer , priority 0 [ 307.937001][T15327] tipc: Disabling bearer [ 307.975383][T15332] loop0: detected capacity change from 0 to 128 [ 308.046368][T15332] syz.0.3988: attempt to access beyond end of device [ 308.046368][T15332] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 308.117666][ T9185] kworker/u8:10: attempt to access beyond end of device [ 308.117666][ T9185] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 308.471998][T15354] netlink: 'syz.0.3997': attribute type 21 has an invalid length. [ 308.480522][T15354] netlink: 'syz.0.3997': attribute type 1 has an invalid length. [ 308.488480][T15354] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3997'. [ 308.518991][T15358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3999'. [ 308.550620][T15360] tipc: Enabled bearer , priority 0 [ 308.615413][T15359] tipc: Disabling bearer [ 308.706909][T15364] loop0: detected capacity change from 0 to 1024 [ 308.748463][T15364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.780225][T15364] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.4001: Allocating blocks 449-513 which overlap fs metadata [ 309.133693][T15363] EXT4-fs (loop0): pa ffff8881069baa80: logic 48, phys. 177, len 21 [ 309.141752][T15363] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 309.172568][T15388] loop4: detected capacity change from 0 to 1024 [ 309.182774][T15388] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 309.209965][T15388] loop4: detected capacity change from 0 to 1024 [ 309.225201][T15394] loop1: detected capacity change from 0 to 128 [ 309.235270][T15392] netlink: 'syz.7.4010': attribute type 21 has an invalid length. [ 309.243304][T15392] netlink: 'syz.7.4010': attribute type 1 has an invalid length. [ 309.251094][T15392] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4010'. [ 309.273901][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.275579][T15388] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 309.317438][T15394] syz.1.4011: attempt to access beyond end of device [ 309.317438][T15394] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 309.369866][ T9185] kworker/u8:10: attempt to access beyond end of device [ 309.369866][ T9185] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 309.875219][T15429] loop7: detected capacity change from 0 to 1024 [ 309.876767][T15431] netlink: 'syz.1.4024': attribute type 21 has an invalid length. [ 309.892583][T15431] netlink: 'syz.1.4024': attribute type 1 has an invalid length. [ 309.898714][T15433] loop3: detected capacity change from 0 to 128 [ 309.900349][T15431] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4024'. [ 309.927202][T15429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.935572][T15433] syz.3.4025: attempt to access beyond end of device [ 309.935572][T15433] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 309.969992][T15429] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.4023: Allocating blocks 449-513 which overlap fs metadata [ 309.991375][ T9194] kworker/u8:19: attempt to access beyond end of device [ 309.991375][ T9194] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 310.161870][T15463] netlink: 'syz.4.4036': attribute type 21 has an invalid length. [ 310.169870][T15463] netlink: 'syz.4.4036': attribute type 1 has an invalid length. [ 310.177826][T15463] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4036'. [ 310.218479][T15466] loop0: detected capacity change from 0 to 128 [ 310.226814][T15428] EXT4-fs (loop7): pa ffff888106a63a80: logic 48, phys. 177, len 21 [ 310.234899][T15428] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 310.260430][T15466] syz.0.4037: attempt to access beyond end of device [ 310.260430][T15466] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 310.260598][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.341356][T15473] loop4: detected capacity change from 0 to 1024 [ 310.349251][ T9185] kworker/u8:10: attempt to access beyond end of device [ 310.349251][ T9185] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 310.366634][T15473] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 310.398194][T15473] loop4: detected capacity change from 0 to 1024 [ 310.446639][T15473] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 311.530280][T15503] loop4: detected capacity change from 0 to 1024 [ 311.831820][T15499] lo speed is unknown, defaulting to 1000 [ 311.837946][T15499] lo speed is unknown, defaulting to 1000 [ 312.001613][T15507] netlink: 'syz.3.4050': attribute type 21 has an invalid length. [ 312.102023][T15507] netlink: 'syz.3.4050': attribute type 1 has an invalid length. [ 312.109956][T15507] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4050'. [ 312.132260][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 312.132280][ T29] audit: type=1326 audit(1751363840.611:14658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 312.162347][ T29] audit: type=1326 audit(1751363840.611:14659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 312.186053][ T29] audit: type=1326 audit(1751363840.621:14660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 312.209645][ T29] audit: type=1326 audit(1751363840.621:14661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 312.233364][ T29] audit: type=1326 audit(1751363840.621:14662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 312.256971][ T29] audit: type=1326 audit(1751363840.621:14663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 312.280592][ T29] audit: type=1326 audit(1751363840.621:14664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 312.304341][ T29] audit: type=1326 audit(1751363840.621:14665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 312.327989][ T29] audit: type=1326 audit(1751363840.621:14666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 312.351597][ T29] audit: type=1326 audit(1751363840.621:14667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.0.