last executing test programs: 6m39.266004318s ago: executing program 1 (id=164): iopl(0x3) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r0, &(0x7f0000000b00), 0x91) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x43, 0x0, "ea0905f7ed3afb477e97ed30d09757678e00000000000000057facb62bf4cb08fe0781eb0402821b7c58f01226b4e01641b2002000000000000000000000000000000000040000000000dabfa20400"}, 0xd8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x604480, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 6m39.11977227s ago: executing program 1 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000aa071efe016b0800000000eac8a520eb2b3ad32260bd3a000000008500008dc100"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x10, 0xfffffffd, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x100000, 0xb2e4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x934, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xffffffff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x3, 0x0, 0xffffffd1, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a3, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x2, 0x0, 0x0, 0x3, 0xffffc3fd}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x482000, 0x734c6fc4f278d9da, 0x1}, 0x18) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x10) ioperm(0x8, 0x2, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000300)={r9, 0x2, 0x10001, 0x5}, &(0x7f0000000340)=0x10) socket$inet6_sctp(0xa, 0x0, 0x84) r10 = accept4(r4, 0x0, 0x0, 0x0) r11 = gettid() tkill(r11, 0x7) prlimit64(r11, 0x6, 0x0, &(0x7f0000000000)) sendmmsg(r10, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20008010) 6m39.033710501s ago: executing program 1 (id=170): bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYBLOB="43cc2169a9d2a418393517a88e7bcfc929463040a46bba8a7666c140865e7a44fe78c39dbd751db0899abaebce9c434a25a7eb70fc9e07d55d5f21d62c1fdbc6fe05275f65d6a6b07aeeea7dbea6fe691dbba5676974ce0e139ac15373720277711f625c66f764"], 0x48) r0 = socket$kcm(0x21, 0xd, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) listen(r0, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_trace', 0x400, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) setuid(0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) shutdown(r3, 0x1) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mq_notify(r2, 0x0) write$char_usb(r2, &(0x7f0000000140)="ba560bc8aa56975aca7810fbcaee8dab340a8ee8cd40e29a4c72b411a0aaa64d2c9e5a38a6ae48c6790d94cf536a2d5a5a716bf2f2222f08142ba3f2575bb0377048740f5cc02f568c2730b1befd68f48525e3b2c4a534914636c3ebb9e9f2ef44f09b1ca97fc595eafcd73a6a44c67054d75f4d03925e68d04988ba6a817e9125668277d724f2b9b92fddba12433c46d63012fc6711bb96143662e423e062717bb8d0afd6d42b", 0xa7) 6m39.032380301s ago: executing program 1 (id=172): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)="67d62fd114ea37955f0f82321be9dcbb20f0aa01219877d804dbc4c151c849bcb7cd5e010772e3feb3049f6b28fa413513bef5484e9a5f4edca30e1516e97aa37af2e4265c0c6ab5757110150821f2a1ec103d6d", &(0x7f0000000680)="b4ffc8863edd37698cd802000787373da337233d7bb0870344cf5a0853880000da9c82f3e7796ef8f55f374aeb9b2096ec0f245312ac39213604c054f4372a3b9c7c0e7d2fa3d5eef58ca2cc1d", 0x0, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0xa, 0x3, 0x3a) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x4000800) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x0, 0x1}, 0xc) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000540), 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="20000000170a01020600000000000000"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000) write$cgroup_subtree(r5, 0x0, 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 6m38.182051833s ago: executing program 1 (id=189): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x2200c416, &(0x7f0000000740)={[{@usrjquota_path={'usrjquota', 0x3d, './file1/file0'}}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nojournal_checksum}, {@init_itable}, {@nouid32, 0x2e}, {@noload}, {@acl}, {@dax_never}, {@noquota}], [], 0x2c}, 0x0, 0x4d7, &(0x7f0000000fc0)="$eJzs3E1oHGUfAPD/TD763aR9+6r9UKNVDFaTJq3agwcVhV4EQQ8VvMQ0ltq0lSaCLcVGkXoUTx7VoyB48uJJQUQ9KV71LkKRXloFZWV2Z5Ld7Ie7m6Sx3d8Pdvd55mOf+c/Ms/PMPDsTQM8ayd6SiK0R8XNEDFWytROMVD6uX704/cfVi9NJlErP/56Up7t29eJ0MWkx35Y8M5pGpO8ksbdBuXPnL5yamp2dOZfnx+dPvzY+d/7CwydPT52YOTFzZvLIkcOHJh57dPKR5gs/1H6c2aTX9rx5dt/uoy++/+x0KV7+7tNsebfm46vjqBhu/8ubGImRKOWWhg6W3+9f8bf/t2yrSif967ggdKQvIrLNNVCu/0PRF0sbbyieeXsx8/U6LSCwZrJj0466oX35Z7p4/AJuRYk6Dj2qOOJn57/F60a2P9bblSez95ly/NfzV2VMf6TZuexw5Yy9r8n8t7VZTmlZfjD/3BoRxxb+/DB7RcPrEAAAq+vLrP3zUKP2X1rTttme96EMR8SBiNgZEf+LiF0R8f+8HXR7RNzRYfkjy/L17Z8fN3UVWJuy9t/jed9WbfsvzadIFnPbyvEPJK+cnJ05mK+T0RjYkOUnWpTx1dM/vdds3EhV+y97ZeUXbcF8OX7r31A7z/Gp+akVhFzjylsRe/obxZ8s9gRka2B3ROzp4vuzdXbywU/2ZentW+rHN4+/vP5bb/tV6GcqfRzxQGX7L8Sy+AtJpaRm/ZPjG2N25uB4sVfU+/6Hy89V5weq0jXxb2wvpo3dBttAtv03N9z/8/iLalD01851XsblX95tek5Tv/2TOLZQPUW+/1ftCdn+P5i8UE4X51FvTM3Pn5uIGMwH1AyfXJq3yBfTZ/GP7q+Lv9gKf3+UJ/ZGRLYT3xkRd1VtpXsi4t6I2N8i/m+fuu/V1muoVf1fW1n8x1tt/4jhpLq/votE36lvvmhWfnu/f4fLqdF8SDu/f3nhxeGo6QJ2u94AAADgZpKW+6CTdKxIV12c2hWb09mzc/MHRuL1M8crfdXDMZAWV7qGqq6HTuTXhov85LL8oYjYUf6n0aZyfmz67Oy29QwcKN+rU1P/I03Hxirjfm32pxfg1tFRP1r13YGffb76CwPcUJ31o5eW/5cVuIm5Xxt6l/oPvUv9h97VqP5firi+DosC3GCO/9C71H/oXeo/9C71H3pS/S3xxYMWurnTfymx8+iKZu8g8VdXTycoDa3J8ix0PlffSgvta/x0g6h+aEfTRNLq4QgtE5G2nmawjdKbJF76oLILrt1uk/7rNE+sYel54u48sSEi2p3rUgdrddOKntqxjj9KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAq+ifAAAA//8izddR") fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x40a00, 