last executing test programs: 4.745913686s ago: executing program 0 (id=440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x550, &(0x7f0000001780)="$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") 4.440165161s ago: executing program 0 (id=449): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x457) unshare(0x62040200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 3.887515316s ago: executing program 0 (id=455): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x7}, 0x28) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000180)={r6, 0x9}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r7}}], 0x20, 0x2400e044}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008000000000000000000000000000000000000000004510000000"], 0x48) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xfffffffb}}, './file0\x00'}) io_uring_enter(r9, 0x6f7a, 0x9af9, 0x54, &(0x7f0000000340)={[0x8]}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) syz_clone(0x4000, &(0x7f0000004500), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r7, 0xaf, "4e906988a44469d925976b70f4d89881ec86192241a1e3615177c8055eda18b7ea519e51ee9767223f11229f93219a88c8bfa6ec26e7748b2a5180c48a36a5344fc1561ca80243ccb217a0ea5641327b5713790fa071ffd2318045994d5ec2ae6e165ca7c0964fdf2cc38ac2862fd55e2b552476f3ebf33b10363d449fb8cd6f406d2bf03287e82dcff474f85e4922f1e2b2c174b221b73ef39a30e75662f87d84f02822e740c8006f2cbe0639f1fc"}, &(0x7f0000000000)=0xb7) 3.878350096s ago: executing program 3 (id=456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r6, &(0x7f0000000480)='./file0\x00', r6, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "88407c6d7e76fc0e221afa1a44859814"}, 0x11, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000180)={r8, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff0000}]}, &(0x7f00000001c0)=0x10) recvmmsg(r7, &(0x7f0000005c80), 0x1, 0x0, 0x0) 3.609928838s ago: executing program 3 (id=457): r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0x4, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffb, 0x7fff, 0x7, 0x18000000, 0x4}, 0x7, 0x1, 0x3, 0x9c3f, 0x4, 0x15, 0x20, 0x0, 0x8, 0x7ff, {0x7, 0x1000, 0x9, 0x40000000, 0x4, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0xf}}]}, 0xec}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0xf) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="cbeb23f28819838522871e32625642d05f96c90e101f6a56e0670d1c4c3e335f4a280a0dcea403e96c8b01ccc77072b14b0be026d7693a79d18d99f33351213a5eed8dd5df216d3ba6b2cfc4926b0d60c8a1ed4a395547fac887cf62c4f0b2da6d2389ed71dea4d4eec3397b2f67785b59df5930ae7d1b5ae99394d66b99156f6f0f52d35f5a794104d4162279b9bd1c4e8d4bf7af0828692b37b5b66d949de6e20f225e7ade48a9d441e3fa5655dbc11d1311819030f68e16ba37a38858fee40b7368a0e9329a9dfd69de9c00"/225, 0xe1}], 0x1}, 0x40004040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000180)='cpu<=0||!') 2.490692739s ago: executing program 0 (id=465): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="ea3d8100", 0x4, 0x8014, &(0x7f0000000200)={0x11, 0x5, r3, 0x1, 0x1, 0x6, @broadcast}, 0xffffff36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x1020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.792544705s ago: executing program 1 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r6, &(0x7f0000000480)='./file0\x00', r6, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "88407c6d7e76fc0e221afa1a44859814"}, 0x11, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000180)={r8, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff0000}]}, &(0x7f00000001c0)=0x10) recvmmsg(r7, &(0x7f0000005c80), 0x1, 0x0, 0x0) 1.639313037s ago: executing program 1 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x550, &(0x7f0000001780)="$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") 1.594035671s ago: executing program 3 (id=472): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x12, 0x0, &(0x7f0000001600)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000080000000c7e24606bdc1b5539459b2ce1d5843420d4ae17cbb21510bb956394cc12a2283ea5121f9363e2778903aad38ad9c5920e1777cd8e5a1c78d31115b95c7eb715d76caa114d65d9114348584e6ab8c5bed5bb840a1fb5db22c51a54af59d9805a9dcd37722161136327b9ecd37f816ee55936b41ce099f229206709b643ecced106ffd3efd3b48d1dea25032d51384e303f51bcf8a565e20769e43f51e2def2b7eea1c7b127cbce31950c3aaa38a7f40188ab5bde5ad4865913974e970cd519c2b0073b6ea"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x178}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xf7}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 1.558697594s ago: executing program 1 (id=473): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000"], 0x48) mmap(&(0x7f00009fb000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000001180)="7319a5ed42beb38840a78d625379136a", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) wait4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESOCT=r6, @ANYRESHEX=r2], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) unshare(0x62040200) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[], 0x32600) 1.556379174s ago: executing program 3 (id=474): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9fffe316844268cb89e14f086dd47e0ffff26123a03631177fbac141416e000030a440a9f03fc80000000000000000000000000002e01070b038da188fe25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2800000}, 0x2c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={0x0, r3}, 0x18) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r7 = open(&(0x7f0000000180)='./bus\x00', 0x14923e, 0x18) fallocate(r7, 0x1, 0x0, 0x1001f0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="c1", 0x1}], 0x1, 0x33000, 0x7, 0x3) 1.259394039s ago: executing program 1 (id=476): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x4, 0xa, 0x3, 0x5}]}) unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000003, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000340)={0x0, 0x7, 0x8, 0x403, 0x2cf}, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone3(&(0x7f00000003c0)={0xa980, 0x0, &(0x7f0000000040), 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare(0xa000200) unshare(0x20070600) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) kcmp(0x0, r7, 0x0, r4, r4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "1ff80f4682044827", "9855c7e1b00693d396d953e7749028a9", "67d77e9a", "c513d0afa2ea0cbe"}, 0x28) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000580)=ANY=[], 0x0) 1.047684715s ago: executing program 2 (id=477): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x550, &(0x7f0000001780)="$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") 1.033076807s ago: executing program 4 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x1, 0x8, 0x1, 0x9, {{0x15, 0x4, 0x0, 0x5, 0x54, 0x66, 0x0, 0x2, 0x2f, 0x0, @broadcast, @empty, {[@cipso={0x86, 0x40, 0xffffffffffffffff, [{0x5, 0x3, "1b"}, {0x1, 0xd, "ae2346575a62e76137a9e6"}, {0x0, 0x9, "eeceb0a88d9a8c"}, {0x7, 0x12, "531d141e5454657aa91f0a9691ba3257"}, {0x7, 0x5, "5957b9"}, {0x1, 0xa, "c715338319ebb550"}]}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000240)) set_tid_address(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 982.914281ms ago: executing program 3 (id=479): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f0000000300)='GPL\x00', 0x20000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0), 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=r1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES16, @ANYRES32, @ANYBLOB="00c02201d15f60e700000000d7ba20a8"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_clone(0x20000000, &(0x7f0000001040)="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", 0x1000, &(0x7f0000002040), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789") openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e3000"/28, @ANYRES32], 0x3c}}, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x8, 0xc, 0x2, 0x2}, {0x7fff, 0x0, 0x0, 0x1}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) unshare(0x2040400) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001e00000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 879.296519ms ago: executing program 0 (id=480): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x400, 0x5) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000080)=0x100) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) r2 = syz_usbip_server_init(0x2) r3 = fcntl$getown(0xffffffffffffffff, 0x9) r4 = getuid() getgroups(0x0, &(0x7f0000000600)) stat(&(0x7f0000000640)='./file0\x00', 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)="aa34d4dc2dffce9500fc2f4424576d71db3ba683924852afb57f584b45f6f1673a8bf044dd99de91fef4f52fd4ca57afdde4b0243ef1c3a0d8515dacbb4d9a56626911c3ee9bab7e452d1b554b3d4d0c6420d990a5d0dbfd13ddd9011be18a3145e5aea84f8c751bc9bed4f0c512710ddf8fe9cecbe65a576ce6e1731a3dd3ce16b022b062d797928c9ddf54248b250f9e3926703a46ec8351944b25fcffd4ceda24df2ded511412c47a764c6b119f4e3bc998ab7cab1472fe0203079757535b1fa9592cafed8654b3517d8e8f0af186b4a425b5d80d84f76600805a", 0xdc}, {&(0x7f0000000300)="603c32708dce00f89507aa8ed4ac3902413192be56ddd6c4b957650aeb3abb3dd1103d156f14de43480c33a6eecc611570beafc47f3c8c9c95cded88ec4bad27d837947b4690ea994dbfb47c1e934d0ddeb1bc4ee9a96133fe3c7e78e98d20c5df02bd0d308fec50d2eebb", 0x6b}, {&(0x7f0000000380)="13c45ece1aadb61c55e1f6a3226c4bab7d4b28fa91114a50c8f06655b128d85d9171bd0b4e0590e2fdae0847b9e0d0b37a980b2a9219ca88f914b6e5b3c7c4d51925870ef381096e1ef9f1c90a989c550aa5aeef9c97886389c86a9d774afc3d14a62f5c18ab8a36c8", 0x69}, {&(0x7f0000000400)="fe5ec9aec27f41897e71a0bed05dfd839b4d89651bfc7d29a5799b6129656c32ea862335f8842b1a90f56872e48c5141c58a0a1c521d2c128c246f6e06f599c81e335c6fc9c8bb64ab", 0x49}, {&(0x7f0000000480)="71bd747db23088b3c5a5aa6a94b426b2524bcf347c4429d5a258341193c13fe0103f5c1b9f2060a0cdb347948a7d40ffbff283fbf80894af7ef049ce01841502ebf8fb51331d25d9e576e07234cd27173a2024ae1bbb2352690ff3a3f2721b27f791877a366abefa61fca4743f8802b18b53e1aa324b066a5c8567ede0195c40bfe25f2c85aaa4718cccf5b8e5dfb420ea62257ad34e73431a4640dd5930ce15d33ed3826edb749a68e87fb00a7e22baa96e7713ec03bf1806d37b1f212b1d981557a44915e4b8201ba860b4a4bc456fd48180ade672e41bf1b9dbd24d319fab00638bdd6d3073a7868ccf50178fca", 0xef}], 0x5, &(0x7f0000000740)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x10}}], 0x70, 0x40010}, 0x4000000) fadvise64(r0, 0x0, 0x0, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount$9p_xen(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x30002, &(0x7f0000000940)={'trans=xen,', {[{@cache_none}, {@version_u}], [{@euid_lt={'euid<', r4}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '/dev/uhid\x00'}}, {@fsname={'fsname', 0x3d, '\x0e'}}, {@dont_hash}, {@hash}, {@permit_directio}, {@flag='nomand'}, {@smackfsfloor={'smackfsfloor', 0x3d, ')#],-^'}}]}}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a00), 0x4d080, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r0) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4008804) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)=@newspdinfo={0x54, 0x24, 0x414, 0x70bd28, 0x25dfdbff, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x24044804}, 0x4014) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r6) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0xa12c000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x68, r9, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24008810) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r10, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x15}}]}, 0x28}}, 0x40890) preadv(r5, &(0x7f0000001580)=[{&(0x7f0000001340)=""/34, 0x22}, {&(0x7f0000001380)=""/68, 0x44}, {&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001440)=""/79, 0x4f}, {&(0x7f00000014c0)=""/153, 0x99}], 0x5, 0x7, 0xce8) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x4c, r7, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x4c}}, 0x4) 877.847629ms ago: executing program 2 (id=481): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000000045c4e000000", @ANYRES32=0x0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000010000001811000097b99b5f7ee5e5bec5552459349e203dd3d6afc41a9d01c93816cea8cd8f225854dc0871c83d1c0baab30035ffd0ed322b32d3", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r8, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc3ff, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4058880) ioctl$TCFLSH(r0, 0x5608, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='mm_page_free\x00', r9, 0x0, 0xfffffffff7fffffc}, 0x18) syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x0) 631.126319ms ago: executing program 4 (id=482): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="57c8bf4957b024cce523d97d3db88ddf3fa6f44e7aeb9f7a8d16a90582391d641ef2d0231c3a6d523dc7d661392a7bebe82fbae51a9823674d41da1934768fb2ccd064516683c6b9bf681028489238026fd87dd0a3d212639175cac9a4ec796207b1a2a54de176ba3f2f23d4732106a351be8d550a5cea69e72243c75fb410a6959c204b0e7f4b6103c36da8f33d773d493f6f4d3477cfe0fba08a18f5e32159", @ANYRESOCT], 0x48) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40502, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r2, 0x1) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) set_tid_address(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa4000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) readlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/62, 0x3e) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x6, 0xf, {"b40efde702cf1a965a691aa319a78812"}, 0x9d6, 0x6, 0x3f}}}, 0x90) 518.880778ms ago: executing program 4 (id=483): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {}, {0x0, 0xc3, 0x0, 0x636e8971}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x6, 0x6, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x1000, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {0x2, 0x0, 0x0, 0x2}, {0x8, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0xb8a, 0x6}, {0xffffffff}, {}, {}, {}, {0x80000001, 0x0, 0x0, 0x2000000, 0x3}, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5, 0x0, 0x8001}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x20000000, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x2, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x400000}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0x7091cba, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xa144}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {0x3, 0x0, 0x0, 0x4, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {0x0, 0x0, 0xfffffffc, 0x4eae63d7}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000}, {0x0, 0x2e9c}, {0x0, 0x10000000, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x800, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x20000, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x5}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x2}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x2}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 487.829821ms ago: executing program 4 (id=484): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x12, 0x0, &(0x7f0000001600)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000080000000c7e24606bdc1b5539459b2ce1d5843420d4ae17cbb21510bb956394cc12a2283ea5121f9363e2778903aad38ad9c5920e1777cd8e5a1c78d31115b95c7eb715d76caa114d65d9114348584e6ab8c5bed5bb840a1fb5db22c51a54af59d9805a9dcd37722161136327b9ecd37f816ee55936b41ce099f229206709b643ecced106ffd3efd3b48d1dea25032d51384e303f51bcf8a565e20769e43f51e2def2b7eea1c7b127cbce31950c3aaa38a7f40188ab5bde5ad4865913974e970cd519c2b0073b6ea"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x178}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xf7}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 459.274093ms ago: executing program 4 (id=485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x550, &(0x7f0000001780)="$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") 423.757306ms ago: executing program 2 (id=486): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000006c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000700), 