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ddd6e929 code=0x7ffc0000 [ 312.506071][T15515] loop3: detected capacity change from 0 to 128 [ 312.609321][T15516] syz.3.4053: attempt to access beyond end of device [ 312.609321][T15516] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 312.695075][ T9232] kworker/u8:51: attempt to access beyond end of device [ 312.695075][ T9232] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 312.771469][T15503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.871798][T15503] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.4049: Allocating blocks 449-513 which overlap fs metadata [ 312.913458][T15535] loop7: detected capacity change from 0 to 1024 [ 312.922994][T15530] loop0: detected capacity change from 0 to 256 [ 312.974825][T15535] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 313.040291][T15535] loop7: detected capacity change from 0 to 1024 [ 313.096548][T15535] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 313.146563][T15549] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4063'. [ 313.179280][T15501] EXT4-fs (loop4): pa ffff888106a63bd0: logic 48, phys. 177, len 21 [ 313.187437][T15501] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 313.246877][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.347228][T15560] loop7: detected capacity change from 0 to 128 [ 313.387660][T15560] syz.7.4068: attempt to access beyond end of device [ 313.387660][T15560] loop7: rw=0, sector=121, nr_sectors = 120 limit=128 [ 313.437709][ T9185] kworker/u8:10: attempt to access beyond end of device [ 313.437709][ T9185] loop7: rw=1, sector=241, nr_sectors = 800 limit=128 [ 313.640977][T15571] loop7: detected capacity change from 0 to 1024 [ 313.664577][T15571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.725529][T15571] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.4072: Allocating blocks 449-513 which overlap fs metadata [ 313.881659][T15578] validate_nla: 2 callbacks suppressed [ 313.881675][T15578] netlink: 'syz.3.4074': attribute type 21 has an invalid length. [ 313.928151][T15578] netlink: 'syz.3.4074': attribute type 1 has an invalid length. [ 313.936124][T15578] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4074'. [ 313.968449][T15570] EXT4-fs (loop7): pa ffff888106a63c40: logic 48, phys. 177, len 21 [ 313.976732][T15570] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 314.053411][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.180541][T15587] loop4: detected capacity change from 0 to 128 [ 314.220416][T15589] loop7: detected capacity change from 0 to 1024 [ 314.265369][T15589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.288976][T15594] syz.4.4066: attempt to access beyond end of device [ 314.288976][T15594] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 314.325385][T15596] loop1: detected capacity change from 0 to 1024 [ 314.340091][T15596] EXT4-fs: Ignoring removed orlov option [ 314.348536][T15589] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.4076: Allocating blocks 449-513 which overlap fs metadata [ 314.379594][T15596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.417141][ T9232] kworker/u8:51: attempt to access beyond end of device [ 314.417141][ T9232] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 314.561958][T15609] netlink: 'syz.3.4085': attribute type 21 has an invalid length. [ 314.586000][T15608] loop4: detected capacity change from 0 to 1024 [ 314.602350][T15609] netlink: 'syz.3.4085': attribute type 1 has an invalid length. [ 314.610142][T15609] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4085'. [ 314.645073][T15588] EXT4-fs (loop7): pa ffff888106a63b60: logic 48, phys. 177, len 21 [ 314.653178][T15588] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 314.665525][T15608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.702036][T15608] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.4084: Allocating blocks 449-513 which overlap fs metadata [ 314.708927][T15618] loop3: detected capacity change from 0 to 2048 [ 314.740334][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.925955][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.038976][T15606] EXT4-fs (loop4): pa ffff888106a63c40: logic 48, phys. 177, len 21 [ 315.047240][T15606] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 315.093236][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.168397][T15642] loop4: detected capacity change from 0 to 1024 [ 315.216693][T15642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.256653][T15642] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.4094: Allocating blocks 449-513 which overlap fs metadata [ 315.501216][T15652] netlink: 'syz.0.4096': attribute type 21 has an invalid length. [ 315.533352][T15652] netlink: 'syz.0.4096': attribute type 1 has an invalid length. [ 315.541405][T15652] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4096'. [ 315.739001][T15641] EXT4-fs (loop4): pa ffff8881069ba850: logic 48, phys. 177, len 21 [ 315.747245][T15641] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 315.836162][T15658] loop0: detected capacity change from 0 to 2048 [ 315.863705][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.900283][T15666] loop4: detected capacity change from 0 to 1024 [ 315.918559][T15666] EXT4-fs: Ignoring removed orlov option [ 315.943913][T15666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.023109][T15676] netlink: 'syz.3.4107': attribute type 21 has an invalid length. [ 316.044575][T15674] loop7: detected capacity change from 0 to 1024 [ 316.053737][T15676] netlink: 'syz.3.4107': attribute type 1 has an invalid length. [ 316.061519][T15676] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4107'. [ 316.089721][T15674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.123121][T15674] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.4106: Allocating blocks 449-513 which overlap fs metadata [ 316.337458][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.428869][T15673] EXT4-fs (loop7): pa ffff888106a63b60: logic 48, phys. 177, len 21 [ 316.437176][T15673] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 316.472595][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.642366][T15698] loop4: detected capacity change from 0 to 128 [ 316.700827][T15698] syz.4.4113: attempt to access beyond end of device [ 316.700827][T15698] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 316.754124][ T9232] kworker/u8:51: attempt to access beyond end of device [ 316.754124][ T9232] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 316.849537][T15706] loop4: detected capacity change from 0 to 1024 [ 316.917225][T15706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.931842][T15702] loop7: detected capacity change from 0 to 2048 [ 317.034704][T15716] loop7: detected capacity change from 0 to 1024 [ 317.043186][T15716] EXT4-fs: Ignoring removed orlov option [ 317.079226][T15706] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.4116: Allocating blocks 449-513 which overlap fs metadata [ 317.099860][T15718] loop3: detected capacity change from 0 to 1024 [ 317.110193][T15716] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.157692][T15718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.261350][T15718] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.4121: Allocating blocks 449-513 which overlap fs metadata [ 317.400816][T15738] loop0: detected capacity change from 0 to 128 [ 317.471406][T15739] syz.0.4126: attempt to access beyond end of device [ 317.471406][T15739] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 317.501280][T15717] EXT4-fs (loop3): pa ffff888106a63cb0: logic 48, phys. 177, len 21 [ 317.509435][T15717] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 317.528318][T15704] EXT4-fs (loop4): pa ffff888106a63c40: logic 48, phys. 177, len 21 [ 317.528518][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.536500][T15704] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 317.573302][ T9230] kworker/u8:49: attempt to access beyond end of device [ 317.573302][ T9230] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 317.591871][T12359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.627814][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.648719][T15743] loop0: detected capacity change from 0 to 128 [ 317.709480][T15743] syz.0.4128: attempt to access beyond end of device [ 317.709480][T15743] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 317.774849][ T9232] kworker/u8:51: attempt to access beyond end of device [ 317.774849][ T9232] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 317.868695][T15758] loop4: detected capacity change from 0 to 1024 [ 317.898273][T15758] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 317.927330][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 317.927350][ T29] audit: type=1326 audit(1751363846.451:15030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15757 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e909e929 code=0x7ffc0000 [ 317.957366][ T29] audit: type=1326 audit(1751363846.451:15031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15757 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fa8e909e929 code=0x7ffc0000 [ 317.981176][ T29] audit: type=1326 audit(1751363846.451:15032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15757 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e909e929 code=0x7ffc0000 [ 318.004978][ T29] audit: type=1326 audit(1751363846.451:15033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15757 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fa8e909e929 code=0x7ffc0000 [ 318.028669][ T29] audit: type=1326 audit(1751363846.451:15034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15757 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e909e929 code=0x7ffc0000 [ 318.052413][ T29] audit: type=1326 audit(1751363846.451:15035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15757 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fa8e909e929 code=0x7ffc0000 [ 318.076127][ T29] audit: type=1326 audit(1751363846.451:15036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15757 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e909e929 code=0x7ffc0000 [ 318.100083][ T29] audit: type=1326 audit(1751363846.451:15037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15757 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8e909e929 code=0x7ffc0000 [ 318.119719][T15769] loop0: detected capacity change from 0 to 1024 [ 318.123699][ T29] audit: type=1326 audit(1751363846.451:15038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15757 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e909e929 code=0x7ffc0000 [ 318.130499][T15769] EXT4-fs: Ignoring removed orlov option [ 318.153958][ T29] audit: type=1326 audit(1751363846.451:15039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15757 comm="syz.4.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8e909e929 code=0x7ffc0000 [ 318.186084][T15769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.248158][T15774] loop1: detected capacity change from 0 to 128 [ 318.490783][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.540544][T15790] loop0: detected capacity change from 0 to 1024 [ 318.576970][T15790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.609453][T15790] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.4144: Allocating blocks 449-513 which overlap fs metadata [ 318.680713][T15807] lo speed is unknown, defaulting to 1000 [ 318.687309][T15807] lo speed is unknown, defaulting to 1000 [ 319.025693][T15789] EXT4-fs (loop0): pa ffff888106a63cb0: logic 48, phys. 177, len 21 [ 319.033824][T15789] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 319.073380][T15813] loop3: detected capacity change from 0 to 128 [ 319.178391][T15815] bio_check_eod: 2 callbacks suppressed [ 319.178475][T15815] syz.3.4150: attempt to access beyond end of device [ 319.178475][T15815] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 319.267328][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.481838][ T12] kworker/u8:0: attempt to access beyond end of device [ 319.481838][ T12] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 319.629796][T15826] syzkaller0: entered promiscuous mode [ 319.635470][T15826] syzkaller0: entered allmulticast mode [ 320.338593][T15848] loop7: detected capacity change from 0 to 1024 [ 320.345521][T15848] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 320.367223][T15848] loop7: detected capacity change from 0 to 1024 [ 320.474644][T15850] loop3: detected capacity change from 0 to 1024 [ 320.481787][T15850] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 320.810829][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4164'. [ 321.464777][T15875] loop1: detected capacity change from 0 to 128 [ 321.476005][T15876] loop7: detected capacity change from 0 to 1024 [ 321.518059][T15875] syz.1.4167: attempt to access beyond end of device [ 321.518059][T15875] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 321.616935][T15882] lo speed is unknown, defaulting to 1000 [ 321.623313][T15882] lo speed is unknown, defaulting to 1000 [ 321.791697][ T9230] kworker/u8:49: attempt to access beyond end of device [ 321.791697][ T9230] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 321.880562][T15876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.932905][T15884] loop4: detected capacity change from 0 to 1024 [ 322.128562][T15876] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.4166: Allocating blocks 449-513 which overlap fs metadata [ 322.195450][T15884] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.4170: Allocating blocks 449-513 which overlap fs metadata [ 322.535133][T15900] loop0: detected capacity change from 0 to 1024 [ 322.589863][T15900] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 322.609871][T15883] EXT4-fs (loop4): pa ffff888106a63b60: logic 48, phys. 177, len 21 [ 322.618019][T15883] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 322.671112][T15900] loop0: detected capacity change from 0 to 1024 [ 322.708659][T15873] EXT4-fs (loop7): pa ffff888106a63c40: logic 48, phys. 177, len 21 [ 322.716805][T15873] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 322.749526][T12067] EXT4-fs unmount: 1 callbacks suppressed [ 322.749543][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.787157][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.855604][T15903] loop4: detected capacity change from 0 to 1024 [ 322.871461][T15905] loop0: detected capacity change from 0 to 1024 [ 322.885309][T15903] EXT4-fs: Ignoring removed orlov option [ 322.895672][T15905] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 322.941494][T15903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.967175][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 322.967193][ T29] audit: type=1326 audit(1751363851.491:15167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 