0x48) r2 = openat(0xffffffffffffff9c, 0x0, 0x2240, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) getegid() getresuid(0x0, &(0x7f0000000500), 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(r4, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)="e2bb1ed63a57576cc2dcd86b8604be154e8a76", 0x13}], 0x2, 0x0, 0xe8, 0x200400d1}, 0x80) r6 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r6, @ANYRESDEC, @ANYRESHEX=r6], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000014c0)={{{@in6=@dev, @in6=@empty}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000480), 0x1020, &(0x7f0000000840)=ANY=[]) getgid() r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000040000000000000003000000854dd9f356600b865fd8b74ca9c2f199d600f0320d71b35de319000020646c2500000000002020207b1ae8ff00000000bfa1000000000000070000b703000081000000bdabb7c9084aac41859df947e09500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x10000032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6m38.019484555s ago: executing program 1 (id=192): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x1) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x1) flock(r3, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) socket(0x1e, 0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100)}]) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000001c0)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_err_ignore}, {@jqfmt_vfsv1}]}, 0x0, 0x47e, &(0x7f0000001b40)="$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") r9 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x1, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2, r12}}) 6m38.004938546s ago: executing program 32 (id=192): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x1) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x1) flock(r3, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) socket(0x1e, 0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100)}]) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000001c0)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_err_ignore}, {@jqfmt_vfsv1}]}, 0x0, 0x47e, &(0x7f0000001b40)="$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") r9 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x1, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2, r12}}) 5m32.800738091s ago: executing program 3 (id=2267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) 5m32.768373781s ago: executing program 3 (id=2269): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) personality(0x2000000) 5m32.744407592s ago: executing program 3 (id=2271): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x200], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0xff49, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0xa4, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x90, 0x1, [@m_csum={0x8c, 0x1, 0x0, 0x0, {{0x9}, {0xfdab, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0xffffffffffffffff}, 0x2}}]}, {0x42, 0x6, "ef841ce8d8b504a00a58d2f75b08a0bbb0354d50162e497835cb33c10122c3b8fd839f6cb94a0335f2d32a0c542c7bdeb77759ccad63cd35405bcb5a0929"}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r6}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 5m32.682667582s ago: executing program 3 (id=2274): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1db) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8f101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 5m32.624688753s ago: executing program 3 (id=2276): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r1, 0xffffffffffffffff, 0x0) 5m32.508930255s ago: executing program 3 (id=2280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000f00000000200000a805000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018450000040000000000000000000000193518000800000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x11, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x2, 0x2, 0xb5e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ext4_drop_inode\x00', r0, 0x0, 0xfffffffffffffffc}, 0x38) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) 5m32.508546785s ago: executing program 33 (id=2280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000f00000000200000a805000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018450000040000000000000000000000193518000800000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x11, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x2, 0x2, 0xb5e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ext4_drop_inode\x00', r0, 0x0, 0xfffffffffffffffc}, 0x38) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) 3.819940156s ago: executing program 2 (id=6516): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) getpriority(0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='\x00', 0xfffffffffffffffb) 3.770773327s ago: executing program 2 (id=6517): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.720117488s ago: executing program 2 (id=6519): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r3, 0x301, 0x0, 0x3, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x40006) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c00)={0x0, 