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40002003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffdbdf251000f8ca33cc09006d8168e75ab2f630593473b10000180001801400020070696d72656730000000000000000000080006009000000008000900361bcfcf7e4dd1c4fbbb8c3beee1fef3cea1fb72f8b7f97a2bfc3b4d127494786c99d2a7bb0b204996c620cd254f402427539b13ea2d41fca46a632ee450990fe697858b531cc477906b46e25108c9d434f2323d72620e9fd685cdf0e1502a5200009632dd34471eaeae3fd865a36416058364b57e12d79970c6b20504a6abedacc567ea68d9ae59609544298012e917626a2a87df58e83efebb85495ba60f87474749a283149c78bda0a196065c"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r4 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000800080100", 0x4, 0x1ff}) setuid(0xee00) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00014006040400090400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'macvlan1\x00'}}, 0x1e) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r6 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x6, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000800000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(r4, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0800000001000600fbffffffffffff"], &(0x7f0000000580), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) wait4(0x0, 0x0, 0x20000000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 353.930122ms ago: executing program 4 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f00000004c0), 0x1, 0x5e8, &(0x7f0000001200)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r4, 0x0, 0x3ffff) sendfile(r6, r4, 0x0, 0x7ffff000) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) syz_emit_ethernet(0x45, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, '\x00\x00eX\x00\x00\x00'}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth1_to_batadv\x00'}) 304.319196ms ago: executing program 0 (id=488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$P9_RREADDIR(r2, &(0x7f0000000000)={0x28, 0x29, 0x2001, {0x1, [{{0x80, 0x0, 0x3}, 0x6, 0x6, 0x5, './bus'}]}}, 0x28) open(&(0x7f0000000180)='./file0\x00', 0x7250c1, 0xd0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) mmap(&(0x7f00003f7000/0x3000)=nil, 0x3000, 0x1000008, 0x30, 0xffffffffffffffff, 0x85750000) sendfile(r3, r4, 0x0, 0x20000023896) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000012c0)=ANY=[@ANYRES8=r6, @ANYRESHEX, @ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x408c1}, 0x4000040) r7 = gettid() ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x10}], 0x1, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './bus\x00'}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095", @ANYBLOB="f09775a968d0df74e3a5c911168e10a42efe9d6998d7bc5dce237737c3196b06eff57af340a8341ec3cfa2d20803beb315275baffa6d14823f49501edfda14f5dca4cf5f16d7bff106e91130"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000100)=[{&(0x7f0000000400)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400420008001d001931a0e69ee517d34460bc0600e8ea2c0000a705251e6182949a3651f60a84c9f4d4938000e70e4509c5bb937762376e5eb58a72", 0xfffffffffffffee5}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) 212.636143ms ago: executing program 2 (id=489): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0xa1, 0x0, 0x0, 0x4}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0}) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000600)='sample\x10', 0xfdee) 99.944412ms ago: executing program 2 (id=490): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 98.026612ms ago: executing program 1 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 76.770934ms ago: executing program 2 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) 1.05735ms ago: executing program 3 (id=493): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x400, 0x5) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000080)=0x100) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) r2 = syz_usbip_server_init(0x2) r3 = fcntl$getown(0xffffffffffffffff, 0x9) r4 = getuid() getgroups(0x0, &(0x7f0000000600)) stat(&(0x7f0000000640)='./file0\x00', 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)="aa34d4dc2dffce9500fc2f4424576d71db3ba683924852afb57f584b45f6f1673a8bf044dd99de91fef4f52fd4ca57afdde4b0243ef1c3a0d8515dacbb4d9a56626911c3ee9bab7e452d1b554b3d4d0c6420d990a5d0dbfd13ddd9011be18a3145e5aea84f8c751bc9bed4f0c512710ddf8fe9cecbe65a576ce6e1731a3dd3ce16b022b062d797928c9ddf54248b250f9e3926703a46ec8351944b25fcffd4ceda24df2ded511412c47a764c6b119f4e3bc998ab7cab1472fe0203079757535b1fa9592cafed8654b3517d8e8f0af186b4a425b5d80d84f76600805a", 0xdc}, {&(0x7f0000000300)="603c32708dce00f89507aa8ed4ac3902413192be56ddd6c4b957650aeb3abb3dd1103d156f14de43480c33a6eecc611570beafc47f3c8c9c95cded88ec4bad27d837947b4690ea994dbfb47c1e934d0ddeb1bc4ee9a96133fe3c7e78e98d20c5df02bd0d308fec50d2eebb", 0x6b}, {&(0x7f0000000380)="13c45ece1aadb61c55e1f6a3226c4bab7d4b28fa91114a50c8f06655b128d85d9171bd0b4e0590e2fdae0847b9e0d0b37a980b2a9219ca88f914b6e5b3c7c4d51925870ef381096e1ef9f1c90a989c550aa5aeef9c97886389c86a9d774afc3d14a62f5c18ab8a36c8", 0x69}, {&(0x7f0000000400)="fe5ec9aec27f41897e71a0bed05dfd839b4d89651bfc7d29a5799b6129656c32ea862335f8842b1a90f56872e48c5141c58a0a1c521d2c128c246f6e06f599c81e335c6fc9c8bb64ab", 0x49}, {&(0x7f0000000480)="71bd747db23088b3c5a5aa6a94b426b2524bcf347c4429d5a258341193c13fe0103f5c1b9f2060a0cdb347948a7d40ffbff283fbf80894af7ef049ce01841502ebf8fb51331d25d9e576e07234cd27173a2024ae1bbb2352690ff3a3f2721b27f791877a366abefa61fca4743f8802b18b53e1aa324b066a5c8567ede0195c40bfe25f2c85aaa4718cccf5b8e5dfb420ea62257ad34e73431a4640dd5930ce15d33ed3826edb749a68e87fb00a7e22baa96e7713ec03bf1806d37b1f212b1d981557a44915e4b8201ba860b4a4bc456fd48180ade672e41bf1b9dbd24d319fab00638bdd6d3073a7868ccf50178fca", 0xef}], 0x5, &(0x7f0000000740)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x10}}], 0x70, 0x40010}, 0x4000000) fadvise64(r0, 0x0, 0x0, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount$9p_xen(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x30002, &(0x7f0000000940)={'trans=xen,', {[{@cache_none}, {@version_u}], [{@euid_lt={'euid<', r4}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '/dev/uhid\x00'}}, {@fsname={'fsname', 0x3d, '\x0e'}}, {@dont_hash}, {@hash}, {@permit_directio}, {@flag='nomand'}, {@smackfsfloor={'smackfsfloor', 0x3d, ')#],-^'}}]}}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a00), 0x4d080, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r0) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4008804) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)=@newspdinfo={0x54, 0x24, 0x414, 0x70bd28, 0x25dfdbff, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x24044804}, 0x4014) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r6) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0xa12c000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x68, r9, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24008810) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r10, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x15}}]}, 0x28}}, 0x40890) preadv(r5, &(0x7f0000001580)=[{&(0x7f0000001340)=""/34, 0x22}, {&(0x7f0000001380)=""/68, 0x44}, {&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001440)=""/79, 0x4f}, {&(0x7f00000014c0)=""/153, 0x99}], 0x5, 0x7, 0xce8) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x4c, r7, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x4c}}, 0x4) 0s ago: executing program 1 (id=494): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x1800) unshare(0x22020600) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='io_uring_register\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x10) r3 = io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r4, 0x7f, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f00000022c0)=""/92, &(0x7f0000002740)=0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x2}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00') getdents64(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002b00)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/220, 0xdc}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000380)=""/178, 0xb2}], 0x3, &(0x7f0000000440)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000002c80), 0x6e, &(0x7f0000001f40)=[{&(0x7f00000005c0)=""/151, 0x97}, {&(0x7f0000000680)=""/197, 0xc5}, {&(0x7f0000000300)=""/13, 0xd}, {&(0x7f0000000780)=""/199, 0xfffffffffffffcdc}, {&(0x7f0000000880)=""/200, 0xc8}, {&(0x7f0000000f00)=""/60, 0x3c}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x7, &(0x7f0000001fc0)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x118}}, {{&(0x7f0000002100), 0x6e, &(0x7f0000002280)=[{&(0x7f0000002180)=""/212, 0xd4}], 0x1}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002500)=[{&(0x7f0000002340)=""/112, 0x70}, {&(0x7f00000023c0)=""/111, 0x6f}, {&(0x7f0000002440)=""/148, 0x94}], 0x3, &(0x7f0000002540)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000025c0)=""/108, 0x6c}, {&(0x7f0000002640)=""/116, 0x74}, {&(0x7f00000026c0)=""/99, 0x63}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/47, 0x2f}, {&(0x7f00000027c0)=""/204, 0xcc}, {&(0x7f00000028c0)=""/32, 0x20}, {&(0x7f0000002900)=""/253, 0xfd}], 0x8, &(0x7f0000002a80)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}], 0x5, 0x20, &(0x7f0000002c40)={0x77359400}) kernel console output (not intermixed with test programs): 000000-0000-0000-0000-000000000000. [ 36.793828][ T3607] loop3: detected capacity change from 0 to 2048 [ 36.856944][ T3607] loop3: p1 < > p4 [ 36.857804][ T3607] loop3: p4 size 8388608 extends beyond EOD, truncated [ 37.127002][ T3614] hub 2-0:1.0: USB hub found [ 37.132823][ T3614] hub 2-0:1.0: 8 ports detected [ 37.215359][ T3619] netlink: 7 bytes leftover after parsing attributes in process `syz.1.41'. [ 37.387047][ T3623] loop1: detected capacity change from 0 to 128 [ 37.671646][ T3626] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.748841][ T3626] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.765719][ T3629] loop2: detected capacity change from 0 to 512 [ 37.798335][ T3629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.819445][ T3629] EXT4-fs (loop2): 1 truncate cleaned up [ 37.839117][ T3629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.864083][ T3626] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.897942][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.935442][ T3626] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.970430][ T3639] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 38.009391][ T3645] loop1: detected capacity change from 0 to 128 [ 38.022188][ T3645] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.036434][ T3645] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.056099][ T177] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.072091][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.093572][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.102567][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.128373][ T3650] hub 2-0:1.0: USB hub found [ 38.135018][ T3650] hub 2-0:1.0: 8 ports detected [ 38.204948][ T3665] netlink: 7 bytes leftover after parsing attributes in process `syz.0.54'. [ 38.214374][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.225903][ T3664] loop4: detected capacity change from 0 to 128 [ 38.241725][ T3664] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.266860][ T3669] loop2: detected capacity change from 0 to 512 [ 38.273818][ T3664] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.295459][ T3669] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.300888][ T3672] loop0: detected capacity change from 0 to 512 [ 38.319628][ T3669] EXT4-fs (loop2): 1 truncate cleaned up [ 38.331530][ T3672] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.348376][ T3670] hub 2-0:1.0: USB hub found [ 38.348686][ T3669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.364374][ T3670] hub 2-0:1.0: 8 ports detected [ 38.372771][ T3672] EXT4-fs (loop0): 1 truncate cleaned up [ 38.385306][ T3672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.409820][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.424660][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.473211][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.486287][ T3687] loop0: detected capacity change from 0 to 512 [ 38.493217][ T3687] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.507072][ T3687] EXT4-fs (loop0): 1 truncate cleaned up [ 38.513368][ T3687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.547093][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.557156][ T3693] hub 2-0:1.0: USB hub found [ 38.562075][ T3693] hub 2-0:1.0: 8 ports detected [ 38.563066][ T3690] loop2: detected capacity change from 0 to 512 [ 38.576280][ T3690] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.594943][ T3695] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.606175][ T3690] EXT4-fs (loop2): 1 truncate cleaned up [ 38.612363][ T3690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.641447][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.657095][ T3695] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.697604][ T3702] loop2: detected capacity change from 0 to 512 [ 38.705597][ T3702] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.715517][ T3695] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.747078][ T3702] __quota_error: 386 callbacks suppressed [ 38.747097][ T3702] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 38.763014][ T3702] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 38.772999][ T3702] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.65: Failed to acquire dquot type 1 [ 38.776715][ T3706] hub 2-0:1.0: USB hub found [ 38.791390][ T3695] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.801984][ T3702] EXT4-fs (loop2): 1 truncate cleaned up [ 38.803184][ T3706] hub 2-0:1.0: 8 ports detected [ 38.815137][ T3702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.847308][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.870207][ T3709] hub 2-0:1.0: USB hub found [ 38.875174][ T3709] hub 2-0:1.0: 8 ports detected [ 39.094108][ T3713] hub 2-0:1.0: USB hub found [ 39.099167][ T3713] hub 2-0:1.0: 8 ports detected [ 39.396593][ T3715] hub 2-0:1.0: USB hub found [ 39.401450][ T3715] hub 2-0:1.0: 8 ports detected [ 39.536557][ T29] audit: type=1400 audit(1756569853.368:473): avc: denied { getopt } for pid=3718 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.565944][ T29] audit: type=1400 audit(1756569853.398:474): avc: denied { write } for pid=3718 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.612949][ T3721] loop4: detected capacity change from 0 to 512 [ 39.622077][ T3721] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.641286][ T3723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72'. [ 39.657252][ T3721] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 39.667359][ T3721] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 39.678172][ T3721] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.71: Failed to acquire dquot type 1 [ 39.697080][ T3721] EXT4-fs (loop4): 1 truncate cleaned up [ 39.703257][ T3721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.730595][ T29] audit: type=1326 audit(1756569853.558:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3729 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x7ffc0000 [ 39.765323][ T29] audit: type=1326 audit(1756569853.588:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3729 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x7ffc0000 [ 39.788919][ T29] audit: type=1326 audit(1756569853.588:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3729 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc49e64ebe9 code=0x7ffc0000 [ 39.812229][ T29] audit: type=1326 audit(1756569853.588:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3729 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x7ffc0000 [ 39.836319][ T3733] loop3: detected capacity change from 0 to 512 [ 39.837713][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.850277][ T3733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.854123][ T3734] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 39.868118][ T3734] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 39.876098][ T3734] vhci_hcd