323.015519][T15905] loop0: detected capacity change from 0 to 1024 [ 323.025631][T15912] loop1: detected capacity change from 0 to 256 [ 323.058770][T15905] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 323.140165][ T29] audit: type=1326 audit(1751363851.521:15168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 323.163997][ T29] audit: type=1326 audit(1751363851.521:15169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 323.187720][ T29] audit: type=1326 audit(1751363851.521:15170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 323.211348][ T29] audit: type=1326 audit(1751363851.521:15171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 323.234995][ T29] audit: type=1326 audit(1751363851.521:15172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 323.258730][ T29] audit: type=1326 audit(1751363851.521:15173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 323.282466][ T29] audit: type=1326 audit(1751363851.521:15174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 323.306448][ T29] audit: type=1326 audit(1751363851.521:15175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 323.330111][ T29] audit: type=1326 audit(1751363851.521:15176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.7.4177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 323.366074][T15926] loop1: detected capacity change from 0 to 1024 [ 323.454597][T15929] syzkaller0: entered promiscuous mode [ 323.460130][T15929] syzkaller0: entered allmulticast mode [ 323.472612][T15926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.505191][T15926] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.4182: Allocating blocks 449-513 which overlap fs metadata [ 323.561040][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.654985][T15939] loop4: detected capacity change from 0 to 1024 [ 323.679933][T15939] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 323.697229][T15945] loop3: detected capacity change from 0 to 1024 [ 323.708885][T15945] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 323.726187][T15939] loop4: detected capacity change from 0 to 1024 [ 323.795959][T15945] loop3: detected capacity change from 0 to 1024 [ 323.824642][T15925] EXT4-fs (loop1): pa ffff888106a63b60: logic 48, phys. 177, len 21 [ 323.832720][T15925] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 323.861338][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.890819][T15952] loop1: detected capacity change from 0 to 1024 [ 323.929919][T15950] loop4: detected capacity change from 0 to 256 [ 323.944213][T15952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.115766][T15961] loop3: detected capacity change from 0 to 256 [ 324.159755][T15965] loop4: detected capacity change from 0 to 1024 [ 324.223206][T15965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.246400][T15970] loop3: detected capacity change from 0 to 1024 [ 324.253298][T15970] EXT4-fs: Ignoring removed orlov option [ 324.266614][T15970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.286078][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.298594][T15965] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.4195: Allocating blocks 449-513 which overlap fs metadata [ 324.480078][T15977] syzkaller0: entered promiscuous mode [ 324.485896][T15977] syzkaller0: entered allmulticast mode [ 324.501691][T15979] loop0: detected capacity change from 0 to 1024 [ 324.563850][T15979] EXT4-fs: Ignoring removed orlov option [ 324.590741][T15979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.616753][T12359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.724335][T15963] EXT4-fs (loop4): pa ffff888106a63c40: logic 48, phys. 177, len 21 [ 324.732580][T15963] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 324.750461][T15989] loop3: detected capacity change from 0 to 1024 [ 324.757794][T15987] loop1: detected capacity change from 0 to 1024 [ 324.788164][T15989] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 324.898311][T15987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.923538][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.926455][T15987] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.4201: Allocating blocks 449-513 which overlap fs metadata [ 324.976961][T15994] xt_hashlimit: max too large, truncated to 1048576 [ 325.113851][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.151115][T15986] EXT4-fs (loop1): pa ffff8881069baa80: logic 48, phys. 177, len 21 [ 325.159263][T15986] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 325.195615][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.205373][T16003] FAULT_INJECTION: forcing a failure. [ 325.205373][T16003] name failslab, interval 1, probability 0, space 0, times 0 [ 325.218084][T16003] CPU: 0 UID: 0 PID: 16003 Comm: syz.0.4206 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 325.218115][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.218133][T16003] Call Trace: [ 325.218142][T16003] [ 325.218176][T16003] __dump_stack+0x1d/0x30 [ 325.218198][T16003] dump_stack_lvl+0xe8/0x140 [ 325.218307][T16003] dump_stack+0x15/0x1b [ 325.218330][T16003] should_fail_ex+0x265/0x280 [ 325.218375][T16003] should_failslab+0x8c/0xb0 [ 325.218399][T16003] __kvmalloc_node_noprof+0x123/0x4e0 [ 325.218444][T16003] ? xt_alloc_entry_offsets+0x48/0x50 [ 325.218485][T16003] ? __account_obj_stock+0x211/0x350 [ 325.218517][T16003] xt_alloc_entry_offsets+0x48/0x50 [ 325.218577][T16003] translate_table+0xa9/0xf90 [ 325.218611][T16003] ? __rcu_read_unlock+0x4f/0x70 [ 325.218689][T16003] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 325.218792][T16003] ? should_fail_ex+0xdb/0x280 [ 325.218829][T16003] ? _copy_from_user+0x89/0xb0 [ 325.218851][T16003] do_ipt_set_ctl+0x66f/0x820 [ 325.218883][T16003] ? _raw_spin_unlock_bh+0x36/0x40 [ 325.218919][T16003] ? tcp_release_cb+0xf1/0x370 [ 325.219036][T16003] nf_setsockopt+0x199/0x1b0 [ 325.219141][T16003] ip_setsockopt+0x102/0x110 [ 325.219176][T16003] ipv6_setsockopt+0xfb/0x130 [ 325.219209][T16003] tcp_setsockopt+0x95/0xb0 [ 325.219333][T16003] sock_common_setsockopt+0x69/0x80 [ 325.219401][T16003] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 325.219430][T16003] __sys_setsockopt+0x184/0x200 [ 325.219475][T16003] __x64_sys_setsockopt+0x64/0x80 [ 325.219508][T16003] x64_sys_call+0x2bd5/0x2fb0 [ 325.219591][T16003] do_syscall_64+0xd2/0x200 [ 325.219622][T16003] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 325.219649][T16003] ? clear_bhb_loop+0x40/0x90 [ 325.219718][T16003] ? clear_bhb_loop+0x40/0x90 [ 325.219767][T16003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.219792][T16003] RIP: 0033:0x7f84ddd6e929 [ 325.219808][T16003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.219873][T16003] RSP: 002b:00007f84dc3d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 325.219896][T16003] RAX: ffffffffffffffda RBX: 00007f84ddf95fa0 RCX: 00007f84ddd6e929 [ 325.219909][T16003] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000006 [ 325.219989][T16003] RBP: 00007f84dc3d7090 R08: 0000000000000288 R09: 0000000000000000 [ 325.220005][T16003] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 325.220022][T16003] R13: 0000000000000000 R14: 00007f84ddf95fa0 R15: 00007fffbb79a738 [ 325.220047][T16003] [ 325.529912][T16012] syzkaller0: entered promiscuous mode [ 325.535523][T16012] syzkaller0: entered allmulticast mode [ 325.547404][T16013] loop0: detected capacity change from 0 to 1024 [ 325.556360][T16013] EXT4-fs: Ignoring removed orlov option [ 325.567213][T16013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.775749][T16022] loop1: detected capacity change from 0 to 1024 [ 325.785432][T16022] EXT4-fs: Ignoring removed orlov option [ 325.806729][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.818457][T16022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.867659][T16025] loop0: detected capacity change from 0 to 1024 [ 325.874868][T16025] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 325.944872][T16027] tipc: Enabled bearer , priority 0 [ 325.952550][T16026] tipc: Resetting bearer [ 325.967544][T16026] tipc: Disabling bearer [ 326.070251][T16044] loop0: detected capacity change from 0 to 256 [ 326.139628][T16050] syzkaller0: entered promiscuous mode [ 326.145239][T16050] syzkaller0: entered allmulticast mode [ 326.183010][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.217410][T16055] loop3: detected capacity change from 0 to 1024 [ 326.224393][T16055] EXT4-fs: Ignoring removed orlov option [ 326.232503][T16055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.245181][T16057] loop1: detected capacity change from 0 to 1024 [ 326.266256][T16057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.304660][T16057] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.4225: Allocating blocks 449-513 which overlap fs metadata [ 326.508381][T12359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.518108][T16056] EXT4-fs (loop1): pa ffff888106a63cb0: logic 48, phys. 177, len 21 [ 326.526291][T16056] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 326.560115][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.629052][T16073] FAULT_INJECTION: forcing a failure. [ 326.629052][T16073] name failslab, interval 1, probability 0, space 0, times 0 [ 326.641942][T16063] loop4: detected capacity change from 0 to 256 [ 326.648263][T16073] CPU: 0 UID: 0 PID: 16073 Comm: syz.1.4230 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 326.648356][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.648373][T16073] Call Trace: [ 326.648381][T16073] [ 326.648391][T16073] __dump_stack+0x1d/0x30 [ 326.648419][T16073] dump_stack_lvl+0xe8/0x140 [ 326.648446][T16073] dump_stack+0x15/0x1b [ 326.648468][T16073] should_fail_ex+0x265/0x280 [ 326.648535][T16073] should_failslab+0x8c/0xb0 [ 326.648567][T16073] __kvmalloc_node_noprof+0x123/0x4e0 [ 326.648606][T16073] ? xt_alloc_entry_offsets+0x48/0x50 [ 326.648676][T16073] ? refill_obj_stock+0x254/0x2e0 [ 326.648796][T16073] xt_alloc_entry_offsets+0x48/0x50 [ 326.648837][T16073] translate_table+0xa9/0xf90 [ 326.648873][T16073] ? __rcu_read_unlock+0x4f/0x70 [ 326.648954][T16073] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 326.649001][T16073] ? should_fail_ex+0xdb/0x280 [ 326.649036][T16073] ? _copy_from_user+0x89/0xb0 [ 326.649062][T16073] do_ipt_set_ctl+0x66f/0x820 [ 326.649109][T16073] nf_setsockopt+0x199/0x1b0 [ 326.649138][T16073] ip_setsockopt+0x102/0x110 [ 326.649261][T16073] udp_setsockopt+0x99/0xb0 [ 326.649304][T16073] sock_common_setsockopt+0x69/0x80 [ 326.649381][T16073] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 326.649485][T16073] __sys_setsockopt+0x184/0x200 [ 326.649519][T16073] __x64_sys_setsockopt+0x64/0x80 [ 326.649576][T16073] x64_sys_call+0x2bd5/0x2fb0 [ 326.649598][T16073] do_syscall_64+0xd2/0x200 [ 326.649657][T16073] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 326.649692][T16073] ? clear_bhb_loop+0x40/0x90 [ 326.649742][T16073] ? clear_bhb_loop+0x40/0x90 [ 326.649769][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.649791][T16073] RIP: 0033:0x7f2c7941e929 [ 326.649874][T16073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.649894][T16073] RSP: 002b:00007f2c77a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 326.649913][T16073] RAX: ffffffffffffffda RBX: 00007f2c79645fa0 RCX: 00007f2c7941e929 [ 326.649929][T16073] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 326.649998][T16073] RBP: 00007f2c77a87090 R08: 00000000000003c8 R09: 0000000000000000 [ 326.650014][T16073] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 326.650030][T16073] R13: 0000000000000000 R14: 00007f2c79645fa0 R15: 00007ffea4f1b4b8 [ 326.650056][T16073] [ 326.906379][T16063] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 326.956063][T16063] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 326.956063][T16063] program syz.4.4226 not setting count and/or reply_len properly [ 326.988817][T16084] syzkaller0: entered promiscuous mode [ 326.994374][T16084] syzkaller0: entered allmulticast mode [ 327.032142][T16083] loop0: detected capacity change from 0 to 4096 [ 327.054644][T16083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.106562][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.120850][T16095] loop7: detected capacity change from 0 to 1024 [ 327.145336][T16095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.155006][T16101] loop4: detected capacity change from 0 to 1024 [ 327.176257][T16104] loop0: detected capacity change from 0 to 1024 [ 327.183357][T16104] EXT4-fs: Ignoring removed orlov option [ 327.202702][T16104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.225104][T16101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.226448][T16095] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.4237: Allocating blocks 449-513 which overlap fs metadata [ 327.279350][T16101] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.4240: Allocating blocks 449-513 which overlap fs metadata [ 327.289219][T16112] loop1: detected capacity change from 0 to 2048 [ 327.433506][T16092] EXT4-fs (loop7): pa ffff8881069ba850: logic 48, phys. 177, len 21 [ 327.441624][T16092] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 327.475945][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.503508][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.523110][T16123] loop1: detected capacity change from 0 to 256 [ 327.648239][T16100] EXT4-fs (loop4): pa ffff888106a63d20: logic 48, phys. 177, len 21 [ 327.656410][T16100] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 327.705281][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.741780][T16137] loop7: detected capacity change from 0 to 512 [ 327.784765][T16145] FAULT_INJECTION: forcing a failure. [ 327.784765][T16145] name failslab, interval 1, probability 0, space 0, times 0 [ 327.797782][T16145] CPU: 0 UID: 0 PID: 16145 Comm: syz.0.4250 