vhci_hcd.0: Device attached [ 39.882616][ T3733] EXT4-fs (loop3): 1 truncate cleaned up [ 39.887688][ T3736] vhci_hcd: connection closed [ 39.888764][ T1630] vhci_hcd: stop threads [ 39.897807][ T1630] vhci_hcd: release socket [ 39.902244][ T1630] vhci_hcd: disconnect device [ 39.907574][ T3733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.945558][ T3740] loop4: detected capacity change from 0 to 512 [ 39.955146][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.964797][ T3740] ======================================================= [ 39.964797][ T3740] WARNING: The mand mount option has been deprecated and [ 39.964797][ T3740] and is ignored by this kernel. Remove the mand [ 39.964797][ T3740] option from the mount to silence this warning. [ 39.964797][ T3740] ======================================================= [ 40.017496][ T3740] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.031285][ T3740] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 40.031285][ T3740] [ 40.042109][ T3740] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 40.052148][ T3740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.067534][ T3746] loop3: detected capacity change from 0 to 512 [ 40.077463][ T3746] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 40.093547][ T3746] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.100440][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.100823][ T3746] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.79: Block bitmap for bg 0 marked uninitialized [ 40.123524][ T3746] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 40.134354][ T3746] EXT4-fs (loop3): 1 orphan inode deleted [ 40.137009][ T3747] lo speed is unknown, defaulting to 1000 [ 40.141351][ T3746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.159031][ T3747] lo speed is unknown, defaulting to 1000 [ 40.178583][ T3747] lo speed is unknown, defaulting to 1000 [ 40.178959][ T3750] loop4: detected capacity change from 0 to 512 [ 40.191382][ T3747] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.199669][ T3747] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 40.206995][ T3746] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 40.218580][ T3747] lo speed is unknown, defaulting to 1000 [ 40.228258][ T3747] lo speed is unknown, defaulting to 1000 [ 40.235089][ T3750] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.238483][ T3746] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 40.251687][ T3747] lo speed is unknown, defaulting to 1000 [ 40.261537][ T3750] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 40.261537][ T3750] [ 40.270162][ T3747] lo speed is unknown, defaulting to 1000 [ 40.272365][ T3750] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 40.286145][ T3747] lo speed is unknown, defaulting to 1000 [ 40.289587][ T3750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.326512][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.340330][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.390564][ T3756] loop3: detected capacity change from 0 to 128 [ 40.425499][ T3758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.83'. [ 40.507069][ T3764] loop4: detected capacity change from 0 to 128 [ 40.530028][ T3762] hub 2-0:1.0: USB hub found [ 40.541420][ T3762] hub 2-0:1.0: 8 ports detected [ 40.826969][ T3747] syz.1.78 (3747) used greatest stack depth: 10712 bytes left [ 41.017011][ T3774] hub 2-0:1.0: USB hub found [ 41.021717][ T3774] hub 2-0:1.0: 8 ports detected [ 41.109995][ T3777] lo speed is unknown, defaulting to 1000 [ 41.131887][ T3780] loop4: detected capacity change from 0 to 512 [ 41.168217][ T3780] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.182264][ T3778] lo speed is unknown, defaulting to 1000 [ 41.191355][ T3780] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 41.191355][ T3780] [ 41.202242][ T3780] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 41.224650][ T3780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.282612][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.386733][ T3788] loop4: detected capacity change from 0 to 512 [ 41.395463][ T3786] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.424816][ T3790] loop3: detected capacity change from 0 to 512 [ 41.440901][ T3790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.456545][ T3790] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 41.456545][ T3790] [ 41.467401][ T3790] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 41.476729][ T3788] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.478052][ T3790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.501532][ T3786] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.531123][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.543955][ T3788] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.91: Failed to acquire dquot type 1 [ 41.573203][ T3788] EXT4-fs (loop4): 1 truncate cleaned up [ 41.584596][ T3788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.607281][ T3786] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.626325][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.631875][ T3796] loop3: detected capacity change from 0 to 2048 [ 41.672858][ T3798] netlink: 40 bytes leftover after parsing attributes in process `syz.4.95'. [ 41.684996][ T3472] loop3: p1 < > p4 [ 41.692629][ T3472] loop3: p4 size 8388608 extends beyond EOD, truncated [ 41.701217][ T3786] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.715340][ T3796] loop3: p1 < > p4 [ 41.727598][ T3796] loop3: p4 size 8388608 extends beyond EOD, truncated [ 41.774409][ T3427] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.815822][ T3427] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.868974][ T3800] loop4: detected capacity change from 0 to 512 [ 41.877270][ T3800] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 41.893358][ T3427] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.914401][ T3427] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.928885][ T3800] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.950589][ T3800] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.96: Block bitmap for bg 0 marked uninitialized [ 41.985267][ T3800] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 42.003448][ T3805] loop2: detected capacity change from 0 to 512 [ 42.010090][ T3800] EXT4-fs (loop4): 1 orphan inode deleted [ 42.018535][ T3800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.030837][ T3805] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.044697][ T3805] EXT4-fs (loop2): 1 truncate cleaned up [ 42.059290][ T3800] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 42.081551][ T3805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.097634][ T3800] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 42.118244][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.131372][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.134077][ T3812] hub 2-0:1.0: USB hub found [ 42.163728][ T3815] loop2: detected capacity change from 0 to 2048 [ 42.170241][ T3812] hub 2-0:1.0: 8 ports detected [ 42.182333][ T3817] loop4: detected capacity change from 0 to 512 [ 42.196421][ T3817] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 42.208020][ T3817] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.214929][ T3817] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.102: Block bitmap for bg 0 marked uninitialized [ 42.228758][ T3815] loop2: p1 < > p4 [ 42.232696][ T3817] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 42.234362][ T3427] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.242856][ T3815] loop2: p4 size 8388608 extends beyond EOD, truncated [ 42.259709][ T2994] loop2: p1 < > p4 [ 42.264144][ T2994] loop2: p4 size 8388608 extends beyond EOD, truncated [ 42.266813][ T1630] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.272465][ T3817] EXT4-fs (loop4): 1 orphan inode deleted [ 42.300222][ T1630] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.313909][ T3817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.332419][ T3819] lo speed is unknown, defaulting to 1000 [ 42.339890][ T3427] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.353030][ T3817] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 42.371189][ T3817] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 42.403901][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 42.417534][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 42.428053][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 42.448535][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 42.469058][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.469802][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 42.500148][ T3827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 42.512713][ T3827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 42.513256][ T3829] netlink: 7 bytes leftover after parsing attributes in process `syz.1.105'. [ 42.526970][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 42.532719][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 42.542689][ T3827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 42.572262][ T3826] lo speed is unknown, defaulting to 1000 [ 42.622266][ T3833] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 42.666542][ T3839] loop1: detected capacity change from 0 to 128 [ 42.680766][ T3839] syz.1.109: attempt to access beyond end of device [ 42.680766][ T3839] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 42.694889][ T3839] syz.1.109: attempt to access beyond end of device [ 42.694889][ T3839] loop1: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 42.708697][ T3839] syz.1.109: attempt to access beyond end of device [ 42.708697][ T3839] loop1: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 42.722138][ T3839] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 42.731274][ T3839] syz.1.109: attempt to access beyond end of device [ 42.731274][ T3839] loop1: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 42.746325][ T3839] syz.1.109: attempt to access beyond end of device [ 42.746325][ T3839] loop1: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 42.759740][ T3839] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 42.768544][ T3839] syz.1.109: attempt to access beyond end of device [ 42.768544][ T3839] loop1: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 42.782386][ T3839] syz.1.109: attempt to access beyond end of device [ 42.782386][ T3839] loop1: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 42.795801][ T3839] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 42.811090][ T3839] syz.1.109: attempt to access beyond end of device [ 42.811090][ T3839] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 42.824793][ T3839] syz.1.109: attempt to access beyond end of device [ 42.824793][ T3839] loop1: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 42.839162][ T3839] syz.1.109: attempt to access beyond end of device [ 42.839162][ T3839] loop1: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 42.852570][ T3839] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 42.871898][ T3839] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 42.883308][ T3839] Buffer I/O error on dev loop1, logical block 120, lost async page write [ 42.892840][ T3839] Buffer I/O error on dev loop1, logical block 124, lost async page write [ 42.901989][ T3839] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 42.912478][ T3839] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 42.921651][ T3839] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 43.169688][ T3849] loop1: detected capacity change from 0 to 1024 [ 43.179365][ T3849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.198089][ T3849] program syz.1.112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.229609][ T3853] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.275802][ T3853] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.326848][ T3853] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.354860][ T3856] loop4: detected capacity change from 0 to 512 [ 43.362016][ T3856] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 43.383331][ T3856] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.391294][ T3856] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.114: Block bitmap for bg 0 marked uninitialized [ 43.391672][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.406589][ T3856] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 43.422646][ T3856] EXT4-fs (loop4): 1 orphan inode deleted [ 43.429992][ T3853] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.430108][ T3856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.463964][ T3856] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 43.474993][ T3856] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 43.499519][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.541782][ T3863] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 43.571414][ T3868] loop1: detected capacity change from 0 to 128 [ 43.641762][ T3871] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 43.897136][ T3878] loop1: detected capacity change from 0 to 512 [ 43.905491][ T3878] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.936395][ T3878] __quota_error: 106 callbacks suppressed [ 43.936409][ T3878] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 43.952282][ T3878] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 43.962263][ T3878] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.122: Failed to acquire dquot type 1 [ 43.974062][ T3878] EXT4-fs (loop1): 1 truncate cleaned up [ 43.980293][ T3878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.003912][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.181572][ T3886] lo speed is unknown, defaulting to 1000 [ 44.527259][ T3890] loop4: detected capacity change from 0 to 2048 [ 44.574920][ T3472] loop4: p1 < > p4 [ 44.579404][ T3472] loop4: p4 size 8388608 extends beyond EOD, truncated [ 44.589182][ T3890] loop4: p1 < > p4 [ 44.593683][ T3890] loop4: p4 size 8388608 extends beyond EOD, truncated [ 44.682458][ T3892] loop4: detected capacity change from 0 to 512 [ 44.689459][ T3892] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.700650][ T3892] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 44.700650][ T3892] [ 44.711434][ T3892] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 44.720877][ T3892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.745938][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.763539][ T3895] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 44.770161][ T3895] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 44.777877][ T3895] vhci_hcd vhci_hcd.0: Device attached [ 44.787629][ T3896] vhci_hcd: connection closed [ 44.787685][ T3427] vhci_hcd: stop threads [ 44.796974][ T3427] vhci_hcd: release socket [ 44.801405][ T3427] vhci_hcd: disconnect device [ 44.985788][ T3899] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 45.015094][ T3902] __nla_validate_parse: 6 callbacks suppressed [ 45.015107][ T3902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 45.031588][ T3902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 45.042030][ T3902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 45.051527][ T3902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 45.060932][ T3902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 45.087107][ T3904] loop1: detected capacity change from 0 to 128 [ 45.098491][ T3904] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.111057][ T3904] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.138814][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.160259][ T3907] loop1: detected capacity change from 0 to 512 [ 45.169293][ T3907] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.195771][ T3907] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 45.206047][ T3907] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 45.216019][ T3907] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.131: Failed to acquire dquot type 1 [ 45.227792][ T3907] EXT4-fs (loop1): 1 truncate cleaned