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 327.797814][T16145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.797827][T16145] Call Trace: [ 327.797835][T16145] [ 327.797857][T16145] __dump_stack+0x1d/0x30 [ 327.797880][T16145] dump_stack_lvl+0xe8/0x140 [ 327.797901][T16145] dump_stack+0x15/0x1b [ 327.797919][T16145] should_fail_ex+0x265/0x280 [ 327.797954][T16145] should_failslab+0x8c/0xb0 [ 327.798031][T16145] __kvmalloc_node_noprof+0x123/0x4e0 [ 327.798118][T16145] ? alloc_netdev_mqs+0x5ac/0xab0 [ 327.798162][T16145] alloc_netdev_mqs+0x5ac/0xab0 [ 327.798207][T16145] rtnl_create_link+0x239/0x710 [ 327.798255][T16145] rtnl_newlink_create+0x14c/0x620 [ 327.798283][T16145] ? security_capable+0x83/0x90 [ 327.798314][T16145] ? netlink_ns_capable+0x86/0xa0 [ 327.798412][T16145] rtnl_newlink+0xf29/0x12d0 [ 327.798446][T16145] ? __kfree_skb+0x109/0x150 [ 327.798479][T16145] ? __memcg_slab_free_hook+0x135/0x230 [ 327.798571][T16145] ? __kfree_skb+0x109/0x150 [ 327.798632][T16145] ? __rcu_read_unlock+0x4f/0x70 [ 327.798655][T16145] ? avc_has_perm_noaudit+0x1b1/0x200 [ 327.798723][T16145] ? selinux_capable+0x1f9/0x270 [ 327.798802][T16145] ? security_capable+0x83/0x90 [ 327.798831][T16145] ? ns_capable+0x7d/0xb0 [ 327.798851][T16145] ? __pfx_rtnl_newlink+0x10/0x10 [ 327.798891][T16145] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 327.798920][T16145] netlink_rcv_skb+0x123/0x220 [ 327.798955][T16145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 327.798992][T16145] rtnetlink_rcv+0x1c/0x30 [ 327.799013][T16145] netlink_unicast+0x59e/0x670 [ 327.799049][T16145] netlink_sendmsg+0x58b/0x6b0 [ 327.799072][T16145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.799104][T16145] __sock_sendmsg+0x145/0x180 [ 327.799149][T16145] ____sys_sendmsg+0x31e/0x4e0 [ 327.799195][T16145] ___sys_sendmsg+0x17b/0x1d0 [ 327.799315][T16145] __x64_sys_sendmsg+0xd4/0x160 [ 327.799399][T16145] x64_sys_call+0x2999/0x2fb0 [ 327.799423][T16145] do_syscall_64+0xd2/0x200 [ 327.799443][T16145] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 327.799471][T16145] ? clear_bhb_loop+0x40/0x90 [ 327.799554][T16145] ? clear_bhb_loop+0x40/0x90 [ 327.799578][T16145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.799601][T16145] RIP: 0033:0x7f84ddd6e929 [ 327.799618][T16145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.799684][T16145] RSP: 002b:00007f84dc395038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.799704][T16145] RAX: ffffffffffffffda RBX: 00007f84ddf96160 RCX: 00007f84ddd6e929 [ 327.799718][T16145] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 327.799731][T16145] RBP: 00007f84dc395090 R08: 0000000000000000 R09: 0000000000000000 [ 327.799744][T16145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.799756][T16145] R13: 0000000000000001 R14: 00007f84ddf96160 R15: 00007fffbb79a738 [ 327.799778][T16145] [ 328.159914][T16154] netlink: 6336 bytes leftover after parsing attributes in process `syz.3.4254'. [ 328.176039][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 328.176057][ T29] audit: type=1400 audit(1751363856.701:15572): avc: denied { ioctl } for pid=16152 comm="syz.3.4254" path="socket:[44440]" dev="sockfs" ino=44440 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 328.215534][T16157] loop7: detected capacity change from 0 to 1024 [ 328.225329][T16157] EXT4-fs: Ignoring removed orlov option [ 328.250670][T16157] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.290053][ T29] audit: type=1326 audit(1751363856.811:15573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754360e929 code=0x7ffc0000 [ 328.322247][ T29] audit: type=1326 audit(1751363856.841:15574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f754360e929 code=0x7ffc0000 [ 328.346011][ T29] audit: type=1326 audit(1751363856.841:15575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754360e929 code=0x7ffc0000 [ 328.369627][ T29] audit: type=1326 audit(1751363856.841:15576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f754360e929 code=0x7ffc0000 [ 328.393317][ T29] audit: type=1326 audit(1751363856.841:15577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754360e929 code=0x7ffc0000 [ 328.416950][ T29] audit: type=1326 audit(1751363856.841:15578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f754360e929 code=0x7ffc0000 [ 328.440718][ T29] audit: type=1326 audit(1751363856.841:15579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754360e929 code=0x7ffc0000 [ 328.464348][ T29] audit: type=1326 audit(1751363856.841:15580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754360e929 code=0x7ffc0000 [ 328.487997][ T29] audit: type=1326 audit(1751363856.841:15581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.3.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754360e929 code=0x7ffc0000 [ 328.534505][T16166] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4259'. [ 328.560896][T16170] loop0: detected capacity change from 0 to 512 [ 328.588965][T16170] ext4: Unknown parameter 'permit_directio' [ 328.643758][T16175] netlink: 'syz.1.4261': attribute type 30 has an invalid length. [ 328.922145][T16191] lo speed is unknown, defaulting to 1000 [ 328.928836][T16191] lo speed is unknown, defaulting to 1000 [ 329.118199][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.842385][T16206] loop4: detected capacity change from 0 to 2048 [ 330.047977][T16217] loop1: detected capacity change from 0 to 1024 [ 330.075505][T16220] loop4: detected capacity change from 0 to 512 [ 330.134651][T16217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.208221][T16220] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4273: Failed to acquire dquot type 1 [ 330.255419][T16228] loop3: detected capacity change from 0 to 1024 [ 330.263670][T16220] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.4273: corrupted inode contents [ 330.302788][T16228] EXT4-fs: Ignoring removed orlov option [ 330.328147][T16228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.355886][T16220] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.4273: mark_inode_dirty error [ 330.403157][T16220] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.4273: corrupted inode contents [ 330.477308][T12359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.512603][T16220] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.4273: mark_inode_dirty error [ 330.585260][T16220] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.4273: corrupted inode contents [ 330.626584][T16220] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 330.635558][T16220] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.4273: corrupted inode contents [ 330.649191][T16220] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.4273: mark_inode_dirty error [ 330.673293][T16220] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 330.696600][T16247] loop0: detected capacity change from 0 to 1024 [ 330.710255][T16247] EXT4-fs: Ignoring removed orlov option [ 330.725800][T16220] EXT4-fs (loop4): 1 truncate cleaned up [ 330.726943][T16247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.742277][T16220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.756601][T16220] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.773737][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.840079][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.881682][T16252] loop1: detected capacity change from 0 to 2048 [ 331.016934][T16272] loop1: detected capacity change from 0 to 1024 [ 331.029372][T16272] EXT4-fs: Ignoring removed orlov option [ 331.149949][T16277] lo speed is unknown, defaulting to 1000 [ 331.156547][T16277] lo speed is unknown, defaulting to 1000 [ 332.015812][T16284] loop4: detected capacity change from 0 to 256 [ 332.032646][T16272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.068956][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.190070][T16286] loop0: detected capacity change from 0 to 1024 [ 332.342646][T16286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.409412][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.435253][T16286] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.4294: Allocating blocks 449-513 which overlap fs metadata [ 332.748320][T16302] FAULT_INJECTION: forcing a failure. [ 332.748320][T16302] name failslab, interval 1, probability 0, space 0, times 0 [ 332.761109][T16302] CPU: 0 UID: 0 PID: 16302 Comm: syz.1.4296 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 332.761145][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.761162][T16302] Call Trace: [ 332.761172][T16302] [ 332.761182][T16302] __dump_stack+0x1d/0x30 [ 332.761237][T16302] dump_stack_lvl+0xe8/0x140 [ 332.761257][T16302] dump_stack+0x15/0x1b [ 332.761376][T16302] should_fail_ex+0x265/0x280 [ 332.761415][T16302] should_failslab+0x8c/0xb0 [ 332.761445][T16302] kmem_cache_alloc_noprof+0x50/0x310 [ 332.761480][T16302] ? security_inode_alloc+0x37/0x100 [ 332.761583][T16302] security_inode_alloc+0x37/0x100 [ 332.761622][T16302] inode_init_always_gfp+0x4b7/0x500 [ 332.761661][T16302] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 332.761685][T16302] alloc_inode+0x58/0x170 [ 332.761769][T16302] new_inode+0x1d/0xe0 [ 332.761790][T16302] shmem_get_inode+0x244/0x750 [ 332.761811][T16302] __shmem_file_setup+0x113/0x210 [ 332.761843][T16302] shmem_file_setup+0x3b/0x50 [ 332.761972][T16302] __se_sys_memfd_create+0x2c3/0x590 [ 332.762007][T16302] __x64_sys_memfd_create+0x31/0x40 [ 332.762043][T16302] x64_sys_call+0x122f/0x2fb0 [ 332.762101][T16302] do_syscall_64+0xd2/0x200 [ 332.762181][T16302] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.762215][T16302] ? clear_bhb_loop+0x40/0x90 [ 332.762244][T16302] ? clear_bhb_loop+0x40/0x90 [ 332.762275][T16302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.762312][T16302] RIP: 0033:0x7f2c7941e929 [ 332.762329][T16302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.762356][T16302] RSP: 002b:00007f2c77a86e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 332.762377][T16302] RAX: ffffffffffffffda RBX: 0000000000000783 RCX: 00007f2c7941e929 [ 332.762394][T16302] RDX: 00007f2c77a86ef0 RSI: 0000000000000000 RDI: 00007f2c794a14cc [ 332.762480][T16302] RBP: 0000200000001000 R08: 00007f2c77a86bb7 R09: 00007f2c77a86e40 [ 332.762505][T16302] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480 [ 332.762521][T16302] R13: 00007f2c77a86ef0 R14: 00007f2c77a86eb0 R15: 0000200000000180 [ 332.762546][T16302] [ 333.005058][T16285] EXT4-fs (loop0): pa ffff888106a63b60: logic 48, phys. 177, len 21 [ 333.013243][T16285] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 333.016039][T16304] tipc: New replicast peer: 255.255.255.255 [ 333.029660][T16304] tipc: Enabled bearer , priority 10 [ 333.093858][T16306] loop4: detected capacity change from 0 to 2048 [ 333.121459][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.176990][T16304] loop7: detected capacity change from 0 to 2048 [ 333.209848][T16304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.252758][T16324] loop1: detected capacity change from 0 to 1024 [ 333.259576][T16324] EXT4-fs: Ignoring removed orlov option [ 333.270805][T16323] syzkaller0: entered promiscuous mode [ 333.270896][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.276431][T16323] syzkaller0: entered allmulticast mode [ 333.293571][T16324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.518553][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 333.518572][ T29] audit: type=1326 audit(1751363862.041:15863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.7.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 333.585796][ T29] audit: type=1326 audit(1751363862.041:15864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.7.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 333.609498][ T29] audit: type=1326 audit(1751363862.041:15865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.7.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 333.633249][ T29] audit: type=1326 audit(1751363862.041:15866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.7.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 333.656881][ T29] audit: type=1326 audit(1751363862.041:15867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.7.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 333.680503][ T29] audit: type=1326 audit(1751363862.041:15868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.7.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 333.704150][ T29] audit: type=1326 audit(1751363862.041:15869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.7.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 333.727763][ T29] audit: type=1326 audit(1751363862.041:15870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.7.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 333.751335][ T29] audit: type=1326 audit(1751363862.041:15871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.7.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 333.775010][ T29] audit: type=1326 audit(1751363862.041:15872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16330 comm="syz.7.