up [ 45.233807][ T3907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.256459][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.314043][ T3912] netlink: 7 bytes leftover after parsing attributes in process `syz.4.132'. [ 45.332764][ T3913] loop1: detected capacity change from 0 to 512 [ 45.339941][ T3913] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.352967][ T3913] EXT4-fs (loop1): 1 truncate cleaned up [ 45.359736][ T3913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.375087][ T29] audit: type=1326 audit(1756569859.208:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 45.398439][ T29] audit: type=1326 audit(1756569859.208:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 45.421695][ T29] audit: type=1326 audit(1756569859.208:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 45.445032][ T29] audit: type=1326 audit(1756569859.208:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 45.468289][ T29] audit: type=1326 audit(1756569859.208:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 45.491593][ T29] audit: type=1326 audit(1756569859.208:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 45.525142][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.548232][ T3918] loop1: detected capacity change from 0 to 512 [ 45.548825][ T3918] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 45.567634][ T3918] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.567835][ T3918] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.133: Block bitmap for bg 0 marked uninitialized [ 45.587664][ T3918] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 45.587886][ T3918] EXT4-fs (loop1): 1 orphan inode deleted [ 45.602946][ T3918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.630652][ T3918] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 45.640235][ T3918] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 45.656713][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.676241][ T3925] loop1: detected capacity change from 0 to 128 [ 45.909786][ T3928] loop3: detected capacity change from 0 to 128 [ 45.945322][ T3930] loop1: detected capacity change from 0 to 128 [ 46.273908][ T3936] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 46.336587][ T3943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 46.347130][ T3943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 46.356592][ T3943] Zero length message leads to an empty skb [ 46.356650][ T3943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 46.357069][ T3943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 46.391468][ T3945] loop3: detected capacity change from 0 to 512 [ 46.392273][ T3945] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.410851][ T3945] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.143: Failed to acquire dquot type 1 [ 46.411505][ T3945] EXT4-fs (loop3): 1 truncate cleaned up [ 46.428538][ T3945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.452706][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.505692][ T3952] loop2: detected capacity change from 0 to 512 [ 46.507592][ T3953] loop1: detected capacity change from 0 to 128 [ 46.508966][ T3952] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.525145][ T3952] EXT4-fs (loop2): 1 truncate cleaned up [ 46.525516][ T3952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.541605][ T3956] loop3: detected capacity change from 0 to 512 [ 46.545193][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.556633][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.607862][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.631010][ T1630] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.639804][ T3956] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.660566][ T1630] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.669396][ T3962] loop2: detected capacity change from 0 to 512 [ 46.682466][ T3959] loop4: detected capacity change from 0 to 1024 [ 46.682535][ T3963] loop0: detected capacity change from 0 to 128 [ 46.699524][ T3962] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 46.710253][ T3956] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.144: Failed to acquire dquot type 1 [ 46.724874][ T3962] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.730839][ T3959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.746732][ T3956] EXT4-fs (loop3): 1 truncate cleaned up [ 46.749262][ T3962] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.148: Block bitmap for bg 0 marked uninitialized [ 46.753021][ T3956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.791419][ T3962] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 46.805597][ T3962] EXT4-fs (loop2): 1 orphan inode deleted [ 46.828485][ T3962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.841467][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.854973][ T3962] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 46.866233][ T3962] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 46.900215][ T3971] loop3: detected capacity change from 0 to 128 [ 46.915917][ T3972] program syz.4.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.943881][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.959729][ T3974] loop1: detected capacity change from 0 to 512 [ 46.981765][ T3974] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.122138][ T3974] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.152: Failed to acquire dquot type 1 [ 47.134073][ T3974] EXT4-fs (loop1): 1 truncate cleaned up [ 47.140603][ T3974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.172768][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.204587][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.227104][ T3984] loop0: detected capacity change from 0 to 512 [ 47.271307][ T3984] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.293306][ T3987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.372110][ T3984] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.155: Failed to acquire dquot type 1 [ 47.386849][ T3988] lo speed is unknown, defaulting to 1000 [ 47.399910][ T3984] EXT4-fs (loop0): 1 truncate cleaned up [ 47.428681][ T3984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.461914][ T3987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.495469][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.534734][ T3997] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.565218][ T3987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.599723][ T3997] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.650781][ T3987] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.674424][ T4003] loop0: detected capacity change from 0 to 512 [ 47.687537][ T3997] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.710048][ T4003] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.747395][ T1630] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.767671][ T4003] EXT4-fs (loop0): 1 truncate cleaned up [ 47.777277][ T3997] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.785260][ T4003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.812065][ T1630] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.820571][ T1630] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.831916][ T1630] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.872040][ T1630] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.897945][ T1630] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.914289][ T1630] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.922594][ T1630] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.942803][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.991640][ T4010] loop4: detected capacity change from 0 to 512 [ 48.005087][ T4012] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.020726][ T4010] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 48.055865][ T4010] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.063913][ T4010] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.164: Block bitmap for bg 0 marked uninitialized [ 48.078498][ T4010] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 48.088457][ T4012] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.099941][ T4010] EXT4-fs (loop4): 1 orphan inode deleted [ 48.129509][ T4010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.144371][ T4010] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 48.167035][ T4012] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.184363][ T4010] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 48.238166][ T4012] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.248906][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.277760][ T4017] siw: device registration error -23 [ 48.301784][ T4019] loop4: detected capacity change from 0 to 512 [ 48.361881][ T4019] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.404917][ T4019] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 48.404917][ T4019] [ 48.415734][ T4019] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 48.449363][ T4019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.488890][ T4024] loop3: detected capacity change from 0 to 128 [ 48.508125][ T4024] bio_check_eod: 147 callbacks suppressed [ 48.508143][ T4024] syz.3.166: attempt to access beyond end of device [ 48.508143][ T4024] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 48.540400][ T4024] syz.3.166: attempt to access beyond end of device [ 48.540400][ T4024] loop3: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 48.568239][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.580127][ T4024] syz.3.166: attempt to access beyond end of device [ 48.580127][ T4024] loop3: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 48.593545][ T4024] buffer_io_error: 76 callbacks suppressed [ 48.593560][ T4024] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 48.633738][ T4024] syz.3.166: attempt to access beyond end of device [ 48.633738][ T4024] loop3: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 48.648963][ T4024] syz.3.166: attempt to access beyond end of device [ 48.648963][ T4024] loop3: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 48.662400][ T4024] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 48.674104][ T4024] syz.3.166: attempt to access beyond end of device [ 48.674104][ T4024] loop3: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 48.689578][ T4024] syz.3.166: attempt to access beyond end of device [ 48.689578][ T4024] loop3: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 48.703102][ T4024] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 48.714095][ T4024] syz.3.166: attempt to access beyond end of device [ 48.714095][ T4024] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 48.732355][ T4028] loop4: detected capacity change from 0 to 512 [ 48.741029][ T4028] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.755670][ T4024] syz.3.166: attempt to access beyond end of device [ 48.755670][ T4024] loop3: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 48.778034][ T4028] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.167: Failed to acquire dquot type 1 [ 48.797210][ T4028] EXT4-fs (loop4): 1 truncate cleaned up [ 48.803446][ T4028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.818105][ T4024] syz.3.166: attempt to access beyond end of device [ 48.818105][ T4024] loop3: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 48.831492][ T4024] Buffer I/O error on dev loop3, logical block 104, lost async page write [ 48.862846][ T4024] Buffer I/O error on dev loop3, logical block 108, lost async page write [ 48.873969][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.904761][ T4024] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 48.915972][ T4024] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 48.927835][ T4024] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 48.938586][ T4024] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 48.948696][ T4024] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 49.015076][ T4036] loop0: detected capacity change from 0 to 2048 [ 49.141231][ T3472] loop0: p1 < > p4 [ 49.141815][ T3472] loop0: p4 size 8388608 extends beyond EOD, truncated [ 49.147368][ T4036] loop0: p1 < > p4 [ 49.148118][ T4036] loop0: p4 size 8388608 extends beyond EOD, truncated [ 49.341237][ T4048] loop3: detected capacity change from 0 to 2048 [ 49.354993][ T4050] lo speed is unknown, defaulting to 1000 [ 49.376430][ T3957] loop3: p1 < > p4 [ 49.392574][ T4051] loop0: detected capacity change from 0 to 128 [ 49.413503][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 49.413530][ T29] audit: type=1326 audit(1756569863.238:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fc9debe9 code=0x7ffc0000 [ 49.413564][ T29] audit: type=1326 audit(1756569863.238:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fc9debe9 code=0x7ffc0000 [ 49.413933][ T29] audit: type=1326 audit(1756569863.238:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7fc9debe9 code=0x7ffc0000 [ 49.414380][ T29] audit: type=1326 audit(1756569863.248:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fc9debe9 code=0x7ffc0000 [ 49.414931][ T29] audit: type=1326 audit(1756569863.248:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7fc9debe9 code=0x7ffc0000 [ 49.414961][ T29] audit: type=1326 audit(1756569863.248:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fc9debe9 code=0x7ffc0000 [ 49.415103][ T29] audit: type=1326 audit(1756569863.248:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe7fc9debe9 code=0x7ffc0000 [ 49.415323][ T29] audit: type=1326 audit(1756569863.248:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fc9debe9 code=0x7ffc0000 [ 49.415563][ T29] audit: type=1326 audit(1756569863.248:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fe7fc9debe9 code=0x7ffc0000 [ 49.415630][ T29] audit: type=1326 audit(1756569863.248:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fc9debe9 code=0x7ffc0000 [ 49.420713][ T3957] loop3: p4 size 8388608 extends beyond EOD, truncated [ 49.432744][ T4048] loop3: p1 < > p4 [ 49.437186][ T4048] loop3: p4 size 8388608 extends beyond EOD, truncated [ 49.452158][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 49.454090][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 49.459959][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 49.461409][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 49.692440][ T4055] loop0: detected capacity change from 0 to 128 [ 49.880517][ T4057] loop3: detected capacity change from 0 to 1024 [ 49.898673][ T4057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.093778][ T4062] loop0: detected capacity change from 0 to 128 [ 50.097678][ T4063] program syz.3.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.232201][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.260735][ T4070] loop4: detected capacity change from 0 to 1024 [ 50.281880][ T4070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.309563][ T4072] __nla_validate_parse: 12 callbacks suppressed [ 50.309577][ T4072] netlink: 40 bytes leftover after parsing attributes in process `syz.3.179'. [ 50.448801][ T4077] program syz.4.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.471991][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 50.522861][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 50.538413][ T4083] loop3: detected capacity change from 0 to 2048 [ 50.538455][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 50.563100][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 50.573186][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 50.575292][ T4084] siw: device registration error -23 [ 50.583481][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 50.591052][ T3472] loop3: p1 < > p4 [ 50.603656][ T3472] loop3: p4 size 8388608 extends beyond EOD, truncated [ 50.618327][ T4083] loop3: p1 < > p4 [ 50.627533][ T4083] loop3: p4 size 8388608 extends beyond EOD, truncated [ 50.721363][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.780018][ T4088] loop4: detected capacity change from 0 to 2048 [ 50.824995][ T3472] loop4: p1 < > p4 [ 50.829540][ T3472] loop4: p4 size 8388608 extends beyond EOD, truncated [ 50.847433][ T4088] loop4: p1 < > p4 [ 50.858350][ T4088] loop4: p4 size 8388608 extends beyond EOD, truncated [ 50.870163][ T4091] loop3: detected capacity change from 0 to 128 [ 51.097782][ T4093] loop4: detected capacity change from 0 to 128 [ 51.353284][ T4097] loop2: detected capacity change from 0 to 128 [ 51.627773][ T4100] loop3: detected capacity change from 0 to 512 [ 51.657961][ T4100] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.698498][ T4100] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.188: Failed to acquire dquot type 1 [ 51.711683][ T4103] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 51.720593][ T4100] EXT4-fs (loop3): 1 truncate cleaned up [ 51.808719][ T4111] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 51.908875][ T4117] loop0: detected capacity change from 0 to 128 [ 51.937723][ T4117] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.991958][ T4119] lo speed is unknown, defaulting to 1000 [ 52.094203][ T177] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.108300][ T1630] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.144491][ T1630] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.172023][ T1630] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.193394][ T4123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.194'. [ 52.211781][ T4125] loop1: detected capacity change from 0 to 512 [ 52.240685][ T4125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.274722][ T4125] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 52.274722][ T4125] [ 52.285516][ T4125] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 52.333761][ T4129] loop0: detected capacity change from 0 to 128 [ 52.461757][ T4131] lo speed is unknown, defaulting to 1000 [ 52.516691][ T4134] loop1: detected capacity change from 0 to 128 [ 52.668806][ T4138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'. [ 52.694682][ T4140] loop2: detected capacity change from 0 to 128 [ 53.322534][ T4150] loop3: detected capacity change from 0 to 128 [ 53.346079][ T4146] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 53.547189][ T4159] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 53.553777][ T4159] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 53.561490][ T4159] vhci_hcd vhci_hcd.0: Device attached [ 53.569975][ T4160] vhci_hcd: connection closed [ 53.570168][ T143] vhci_hcd: stop threads [ 53.579406][ T143] vhci_hcd: release socket [ 53.583831][ T143] vhci_hcd: disconnect device [ 53.606407][ T4163] loop0: detected capacity change from 0 to 512 [ 53.641482][ T4164] lo speed is unknown, defaulting to 1000 [ 54.017575][ T4163] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.058361][ T4169] loop3: detected capacity change from 0 to 128 [ 54.058891][ T4163] EXT4-fs (loop0): 1 truncate cleaned up [ 54.073079][ T4169] bio_check_eod: 147 callbacks suppressed [ 54.073097][ T4169] syz.3.208: attempt to access beyond end of device [ 54.073097][ T4169] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 54.093808][ T4169] syz.3.208: attempt to access beyond end of device [ 54.093808][ T4169] loop3: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 54.107812][ T4169] syz.3.208: attempt to access beyond end of device [ 54.107812][ T4169] loop3: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 54.121269][ T4169] buffer_io_error: 76 callbacks suppressed [ 54.121283][ T4169] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 54.144705][ T4169] syz.3.208: attempt to access beyond end of device [ 54.144705][ T4169] loop3: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 54.188140][ T4169] syz.3.208: attempt to access beyond end of device [ 54.188140][ T4169] loop3: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 54.201562][ T4169] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 54.218668][ T4169] syz.3.208: attempt to access beyond end of device [ 54.218668][ T4169] loop3: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 54.232758][ T4169] syz.3.208: attempt to access beyond end of device [ 54.232758][ T4169] loop3: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 54.246277][ T4169] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 54.336059][ T4169] syz.3.208: attempt to access beyond end of device [ 54.336059][ T4169] loop3: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 54.350816][ T4175] lo speed is unknown, defaulting to 1000 [ 54.361481][ T4169] syz.3.208: attempt to access beyond end of device [ 54.361481][ T4169] loop3: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 54.374935][ T4169] Buffer I/O error on dev loop3, logical block 104, lost async page write [ 54.387526][ T4185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.210'. [ 54.410530][ T4185] siw: device registration error -23 [ 54.426728][ T4169] syz.3.208: attempt to access beyond end of device [ 54.426728][ T4169] loop3: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 54.442664][ T4169] Buffer I/O error on dev loop3, logical block 108, lost async page write [ 54.468954][ T4169] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 54.478273][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 54.478286][ T29] audit: type=1326 audit(1756569868.308:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4079ebe9 code=0x7ffc0000 [ 54.488047][ T4187] siw: device registration error -23 [ 54.507845][ T29] audit: type=1326 audit(1756569868.308:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4079ebe9 code=0x7ffc0000 [ 54.542611][ T4169] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 54.552301][ T4169] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 54.562985][ T4169] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 54.572389][ T4169] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 54.591476][ T29] audit: type=1326 audit(1756569868.418:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4188 comm="syz.4.213" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f085509ebe9 code=0x0 [ 54.709947][ T4191] siw: device registration error -23 [ 54.871171][ T4193] loop3: detected capacity change from 0 to 128 [ 54.899105][ T4193] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.011757][ T4196] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 55.151289][ T4201] loop0: detected capacity change from 0 to 512 [ 55.196950][ T29] audit: type=1326 audit(1756569869.028:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4202 comm="syz.2.218" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc49e64ebe9 code=0x0 [ 55.305485][ T4201] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.347758][ T4206] __nla_validate_parse: 1 callbacks suppressed [ 55.347779][ T4206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.218'. [ 55.364635][ T4206] siw: device registration error -23 [ 55.412645][ T4201] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 55.423022][ T4201] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 55.433170][ T4201] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.217: Failed to acquire dquot type 1 [ 55.472377][ T4211] loop1: detected capacity change from 0 to 128 [ 55.502311][ T4201] EXT4-fs (loop0): 1 truncate cleaned up [ 55.610345][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 55.690738][ T4213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'. [ 55.725142][ T29] audit: type=1326 audit(1756569869.558:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085509ebe9 code=0x7ffc0000 [ 55.748538][ T29] audit: type=1326 audit(1756569869.558:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085509ebe9 code=0x7ffc0000 [ 55.801741][ T29] audit: type=1326 audit(1756569869.558:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f085509ebe9 code=0x7ffc0000 [ 55.825647][ T29] audit: type=1326 audit(1756569869.558:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085509ebe9 code=0x7ffc0000 [ 56.022343][ T4223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 56.043429][ T4223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.224'. [ 56.053636][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 56.063124][ T4223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 56.072480][ T4223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 56.103806][ T4223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 56.178673][ T4226] loop4: detected capacity change from 0 to 128 [ 56.205257][ T4229] loop2: detected capacity change from 0 to 128 [ 56.342190][ T4231] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 56.421832][ T4235] loop1: detected capacity change from 0 to 128 [ 56.428980][ T4233] lo speed is unknown, defaulting to 1000 [ 56.442744][ T4235] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.495464][ T4242] loop3: detected capacity change from 0 to 128 [ 56.755231][ T4246] lo speed is unknown, defaulting to 1000 [ 56.895421][ T4253] loop3: detected capacity change from 0 to 512 [ 56.900215][ T4251] loop1: detected capacity change from 0 to 2048 [ 56.913116][ T4253] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.971062][ T4253] EXT4-fs (loop3): 1 truncate cleaned up [ 57.007770][ T4251] loop1: p1 < > p4 [ 57.013476][ T4251] loop1: p4 size 8388608 extends beyond EOD, truncated [ 57.206080][ T4263] loop1: detected capacity change from 0 to 512 [ 57.227351][ T4263] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.257515][ T4265] loop0: detected capacity change from 0 to 512 [ 57.274515][ T4265] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.289783][ T4263] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.235: Failed to acquire dquot type 1 [ 57.297369][ T4266] lo speed is unknown, defaulting to 1000 [ 57.310785][ T4265] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 57.310785][ T4265] [ 57.313978][ T4263] EXT4-fs (loop1): 1 truncate cleaned up [ 57.321610][ T4265] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 57.383330][ T4276] loop4: detected capacity change from 0 to 128 [ 57.414524][ T4279] loop3: detected capacity change from 0 to 128 [ 57.438609][ T4280] loop1: detected capacity change from 0 to 512 [ 57.478275][ T4280] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.490365][ T4280] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 57.490365][ T4280] [ 57.501283][ T4280] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 57.669491][ T4287] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 57.669526][ T4287] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 57.669563][ T4287] vhci_hcd vhci_hcd.0: Device attached [ 57.684349][ T4288] vhci_hcd: connection closed [ 57.733843][ T177] vhci_hcd: stop threads [ 57.733858][ T177] vhci_hcd: release socket [ 57.733867][ T177] vhci_hcd: disconnect device [ 57.857647][ T4301] loop3: detected capacity change from 0 to 512 [ 57.862548][ T4301] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.989178][ T4301] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.247: Failed to acquire dquot type 1 [ 57.989705][ T4301] EXT4-fs (loop3): 1 truncate cleaned up [ 58.263277][ T4310] loop1: detected capacity change from 0 to 128 [ 58.279716][ T4312] loop4: detected capacity change from 0 to 512 [ 58.294678][ T4312] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.306759][ T4312] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.250: Failed to acquire dquot type 1 [ 58.307278][ T4312] EXT4-fs (loop4): 1 truncate cleaned up [ 58.386690][ T4318] loop2: detected capacity change from 0 to 512 [ 58.389577][ T4318] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.440236][ T4318] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 58.440236][ T4318] [ 58.440254][ T4318] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 58.762854][ T4326] lo speed is unknown, defaulting to 1000 [ 59.105104][ T4330] lo speed is unknown, defaulting to 1000 [ 59.235651][ T4334] loop0: detected capacity change from 0 to 512 [ 59.294553][ T4334] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.363683][ T4334] EXT4-fs (loop0): 1 truncate cleaned up [ 59.388679][ T4332] lo speed is unknown, defaulting to 1000 [ 59.537218][ T4342] netlink: 40 bytes leftover after parsing attributes in process `syz.2.258'. [ 59.557146][ T4336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7410 sclass=netlink_route_socket pid=4336 comm=syz.4.257 [ 59.617523][ T4347] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 59.665677][ T4351] loop1: detected capacity change from 0 to 512 [ 59.674221][ T4352] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 59.680770][ T4352] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 59.688553][ T4352] vhci_hcd vhci_hcd.0: Device attached [ 59.714449][ T4351] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 59.725098][ T4356] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.736655][ T4353] vhci_hcd: connection closed [ 59.737044][ T4351] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.749585][ T12] vhci_hcd: stop threads [ 59.753915][ T12] vhci_hcd: release socket [ 59.758390][ T12] vhci_hcd: disconnect device [ 59.765485][ T4351] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.261: Block bitmap for bg 0 marked uninitialized [ 59.780556][ T4356] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.792376][ T4351] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 59.802448][ T4351] EXT4-fs (loop1): 1 orphan inode deleted [ 59.812198][ T4351] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 59.832148][ T4351] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 59.866572][ T4359] loop1: detected capacity change from 0 to 128 [ 59.876311][ T4356] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.966374][ T4356] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.004595][ T4361] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 60.041420][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 60.041435][ T29] audit: type=1326 audit(1756569873.868:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.3.265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e4079ebe9 code=0x0 [ 60.052886][ T143] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.078932][ T143] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.092504][ T4366] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 60.092972][ T29] audit: type=1400 audit(1756569873.918:1127): avc: denied { bind } for pid=4364 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.102121][ T143] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.170778][ T29] audit: type=1400 audit(1756569873.998:1128): avc: denied { ioctl } for pid=4364 comm="syz.3.265" path="socket:[8856]" dev="sockfs" ino=8856 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.173414][ T143] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.238630][ T4370] loop2: detected capacity change from 0 to 2048 [ 60.314723][ T3957] loop2: p1 < > p4 [ 60.321137][ T3957] loop2: p4 size 8388608 extends beyond EOD, truncated [ 60.339697][ T4370] loop2: p1 < > p4 [ 60.350041][ T4370] loop2: p4 size 8388608 extends beyond EOD, truncated [ 60.472388][ T4374] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.548377][ T4376] loop2: detected capacity change from 0 to 1024 [ 60.556431][ T4374] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.619213][ T4374] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.666444][ T4374] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.678812][ T4380] program syz.2.269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.747448][ T1630] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.864814][ T1630] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.877181][ T4382] lo speed is unknown, defaulting to 1000 [ 60.906217][ T1630] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.940197][ T1630] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.001902][ T4386] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 61.008449][ T4386] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 61.016306][ T4386] vhci_hcd vhci_hcd.0: Device attached [ 61.049539][ T4387] vhci_hcd: connection closed [ 61.049850][ T1630] vhci_hcd: stop threads [ 61.058916][ T1630] vhci_hcd: release socket [ 61.063331][ T1630] vhci_hcd: disconnect device [ 61.166137][ T4392] loop3: detected capacity change from 0 to 512 [ 61.178873][ T4392] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.219378][ T4392] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 61.229602][ T4392] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 61.239568][ T4392] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.272: Failed to acquire dquot type 1 [ 61.272241][ T4392] EXT4-fs (loop3): 1 truncate cleaned up [ 61.395570][ T4399] loop2: detected capacity change from 0 to 128 [ 61.404962][ T4402] __nla_validate_parse: 1 callbacks suppressed [ 61.404979][ T4402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.275'. [ 61.423776][ T4399] bio_check_eod: 110 callbacks suppressed [ 61.423794][ T4399] syz.2.274: attempt to access beyond end of device [ 61.423794][ T4399] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 61.446866][ T4399] syz.2.274: attempt to access beyond end of device [ 61.446866][ T4399] loop2: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 61.461569][ T4399] syz.2.274: attempt to access beyond end of device [ 61.461569][ T4399] loop2: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 61.475064][ T4399] buffer_io_error: 53 callbacks suppressed [ 61.475079][ T4399] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 61.491678][ T4399] syz.2.274: attempt to access beyond end of device [ 61.491678][ T4399] loop2: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 61.506951][ T4399] syz.2.274: attempt to access beyond end of device [ 61.506951][ T4399] loop2: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 61.520437][ T4399] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 61.526053][ T4406] loop3: detected capacity change from 0 to 1024 [ 61.531078][ T4399] syz.2.274: attempt to access beyond end of device [ 61.531078][ T4399] loop2: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 61.551085][ T4399] syz.2.274: attempt to access beyond end of device [ 61.551085][ T4399] loop2: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 61.564664][ T4399] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 61.565134][ T29] audit: type=1326 audit(1756569875.378:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x7ffc0000 [ 61.596556][ T29] audit: type=1326 audit(1756569875.378:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49e64ebe9 code=0x7ffc0000 [ 61.619936][ T29] audit: type=1326 audit(1756569875.378:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x7ffc0000 [ 61.643404][ T29] audit: type=1326 audit(1756569875.378:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc49e64ebe9 code=0x7ffc0000 [ 61.658751][ T4399] syz.2.274: attempt to access beyond end of device [ 61.658751][ T4399] loop2: rw=2049, sector=234, nr_sectors = 8 limit=128 [ 61.666803][ T29] audit: type=1326 audit(1756569875.378:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x7ffc0000 [ 61.681940][ T4399] syz.2.274: attempt to access beyond end of device [ 61.681940][ T4399] loop2: rw=2049, sector=240, nr_sectors = 2 limit=128 [ 61.716837][ T4399] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 61.732230][ T4412] loop1: detected capacity change from 0 to 512 [ 61.741910][ T4412] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.760569][ T4412] EXT4-fs (loop1): 1 truncate cleaned up [ 61.768242][ T4399] syz.2.274: attempt to access beyond end of device [ 61.768242][ T4399] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 61.786639][ T4399] Buffer I/O error on dev loop2, logical block 124, lost async page write [ 61.824789][ T4399] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 61.833658][ T4417] program syz.3.277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.846297][ T4399] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 61.856909][ T4399] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 61.876479][ T4418] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 61.898540][ T4399] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 61.921325][ T4399] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 61.948404][ T4423] loop1: detected capacity change from 0 to 128 [ 62.114085][ T4430] loop3: detected capacity change from 0 to 128 [ 62.116942][ T4431] loop0: detected capacity change from 0 to 128 [ 62.185126][ T4434] loop2: detected capacity change from 0 to 512 [ 62.192562][ T4434] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.215254][ T4434] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.286: Failed to acquire dquot type 1 [ 62.240168][ T4434] EXT4-fs (loop2): 1 truncate cleaned up [ 62.350880][ T4440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.288'. [ 62.394901][ T4444] loop2: detected capacity change from 0 to 2048 [ 62.427939][ T4446] loop3: detected capacity change from 0 to 128 [ 62.444841][ T3472] loop2: p1 < > p4 [ 62.452429][ T3472] loop2: p4 size 8388608 extends beyond EOD, truncated [ 62.458625][ T4448] loop4: detected capacity change from 0 to 512 [ 62.475090][ T4448] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.505411][ T4444] loop2: p1 < > p4 [ 62.509926][ T4448] EXT4-fs (loop4): 1 truncate cleaned up [ 62.525191][ T4444] loop2: p4 size 8388608 extends beyond EOD, truncated [ 62.612886][ T2994] loop2: p1 < > p4 [ 62.626992][ T2994] loop2: p4 size 8388608 extends beyond EOD, truncated [ 62.647648][ T4452] loop4: detected capacity change from 0 to 512 [ 62.661082][ T4452] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.675224][ T4456] loop0: detected capacity change from 0 to 512 [ 62.690853][ T4456] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.706089][ T4452] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 62.706089][ T4452] [ 62.716973][ T4452] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 62.788731][ T4466] loop2: detected capacity change from 0 to 512 [ 62.794548][ T4456] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.294: Failed to acquire dquot type 1 [ 62.808667][ T4466] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.841395][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 62.846132][ T4456] EXT4-fs (loop0): 1 truncate cleaned up [ 62.852964][ T3957] udevd[3957]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 62.872232][ T4466] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.297: Failed to acquire dquot type 1 [ 62.877302][ T4469] loop1: detected capacity change from 0 to 512 [ 62.894052][ T4471] loop4: detected capacity change from 0 to 128 [ 62.901337][ T4469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.915716][ T4466] EXT4-fs (loop2): 1 truncate cleaned up [ 62.942320][ T4469] EXT4-fs (loop1): 1 truncate cleaned up [ 62.942504][ T4475] loop3: detected capacity change from 0 to 1024 [ 62.952258][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 62.965778][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 63.089552][ T4481] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 63.108550][ T4480] loop0: detected capacity change from 0 to 512 [ 63.117598][ T4480] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.117790][ T4486] program syz.3.300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.140136][ T4485] loop1: detected capacity change from 0 to 512 [ 63.154017][ T4485] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.166842][ T4480] EXT4-fs (loop0): 1 truncate cleaned up [ 63.178703][ T4485] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.303: Failed to acquire dquot type 1 [ 63.199159][ T4490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.304'. [ 63.211959][ T4485] EXT4-fs (loop1): 1 truncate cleaned up [ 63.249867][ T4494] loop4: detected capacity change from 0 to 512 [ 63.260364][ T4494] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.287355][ T4494] EXT4-fs (loop4): 1 truncate cleaned up [ 63.343924][ T4502] loop1: detected capacity change from 0 to 128 [ 63.394106][ T4506] loop3: detected capacity change from 0 to 128 [ 63.399581][ T4507] loop2: detected capacity change from 0 to 512 [ 63.401827][ T4507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.403888][ T4507] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 63.403888][ T4507] [ 63.403951][ T4507] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 63.488921][ T4517] loop2: detected capacity change from 0 to 512 [ 63.526899][ T4517] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.557688][ T4514] lo speed is unknown, defaulting to 1000 [ 63.570631][ T4517] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.312: Failed to acquire dquot type 1 [ 63.571282][ T4517] EXT4-fs (loop2): 1 truncate cleaned up [ 63.674420][ T4522] loop2: detected capacity change from 0 to 512 [ 63.723061][ T4522] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.725287][ T4522] EXT4-fs (loop2): 1 truncate cleaned up [ 63.785494][ T4527] loop2: detected capacity change from 0 to 512 [ 63.792834][ T4527] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.794915][ T4527] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 63.794915][ T4527] [ 63.794931][ T4527] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 63.858801][ T4534] loop2: detected capacity change from 0 to 2048 [ 63.916248][ T3957] loop2: p1 < > p4 [ 63.918883][ T3957] loop2: p4 size 8388608 extends beyond EOD, truncated [ 63.959019][ T4534] loop2: p1 < > p4 [ 63.959791][ T4534] loop2: p4 size 8388608 extends beyond EOD, truncated [ 64.357049][ T4546] loop0: detected capacity change from 0 to 1024 [ 64.365570][ T4548] loop3: detected capacity change from 0 to 128 [ 64.469090][ T4553] loop1: detected capacity change from 0 to 1024 [ 64.490768][ T4555] program syz.0.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.620430][ T4562] program syz.1.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.654107][ T4564] loop4: detected capacity change from 0 to 1024 [ 64.761493][ T4568] loop0: detected capacity change from 0 to 1024 [ 64.788792][ T4570] program syz.4.324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.950866][ T4578] loop3: detected capacity change from 0 to 512 [ 64.959026][ T4579] program syz.0.325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.970484][ T4578] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.036690][ T4578] EXT4-fs (loop3): 1 truncate cleaned up [ 65.090637][ T4585] loop4: detected capacity change from 0 to 1024 [ 65.138925][ T4589] loop1: detected capacity change from 0 to 128 [ 65.256629][ T4591] loop3: detected capacity change from 0 to 512 [ 65.266030][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 65.266043][ T29] audit: type=1326 audit(1756569879.098:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 65.301275][ T4591] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.311637][ T29] audit: type=1326 audit(1756569879.128:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 65.316347][ T4591] EXT4-fs (loop3): 1 truncate cleaned up [ 65.335066][ T29] audit: type=1326 audit(1756569879.128:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 65.364084][ T29] audit: type=1326 audit(1756569879.128:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 65.387420][ T29] audit: type=1326 audit(1756569879.128:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 65.410881][ T29] audit: type=1326 audit(1756569879.128:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 65.434248][ T29] audit: type=1326 audit(1756569879.128:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 65.457747][ T29] audit: type=1326 audit(1756569879.128:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 65.481166][ T29] audit: type=1326 audit(1756569879.128:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 65.504523][ T29] audit: type=1326 audit(1756569879.128:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fd23e8debe9 code=0x7ffc0000 [ 65.571038][ T4598] loop1: detected capacity change from 0 to 128 [ 65.571146][ T4596] loop0: detected capacity change from 0 to 512 [ 65.596701][ T4596] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.624323][ T4596] EXT4-fs (loop0): 1 truncate cleaned up [ 65.805813][ T4605] siw: device registration error -23 [ 65.830232][ T4607] loop4: detected capacity change from 0 to 512 [ 65.838050][ T4607] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.870379][ T4607] EXT4-fs (loop4): 1 truncate cleaned up [ 65.944035][ T4616] loop1: detected capacity change from 0 to 128 [ 65.955418][ T4614] loop4: detected capacity change from 0 to 2048 [ 65.969870][ T4617] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 66.015181][ T3957] loop4: p1 < > p4 [ 66.021693][ T3957] loop4: p4 size 8388608 extends beyond EOD, truncated [ 66.031717][ T4614] loop4: p1 < > p4 [ 66.037734][ T4614] loop4: p4 size 8388608 extends beyond EOD, truncated [ 66.051861][ T4618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.338'. [ 66.238417][ T4620] loop4: detected capacity change from 0 to 512 [ 66.245976][ T4620] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.276838][ T4622] loop1: detected capacity change from 0 to 1024 [ 66.286047][ T4620] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.341: Failed to acquire dquot type 1 [ 66.333476][ T4620] EXT4-fs (loop4): 1 truncate cleaned up [ 66.407747][ T4628] loop4: detected capacity change from 0 to 512 [ 66.425011][ T4628] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.453732][ T4628] EXT4-fs (loop4): 1 truncate cleaned up [ 66.595183][ T4632] loop4: detected capacity change from 0 to 512 [ 66.606250][ T4632] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.623392][ T4632] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 66.623392][ T4632] [ 66.634254][ T4632] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 66.699608][ T4635] loop4: detected capacity change from 0 to 512 [ 66.723822][ T4635] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.785565][ T4635] EXT4-fs (loop4): 1 truncate cleaned up [ 66.805086][ T4640] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 66.811689][ T4640] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 66.819418][ T4640] vhci_hcd vhci_hcd.0: Device attached [ 66.843695][ T4637] loop3: detected capacity change from 0 to 2048 [ 66.851541][ T4641] vhci_hcd: connection closed [ 66.853350][ T12] vhci_hcd: stop threads [ 66.862395][ T12] vhci_hcd: release socket [ 66.866965][ T12] vhci_hcd: disconnect device [ 66.875070][ T4644] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.879018][ T4646] loop0: detected capacity change from 0 to 1024 [ 66.902203][ T4646] program syz.0.349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.924752][ T3472] loop3: p1 < > p4 [ 66.929511][ T3472] loop3: p4 size 8388608 extends beyond EOD, truncated [ 66.929757][ T4644] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.949541][ T4637] loop3: p1 < > p4 [ 66.955060][ T4637] loop3: p4 size 8388608 extends beyond EOD, truncated [ 66.966393][ T2994] loop3: p1 < > p4 [ 66.971200][ T2994] loop3: p4 size 8388608 extends beyond EOD, truncated [ 66.979996][ T4644] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.005624][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 67.008636][ T3957] udevd[3957]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 67.019883][ T4650] loop3: detected capacity change from 0 to 128 [ 67.036265][ T4650] bio_check_eod: 275 callbacks suppressed [ 67.036284][ T4650] syz.3.350: attempt to access beyond end of device [ 67.036284][ T4650] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 67.042515][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 67.060138][ T3957] udevd[3957]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 67.067189][ T4650] syz.3.350: attempt to access beyond end of device [ 67.067189][ T4650] loop3: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 67.086170][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 67.089101][ T4650] syz.3.350: attempt to access beyond end of device [ 67.089101][ T4650] loop3: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 67.101987][ T3957] udevd[3957]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 67.111649][ T4650] buffer_io_error: 148 callbacks suppressed [ 67.111664][ T4650] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 67.114961][ T4644] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.122419][ T4650] syz.3.350: attempt to access beyond end of device [ 67.122419][ T4650] loop3: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 67.165905][ T4650] syz.3.350: attempt to access beyond end of device [ 67.165905][ T4650] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 67.181238][ T4650] syz.3.350: attempt to access beyond end of device [ 67.181238][ T4650] loop3: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 67.194732][ T4650] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 67.203878][ T4650] syz.3.350: attempt to access beyond end of device [ 67.203878][ T4650] loop3: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 67.219589][ T4650] syz.3.350: attempt to access beyond end of device [ 67.219589][ T4650] loop3: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 67.232977][ T4650] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 67.246589][ T4650] syz.3.350: attempt to access beyond end of device [ 67.246589][ T4650] loop3: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 67.268159][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.276886][ T4650] syz.3.350: attempt to access beyond end of device [ 67.276886][ T4650] loop3: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 67.290408][ T4650] Buffer I/O error on dev loop3, logical block 104, lost async page write [ 67.304154][ T4650] Buffer I/O error on dev loop3, logical block 108, lost async page write [ 67.317948][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.326434][ T4654] loop0: detected capacity change from 0 to 512 [ 67.333143][ T4650] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 67.342146][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.344322][ T4654] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.354900][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.369115][ T4650] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 67.379695][ T4650] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 67.399447][ T4650] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 67.402898][ T4654] EXT4-fs (loop0): 1 truncate cleaned up [ 67.449988][ T4650] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 67.501559][ T4665] loop4: detected capacity change from 0 to 512 [ 67.502948][ T4662] hub 2-0:1.0: USB hub found [ 67.512829][ T4662] hub 2-0:1.0: 8 ports detected [ 67.521919][ T4665] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.551797][ T4665] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 67.551797][ T4665] [ 67.562607][ T4665] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 67.618463][ T4671] loop4: detected capacity change from 0 to 128 [ 67.663622][ T4675] loop2: detected capacity change from 0 to 512 [ 67.677229][ T4675] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.694965][ T4677] loop0: detected capacity change from 0 to 512 [ 67.703002][ T4675] EXT4-fs (loop2): 1 truncate cleaned up [ 67.714712][ T4672] lo speed is unknown, defaulting to 1000 [ 67.724380][ T4677] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.767002][ T4681] loop3: detected capacity change from 0 to 512 [ 67.780167][ T4677] EXT4-fs (loop0): 1 truncate cleaned up [ 67.787269][ T4681] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.800561][ T4681] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 67.800561][ T4681] [ 67.811429][ T4681] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 67.834735][ T4685] loop2: detected capacity change from 0 to 512 [ 67.850098][ T4685] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.941377][ T4691] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 67.951599][ T4695] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 67.952128][ T4685] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.361: Failed to acquire dquot type 1 [ 67.958146][ T4695] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.958363][ T4695] vhci_hcd vhci_hcd.0: Device attached [ 67.981853][ T4685] EXT4-fs (loop2): 1 truncate cleaned up [ 68.018852][ T4696] vhci_hcd: connection closed [ 68.019126][ T35] vhci_hcd: stop threads [ 68.028197][ T35] vhci_hcd: release socket [ 68.032639][ T35] vhci_hcd: disconnect device [ 68.079838][ T4704] loop2: detected capacity change from 0 to 512 [ 68.086547][ T4702] loop4: detected capacity change from 0 to 512 [ 68.087401][ T4704] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.104088][ T4704] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 68.104088][ T4704] [ 68.114897][ T4704] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 68.115427][ T4702] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.142238][ T4702] EXT4-fs (loop4): 1 truncate cleaned up [ 68.173637][ T4708] loop2: detected capacity change from 0 to 512 [ 68.199688][ T4708] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.225299][ T4709] lo speed is unknown, defaulting to 1000 [ 68.297367][ T4708] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.368: Failed to acquire dquot type 1 [ 68.342346][ T4708] EXT4-fs (loop2): 1 truncate cleaned up [ 68.348518][ T4718] loop1: detected capacity change from 0 to 512 [ 68.374443][ T4718] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.396417][ T4718] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.370: Failed to acquire dquot type 1 [ 68.448321][ T4718] EXT4-fs (loop1): 1 truncate cleaned up [ 68.470128][ T4724] hub 2-0:1.0: USB hub found [ 68.470223][ T4724] hub 2-0:1.0: 8 ports detected [ 68.749411][ T4739] loop3: detected capacity change from 0 to 1024 [ 68.761753][ T4742] loop1: detected capacity change from 0 to 512 [ 68.793217][ T4742] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.811032][ T4742] EXT4-fs (loop1): 1 truncate cleaned up [ 68.912932][ T4750] program syz.3.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.177353][ T4761] loop0: detected capacity change from 0 to 512 [ 69.181889][ T4761] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.184818][ T4761] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 69.184818][ T4761] [ 69.184838][ T4761] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 69.218926][ T4764] loop3: detected capacity change from 0 to 2048 [ 69.257292][ T3957] loop3: p1 < > p4 [ 69.296635][ T3957] loop3: p4 size 8388608 extends beyond EOD, truncated [ 69.301454][ T4764] loop3: p1 < > p4 [ 69.302104][ T4764] loop3: p4 size 8388608 extends beyond EOD, truncated [ 69.528904][ T4772] hub 2-0:1.0: USB hub found [ 69.528978][ T4772] hub 2-0:1.0: 8 ports detected [ 69.570428][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 69.575641][ T3957] udevd[3957]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 69.658863][ T4777] lo speed is unknown, defaulting to 1000 [ 69.732578][ T4780] loop3: detected capacity change from 0 to 512 [ 69.762470][ T4784] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 69.769156][ T4784] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 69.769303][ T4784] vhci_hcd vhci_hcd.0: Device attached [ 69.781688][ T4783] loop2: detected capacity change from 0 to 512 [ 69.782783][ T4783] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.782864][ T4785] vhci_hcd: connection closed [ 69.783305][ T4780] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.791646][ T4783] EXT4-fs (loop2): 1 truncate cleaned up [ 69.792157][ T4783] EXT4-fs mount: 124 callbacks suppressed [ 69.792172][ T4783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.795586][ T4780] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.384: Failed to acquire dquot type 1 [ 69.800689][ T35] vhci_hcd: stop threads [ 69.873186][ T35] vhci_hcd: release socket [ 69.877669][ T35] vhci_hcd: disconnect device [ 69.903328][ T4780] EXT4-fs (loop3): 1 truncate cleaned up [ 69.910528][ T4780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.944291][ T37] vhci_hcd: vhci_device speed not set [ 69.944707][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.974074][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.011371][ T4796] loop3: detected capacity change from 0 to 128 [ 70.012995][ T4792] loop2: detected capacity change from 0 to 512 [ 70.031626][ T4794] netlink: 40 bytes leftover after parsing attributes in process `syz.4.389'. [ 70.031778][ T4792] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.094179][ T4792] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.387: Failed to acquire dquot type 1 [ 70.130905][ T4792] EXT4-fs (loop2): 1 truncate cleaned up [ 70.137070][ T4792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.227879][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.305496][ T4805] loop4: detected capacity change from 0 to 1024 [ 70.320039][ T4805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.432901][ T4806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7410 sclass=netlink_route_socket pid=4806 comm=syz.2.391 [ 70.548241][ T4814] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 70.560708][ T4819] program syz.4.392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.643843][ T4822] loop1: detected capacity change from 0 to 512 [ 70.669432][ T4822] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.706301][ T4822] __quota_error: 387 callbacks suppressed [ 70.706320][ T4822] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 70.706350][ T4822] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 70.706366][ T4822] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.396: Failed to acquire dquot type 1 [ 70.712699][ T4822] EXT4-fs (loop1): 1 truncate cleaned up [ 70.752875][ T4822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.876642][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.902504][ T4831] loop3: detected capacity change from 0 to 512 [ 70.911987][ T4831] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.919649][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.946936][ T4833] loop4: detected capacity change from 0 to 512 [ 70.951628][ T4833] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.972797][ T4831] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 70.972845][ T4831] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 70.972864][ T4831] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.397: Failed to acquire dquot type 1 [ 70.973408][ T4831] EXT4-fs (loop3): 1 truncate cleaned up [ 70.973906][ T4831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.985766][ T4833] EXT4-fs (loop4): 1 truncate cleaned up [ 70.986174][ T4833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.014792][ T29] audit: type=1326 audit(1756569884.848:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085509ebe9 code=0x7ffc0000 [ 71.015234][ T29] audit: type=1326 audit(1756569884.848:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f085509ebe9 code=0x7ffc0000 [ 71.015646][ T29] audit: type=1326 audit(1756569884.848:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085509ebe9 code=0x7ffc0000 [ 71.016006][ T29] audit: type=1326 audit(1756569884.848:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f085509ebe9 code=0x7ffc0000 [ 71.016111][ T29] audit: type=1326 audit(1756569884.848:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085509ebe9 code=0x7ffc0000 [ 71.018380][ T29] audit: type=1326 audit(1756569884.848:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f085509ebe9 code=0x7ffc0000 [ 71.029206][ T4838] loop1: detected capacity change from 0 to 512 [ 71.071663][ T4838] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.074567][ T4838] EXT4-fs (loop1): 1 truncate cleaned up [ 71.074956][ T4838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.076141][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.118162][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.159455][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.186277][ T4843] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 71.239266][ T4850] hub 2-0:1.0: USB hub found [ 71.239401][ T4850] hub 2-0:1.0: 8 ports detected [ 71.256881][ T4847] loop1: detected capacity change from 0 to 2048 [ 71.266641][ T4849] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 71.563214][ T3472] loop1: p1 < > p4 [ 71.563950][ T3472] loop1: p4 size 8388608 extends beyond EOD, truncated [ 71.574202][ T4847] loop1: p1 < > p4 [ 71.575541][ T4847] loop1: p4 size 8388608 extends beyond EOD, truncated [ 71.610242][ T4860] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 71.665525][ T4863] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 71.672109][ T4863] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 71.679781][ T4863] vhci_hcd vhci_hcd.0: Device attached [ 71.691871][ T4864] vhci_hcd: connection closed [ 71.692288][ T3427] vhci_hcd: stop threads [ 71.701340][ T3427] vhci_hcd: release socket [ 71.705837][ T3427] vhci_hcd: disconnect device [ 71.783804][ T4874] loop1: detected capacity change from 0 to 128 [ 72.049017][ T4885] loop1: detected capacity change from 0 to 128 [ 72.404731][ T4893] loop4: detected capacity change from 0 to 512 [ 72.406996][ T4893] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.418668][ T4893] EXT4-fs (loop4): 1 truncate cleaned up [ 72.421663][ T4893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.440738][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.460812][ T4900] loop4: detected capacity change from 0 to 512 [ 72.462196][ T4900] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.501013][ T4900] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.419: Failed to acquire dquot type 1 [ 72.501602][ T4900] EXT4-fs (loop4): 1 truncate cleaned up [ 72.502075][ T4900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.515915][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.601681][ T4907] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 72.601732][ T4907] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.601760][ T4907] vhci_hcd vhci_hcd.0: Device attached [ 72.605088][ T4908] vhci_hcd: connection closed [ 72.605345][ T143] vhci_hcd: stop threads [ 72.605368][ T143] vhci_hcd: release socket [ 72.605376][ T143] vhci_hcd: disconnect device [ 72.710156][ T4910] lo speed is unknown, defaulting to 1000 [ 72.891738][ T4918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4918 comm=syz.1.424 [ 72.914635][ T4918] netlink: 'syz.1.424': attribute type 10 has an invalid length. [ 72.953917][ T4918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.964021][ T4918] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 72.991526][ T4918] syz.1.424 (4918) used greatest stack depth: 9328 bytes left [ 73.044847][ T4925] program syz.0.425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.144819][ T4932] loop4: detected capacity change from 0 to 128 [ 73.178472][ T4932] bio_check_eod: 79 callbacks suppressed [ 73.178541][ T4932] syz.4.428: attempt to access beyond end of device [ 73.178541][ T4932] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 73.347285][ T4932] syz.4.428: attempt to access beyond end of device [ 73.347285][ T4932] loop4: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 73.381935][ T4932] syz.4.428: attempt to access beyond end of device [ 73.381935][ T4932] loop4: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 73.395369][ T4932] buffer_io_error: 36 callbacks suppressed [ 73.395384][ T4932] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 73.464488][ T4932] syz.4.428: attempt to access beyond end of device [ 73.464488][ T4932] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 73.482557][ T4932] syz.4.428: attempt to access beyond end of device [ 73.482557][ T4932] loop4: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 73.496042][ T4932] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 73.509249][ T4940] hub 2-0:1.0: USB hub found [ 73.522395][ T4940] hub 2-0:1.0: 8 ports detected [ 73.580885][ T4932] syz.4.428: attempt to access beyond end of device [ 73.580885][ T4932] loop4: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 73.641626][ T4944] block device autoloading is deprecated and will be removed. [ 73.663310][ T4932] syz.4.428: attempt to access beyond