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6c0a2e929 code=0x7ffc0000 [ 333.819006][T16333] lo speed is unknown, defaulting to 1000 [ 333.825700][T16333] lo speed is unknown, defaulting to 1000 [ 334.358306][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.515299][ T3385] tipc: Node number set to 2898910254 [ 334.529876][T16339] loop0: detected capacity change from 0 to 256 [ 334.591625][T16342] loop1: detected capacity change from 0 to 1024 [ 334.647603][T16344] syzkaller0: entered promiscuous mode [ 334.653354][T16344] syzkaller0: entered allmulticast mode [ 334.690276][T16342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.754215][T16342] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.4309: Allocating blocks 449-513 which overlap fs metadata [ 334.816042][T16349] 9pnet_fd: Insufficient options for proto=fd [ 334.898032][T16350] siw: device registration error -23 [ 334.978781][T16353] loop7: detected capacity change from 0 to 164 [ 335.004135][T16353] iso9660: Unknown parameter '' [ 335.156052][T16341] EXT4-fs (loop1): pa ffff888106a63d20: logic 48, phys. 177, len 21 [ 335.164228][T16341] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 335.191406][T16357] netlink: 'syz.4.4317': attribute type 21 has an invalid length. [ 335.199422][T16357] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.212958][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4317'. [ 335.226107][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.237384][T16357] team0 (unregistering): Port device team_slave_0 removed [ 335.255982][T16357] team0 (unregistering): Port device team_slave_1 removed [ 335.324926][T16366] loop7: detected capacity change from 0 to 1024 [ 335.345947][T16366] EXT4-fs: Ignoring removed orlov option [ 335.354829][T16369] netlink: 'syz.1.4318': attribute type 10 has an invalid length. [ 335.366317][T16368] loop0: detected capacity change from 0 to 1024 [ 335.379977][T16369] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.383491][T16366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.399293][T16369] bond0: (slave team0): Enslaving as an active interface with an up link [ 335.413584][T16368] EXT4-fs: Ignoring removed orlov option [ 335.425581][T16368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.599355][T16380] loop3: detected capacity change from 0 to 128 [ 335.639428][T16380] syz.3.4324: attempt to access beyond end of device [ 335.639428][T16380] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 335.674415][ T9185] kworker/u8:10: attempt to access beyond end of device [ 335.674415][ T9185] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 335.760378][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.773798][T16383] loop3: detected capacity change from 0 to 256 [ 335.865197][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.946733][T16396] lo speed is unknown, defaulting to 1000 [ 335.953285][T16396] lo speed is unknown, defaulting to 1000 [ 336.152342][T16397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4329'. [ 336.239589][T16399] loop7: detected capacity change from 0 to 1024 [ 336.287669][T16399] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 336.478604][T16412] loop4: detected capacity change from 0 to 1024 [ 336.515478][T16412] EXT4-fs: Ignoring removed orlov option [ 336.557139][T16412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.869614][T16419] loop0: detected capacity change from 0 to 1024 [ 336.938112][T16419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.056059][T16419] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.4331: Allocating blocks 449-513 which overlap fs metadata [ 337.175434][T16425] loop7: detected capacity change from 0 to 512 [ 337.205518][T16425] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 337.288762][T12067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.328618][T16425] EXT4-fs (loop7): 1 truncate cleaned up [ 337.353599][T16425] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.377355][T16418] EXT4-fs (loop0): pa ffff888106a63d90: logic 48, phys. 177, len 21 [ 337.385467][T16418] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 337.407861][T16430] loop1: detected capacity change from 0 to 512 [ 337.426519][T16428] loop4: detected capacity change from 0 to 256 [ 337.449717][T16430] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 337.493054][T16430] EXT4-fs (loop1): 1 truncate cleaned up [ 337.499094][T16430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.525291][T16425] netlink: 'syz.7.4337': attribute type 13 has an invalid length. [ 337.526504][T11593] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.590030][T13047] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.616648][T16446] loop0: detected capacity change from 0 to 1024 [ 337.624415][T16446] EXT4-fs: Ignoring removed orlov option [ 337.630832][T16425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.635730][T16449] loop1: detected capacity change from 0 to 128 [ 337.683202][T16446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.710942][T16449] syz.1.4345: attempt to access beyond end of device [ 337.710942][T16449] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 337.759800][ T12] kworker/u8:0: attempt to access beyond end of device [ 337.759800][ T12] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 337.855861][T16446] ================================================================== [ 337.864022][T16446] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 337.873532][T16446] [ 337.875872][T16446] write to 0xffff888108a14a50 of 4 bytes by task 16455 on cpu 1: [ 337.883890][T16446] writeback_single_inode+0x14a/0x3e0 [ 337.889574][T16446] sync_inode_metadata+0x5b/0x90 [ 337.894569][T16446] generic_buffers_fsync_noflush+0xd9/0x120 [ 337.900511][T16446] ext4_sync_file+0x1ab/0x690 [ 337.905396][T16446] vfs_fsync_range+0x10a/0x130 [ 337.910207][T16446] ext4_buffered_write_iter+0x34f/0x3c0 [ 337.915800][T16446] ext4_file_write_iter+0x383/0xf00 [ 337.921039][T16446] iter_file_splice_write+0x5ef/0x970 [ 337.926458][T16446] direct_splice_actor+0x153/0x2a0 [ 337.931622][T16446] splice_direct_to_actor+0x30f/0x680 [ 337.937033][T16446] do_splice_direct+0xda/0x150 [ 337.941848][T16446] do_sendfile+0x380/0x650 [ 337.946305][T16446] __x64_sys_sendfile64+0x105/0x150 [ 337.951541][T16446] x64_sys_call+0xb39/0x2fb0 [ 337.956172][T16446] do_syscall_64+0xd2/0x200 [ 337.960702][T16446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.966628][T16446] [ 337.968992][T16446] read to 0xffff888108a14a50 of 4 bytes by task 16446 on cpu 0: [ 337.976656][T16446] generic_buffers_fsync_noflush+0x80/0x120 [ 337.982601][T16446] ext4_sync_file+0x1ab/0x690 [ 337.987317][T16446] vfs_fsync_range+0x10a/0x130 [ 337.992135][T16446] ext4_buffered_write_iter+0x34f/0x3c0 [ 337.997716][T16446] ext4_file_write_iter+0x383/0xf00 [ 338.002953][T16446] iter_file_splice_write+0x5ef/0x970 [ 338.008394][T16446] direct_splice_actor+0x153/0x2a0 [ 338.013548][T16446] splice_direct_to_actor+0x30f/0x680 [ 338.018970][T16446] do_splice_direct+0xda/0x150 [ 338.023780][T16446] do_sendfile+0x380/0x650 [ 338.028239][T16446] __x64_sys_sendfile64+0x105/0x150 [ 338.033472][T16446] x64_sys_call+0xb39/0x2fb0 [ 338.038199][T16446] do_syscall_64+0xd2/0x200 [ 338.042741][T16446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.048670][T16446] [ 338.051012][T16446] value changed: 0x00000038 -> 0x00000002 [ 338.056752][T16446] [ 338.059103][T16446] Reported by Kernel Concurrency Sanitizer on: [ 338.065287][T16446] CPU: 0 UID: 0 PID: 16446 Comm: syz.0.4342 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 338.077835][T16446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.087936][T16446] ==================================================================