end of device [ 73.663310][ T4932] loop4: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 73.676695][ T4932] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 73.694042][ T4944] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 73.820190][ T4932] syz.4.428: attempt to access beyond end of device [ 73.820190][ T4932] loop4: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 73.854451][ T4932] syz.4.428: attempt to access beyond end of device [ 73.854451][ T4932] loop4: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 73.867872][ T4932] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 73.882910][ T4932] syz.4.428: attempt to access beyond end of device [ 73.882910][ T4932] loop4: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 73.897704][ T4952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.433'. [ 73.925539][ T4932] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 73.927537][ T4932] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 73.954063][ T4932] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 73.955266][ T4932] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 73.956011][ T4932] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 73.995482][ T4932] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 74.010187][ T4959] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.029329][ T4959] loop0: detected capacity change from 0 to 1024 [ 74.053127][ T4959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.120695][ T4959] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.436: Allocating blocks 449-513 which overlap fs metadata [ 74.164993][ T4966] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.302675][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.325566][ T4956] EXT4-fs (loop0): pa ffff8881071c2770: logic 48, phys. 177, len 21 [ 74.325595][ T4956] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 74.348536][ T4973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 74.354103][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.415104][ T4978] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 74.428010][ T4981] loop0: detected capacity change from 0 to 512 [ 74.440113][ T4983] loop3: detected capacity change from 0 to 512 [ 74.441835][ T4983] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.504840][ T4992] netlink: 'syz.1.444': attribute type 6 has an invalid length. [ 74.506085][ T4992] netlink: 'syz.1.444': attribute type 6 has an invalid length. [ 74.507816][ T4981] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.512630][ T4983] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.441: Failed to acquire dquot type 1 [ 74.513052][ T4983] EXT4-fs (loop3): 1 truncate cleaned up [ 74.513492][ T4983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.550227][ T4981] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.440: Failed to acquire dquot type 1 [ 74.612718][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.637286][ T4981] EXT4-fs (loop0): 1 truncate cleaned up [ 74.637750][ T4981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.675683][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.702033][ T5004] lo speed is unknown, defaulting to 1000 [ 74.739774][ T5008] loop3: detected capacity change from 0 to 2048 [ 74.776099][ T5010] lo speed is unknown, defaulting to 1000 [ 74.835273][ T3957] loop3: p3 p4 < > [ 74.835371][ T3957] loop3: p3 start 301989888 is beyond EOD, truncated [ 74.847790][ T5011] lo speed is unknown, defaulting to 1000 [ 74.851485][ T5008] loop3: p3 p4 < > [ 74.851546][ T5008] loop3: p3 start 301989888 is beyond EOD, truncated [ 74.859517][ T2994] loop3: p3 p4 < > [ 74.859660][ T2994] loop3: p3 start 301989888 is beyond EOD, truncated [ 74.882352][ T5016] program syz.1.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.889610][ T5014] loop4: detected capacity change from 0 to 1024 [ 74.916006][ T5014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.049845][ T5023] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 75.057045][ T5023] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 75.065288][ T5023] vhci_hcd vhci_hcd.0: Device attached [ 75.093042][ T5029] program syz.4.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.155095][ T5024] vhci_hcd: connection closed [ 75.155468][ T35] vhci_hcd: stop threads [ 75.164685][ T35] vhci_hcd: release socket [ 75.169122][ T35] vhci_hcd: disconnect device [ 75.282761][ T5037] loop3: detected capacity change from 0 to 512 [ 75.292159][ T5037] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.327797][ T5037] EXT4-fs (loop3): 1 truncate cleaned up [ 75.334172][ T5037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.340439][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 75.403200][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 75.516337][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.562392][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.670904][ T5046] FAULT_INJECTION: forcing a failure. [ 75.670904][ T5046] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.684936][ T5046] CPU: 1 UID: 0 PID: 5046 Comm: syz.1.461 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.684963][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.684977][ T5046] Call Trace: [ 75.684986][ T5046] [ 75.684995][ T5046] __dump_stack+0x1d/0x30 [ 75.685021][ T5046] dump_stack_lvl+0xe8/0x140 [ 75.685045][ T5046] dump_stack+0x15/0x1b [ 75.685066][ T5046] should_fail_ex+0x265/0x280 [ 75.685102][ T5046] should_fail+0xb/0x20 [ 75.685127][ T5046] should_fail_usercopy+0x1a/0x20 [ 75.685154][ T5046] _copy_from_user+0x1c/0xb0 [ 75.685457][ T5046] memdup_user+0x5e/0xd0 [ 75.685500][ T5046] strndup_user+0x68/0xb0 [ 75.685562][ T5046] __se_sys_mount+0x4d/0x2e0 [ 75.685588][ T5046] ? fput+0x8f/0xc0 [ 75.685648][ T5046] ? ksys_write+0x192/0x1a0 [ 75.685675][ T5046] __x64_sys_mount+0x67/0x80 [ 75.685697][ T5046] x64_sys_call+0x2b4d/0x2ff0 [ 75.685752][ T5046] do_syscall_64+0xd2/0x200 [ 75.685786][ T5046] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.685880][ T5046] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.685905][ T5046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.685930][ T5046] RIP: 0033:0x7fd23e8debe9 [ 75.685950][ T5046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.686033][ T5046] RSP: 002b:00007fd23d347038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.686052][ T5046] RAX: ffffffffffffffda RBX: 00007fd23eb15fa0 RCX: 00007fd23e8debe9 [ 75.686083][ T5046] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 75.686117][ T5046] RBP: 00007fd23d347090 R08: 0000200000000440 R09: 0000000000000000 [ 75.686134][ T5046] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.686153][ T5046] R13: 00007fd23eb16038 R14: 00007fd23eb15fa0 R15: 00007ffd203ba1b8 [ 75.686170][ T5046] [ 75.961220][ T5048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.457'. [ 76.314051][ T5057] lo speed is unknown, defaulting to 1000 [ 76.540117][ T5059] lo speed is unknown, defaulting to 1000 [ 77.025164][ T5067] block device autoloading is deprecated and will be removed. [ 77.034358][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 77.034379][ T29] audit: type=1400 audit(1756569890.838:1862): avc: denied { setopt } for pid=5069 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.062176][ T29] audit: type=1326 audit(1756569890.838:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x50000 [ 77.079878][ T5067] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 77.085516][ T29] audit: type=1326 audit(1756569890.838:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x50000 [ 77.118177][ T29] audit: type=1326 audit(1756569890.838:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x50000 [ 77.142134][ T29] audit: type=1326 audit(1756569890.838:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x50000 [ 77.166194][ T29] audit: type=1326 audit(1756569890.838:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x50000 [ 77.189447][ T29] audit: type=1326 audit(1756569890.838:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x50000 [ 77.213027][ T29] audit: type=1326 audit(1756569890.838:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x50000 [ 77.236429][ T29] audit: type=1326 audit(1756569890.838:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x50000 [ 77.260627][ T29] audit: type=1326 audit(1756569890.838:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49e64ebe9 code=0x50000 [ 77.392357][ T5084] loop4: detected capacity change from 0 to 512 [ 77.435473][ T5084] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.467978][ T5084] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.470: Failed to acquire dquot type 1 [ 77.480836][ T5084] EXT4-fs (loop4): 1 truncate cleaned up [ 77.512950][ T5084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.569162][ T5093] loop3: detected capacity change from 0 to 2048 [ 77.667558][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.732575][ T5094] lo speed is unknown, defaulting to 1000 [ 77.761490][ T5093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.914783][ T5101] lo speed is unknown, defaulting to 1000 [ 77.942714][ T5093] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 77.955227][ T5093] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.955227][ T5093] [ 77.965284][ T5093] EXT4-fs (loop3): Total free blocks count 0 [ 77.971326][ T5093] EXT4-fs (loop3): Free/Dirty block details [ 77.977294][ T5093] EXT4-fs (loop3): free_blocks=0 [ 77.982341][ T5093] EXT4-fs (loop3): dirty_blocks=0 [ 77.987491][ T5093] EXT4-fs (loop3): Block reservation details [ 77.993936][ T5093] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 78.021317][ T5106] loop2: detected capacity change from 0 to 512 [ 78.037625][ T5106] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.071982][ T5106] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.477: Failed to acquire dquot type 1 [ 78.086045][ T5101] netlink: 'syz.1.476': attribute type 4 has an invalid length. [ 78.093758][ T5101] netlink: 17 bytes leftover after parsing attributes in process `syz.1.476'. [ 78.123608][ T5106] EXT4-fs (loop2): 1 truncate cleaned up [ 78.131867][ T5106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.146019][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.160081][ T5108] lo speed is unknown, defaulting to 1000 [ 78.189466][ T5101] mmap: syz.1.476 (5101) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.202341][ T5115] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 78.209027][ T5115] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.216904][ T5115] vhci_hcd vhci_hcd.0: Device attached [ 78.228526][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.249886][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.262899][ T5116] vhci_hcd: connection closed [ 78.263202][ T3427] vhci_hcd: stop threads [ 78.272309][ T3427] vhci_hcd: release socket [ 78.274666][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.277293][ T3427] vhci_hcd: disconnect device [ 78.303297][ T5119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 78.318099][ T5119] vlan0: entered promiscuous mode [ 78.549508][ T5126] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.558019][ T5126] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 78.566627][ T5124] netlink: 'syz.2.481': attribute type 10 has an invalid length. [ 78.577390][ T5124] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 78.651689][ T5136] loop4: detected capacity change from 0 to 512 [ 78.661408][ T5136] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.693466][ T5138] loop2: detected capacity change from 0 to 2048 [ 78.696117][ T5136] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.485: Failed to acquire dquot type 1 [ 78.711952][ T5136] EXT4-fs (loop4): 1 truncate cleaned up [ 78.718073][ T5136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.742064][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.751537][ T3472] loop2: p1 < > p4 [ 78.756404][ T3472] loop2: p4 size 8388608 extends beyond EOD, truncated [ 78.776689][ T5138] loop2: p1 < > p4 [ 78.783431][ T5138] loop2: p4 size 8388608 extends beyond EOD, truncated [ 78.793401][ T5142] loop4: detected capacity change from 0 to 1024 [ 78.819523][ T5144] loop0: detected capacity change from 0 to 2048 [ 78.850904][ T5144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.892828][ T5142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.905371][ T5149] usb usb1: usbfs: process 5149 (syz.2.489) did not claim interface 4 before use [ 78.927803][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 78.940866][ T3957] udevd[3957]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 79.025631][ T5158] program syz.4.487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.097356][ T5151] ================================================================== [ 79.105503][ T5151] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 79.114834][ T5151] [ 79.117189][ T5151] write to 0xffff88811983f5c0 of 4 bytes by task 5142 on cpu 0: [ 79.124854][ T5151] writeback_single_inode+0x14a/0x3e0 [ 79.130343][ T5151] sync_inode_metadata+0x5b/0x90 [ 79.135413][ T5151] generic_buffers_fsync_noflush+0xd9/0x120 [ 79.141338][ T5151] ext4_sync_file+0x1ab/0x690 [ 79.146038][ T5151] vfs_fsync_range+0x10d/0x130 [ 79.150830][ T5151] ext4_buffered_write_iter+0x34f/0x3c0 [ 79.156406][ T5151] ext4_file_write_iter+0x383/0xf00 [ 79.161908][ T5151] iter_file_splice_write+0x663/0xa60 [ 79.167298][ T5151] direct_splice_actor+0x153/0x2a0 [ 79.172437][ T5151] splice_direct_to_actor+0x30f/0x680 [ 79.177820][ T5151] do_splice_direct+0xda/0x150 [ 79.182601][ T5151] do_sendfile+0x380/0x650 [ 79.187057][ T5151] __x64_sys_sendfile64+0x105/0x150 [ 79.192273][ T5151] x64_sys_call+0x2bb0/0x2ff0 [ 79.196975][ T5151] do_syscall_64+0xd2/0x200 [ 79.201504][ T5151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.207406][ T5151] [ 79.209737][ T5151] read to 0xffff88811983f5c0 of 4 bytes by task 5151 on cpu 1: [ 79.217292][ T5151] generic_buffers_fsync_noflush+0x80/0x120 [ 79.223199][ T5151] ext4_sync_file+0x1ab/0x690 [ 79.227900][ T5151] vfs_fsync_range+0x10d/0x130 [ 79.232679][ T5151] ext4_buffered_write_iter+0x34f/0x3c0 [ 79.238248][ T5151] ext4_file_write_iter+0x383/0xf00 [ 79.243474][ T5151] iter_file_splice_write+0x663/0xa60 [ 79.248857][ T5151] direct_splice_actor+0x153/0x2a0 [ 79.253986][ T5151] splice_direct_to_actor+0x30f/0x680 [ 79.259365][ T5151] do_splice_direct+0xda/0x150 [ 79.264136][ T5151] do_sendfile+0x380/0x650 [ 79.268658][ T5151] __x64_sys_sendfile64+0x105/0x150 [ 79.273969][ T5151] x64_sys_call+0x2bb0/0x2ff0 [ 79.278792][ T5151] do_syscall_64+0xd2/0x200 [ 79.283340][ T5151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.289245][ T5151] [ 79.291571][ T5151] value changed: 0x00000038 -> 0x00000002 [ 79.297293][ T5151] [ 79.299623][ T5151] Reported by Kernel Concurrency Sanitizer on: [ 79.305801][ T5151] CPU: 1 UID: 0 PID: 5151 Comm: syz.4.487 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.315440][ T5151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.325516][ T5151] ================================================================== [ 79.359196][ T5162] netlink: 44 bytes leftover after parsing attributes in process `syz.1.494'. [ 79.368228][ T5162] netlink: 43 bytes leftover after parsing attributes in process `syz.1.494'. [ 79.377153][ T5162] netlink: 'syz.1.494': attribute type 6 has an invalid length. [ 79.384860][ T5162] netlink: 'syz.1.494': attribute type 5 has an invalid length. [ 79.392533][ T5162] netlink: 43 bytes leftover after parsing attributes in process `syz.1.494'. [ 79.403607][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.447169][ T5164] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 79.453724][ T5164] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 79.461719][ T5164] vhci_hcd vhci_hcd.0: Device attached [ 79.462971][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.472436][ T5165] vhci_hcd: connection closed [ 79.476993][ T51] vhci_hcd: stop threads [ 79.486073][ T51] vhci_hcd: release socket [ 79.490489][ T51] vhci_hcd: disconnect device