0x0}) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r9 = getpid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, {0x4}}, './bus\x00'}) syz_clone3(&(0x7f0000000cc0)={0x2000000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x3e}, &(0x7f00000003c0)=""/160, 0xa0, &(0x7f0000000940)=""/213, &(0x7f0000000b80)=[0x0, 0x0, r6, r7, r8, r9, 0xffffffffffffffff], 0x7, {r10}}, 0x58) r11 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r12 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r12, 0x2007ffb) sendfile(r11, r12, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00'}, 0x15) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 3.645602259s ago: executing program 0 (id=6524): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) syz_emit_ethernet(0xc2, &(0x7f0000000080)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x7220000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r5 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000018000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.5966163s ago: executing program 0 (id=6525): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) syz_emit_ethernet(0xc2, &(0x7f0000000080)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x7220000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r5 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000018000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.55836685s ago: executing program 0 (id=6527): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100000004000000000000000000000000000084a35bba5b14d076316a05703e02e6f18c6d3d57cdf170245e1d6a660cd4e9c30fbe0816a8048443f40000d8a36ae5cf6aa4845e583e3cb1ad707da045c5a706febc6e532c16a951acaa1bfc175d0dd5c67270a517c81f823e05eb93174d80"], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x7d, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x5, 0xa, 0x3, 0x6d1}, 0x10, 0x1680e, 0xffffffffffffffff, 0x1, &(0x7f0000001b80)=[0x1, 0x1], &(0x7f0000001bc0)=[{0x4, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{r0}, &(0x7f0000000780), &(0x7f0000001cc0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r3 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESHEX=r3], 0x1, 0x522, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) 3.453834782s ago: executing program 0 (id=6528): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c00)={0x0, 0x0}) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r8 = getpid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, {0x4}}, './bus\x00'}) syz_clone3(&(0x7f0000000cc0)={0x2000000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x3e}, &(0x7f00000003c0)=""/160, 0xa0, &(0x7f0000000940)=""/213, &(0x7f0000000b80)=[0x0, 0x0, r5, r6, r7, r8, 0xffffffffffffffff], 0x7, {r9}}, 0x58) r10 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r11 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r11, 0x2007ffb) sendfile(r10, r11, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00'}, 0x15) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2.86414074s ago: executing program 6 (id=6531): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x7d, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x5, 0xa, 0x3, 0x6d1}, 0x10, 0x1680e, 0xffffffffffffffff, 0x1, &(0x7f0000001b80)=[0x1, 0x1], &(0x7f0000001bc0)=[{0x4, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{r0}, &(0x7f0000000780), &(0x7f0000001cc0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r3 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESHEX=r3], 0x1, 0x522, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0x8, 0x6, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r4, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) 2.83298963s ago: executing program 2 (id=6533): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x7d, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x5, 0xa, 0x3, 0x6d1}, 0x10, 0x1680e, 0xffffffffffffffff, 0x1, &(0x7f0000001b80)=[0x1, 0x1], &(0x7f0000001bc0)=[{0x4, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{r0}, &(0x7f0000000780), &(0x7f0000001cc0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r3 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESHEX=r3], 0x1, 0x522, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0x8, 0x6, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r4, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) 2.463167326s ago: executing program 0 (id=6536): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100000004000000000000000000000000000084a35bba5b14d076316a05703e02e6f18c6d3d57cdf170245e1d6a660cd4e9c30fbe0816a8048443f40000d8a36ae5cf6aa4845e583e3cb1ad707da045c5a706febc"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x7d, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x5, 0xa, 0x3, 0x6d1}, 0x10, 0x1680e, 0xffffffffffffffff, 0x1, &(0x7f0000001b80)=[0x1, 0x1], &(0x7f0000001bc0)=[{0x4, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r1 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESDEC, @ANYRESHEX=r1], 0x1, 0x522, &(0x7f0000000a80)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0x8, 0x6, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r2, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) 2.431217856s ago: executing program 6 (id=6537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a, 0x4000010, r1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x2, 0x1, 0x20, @loopback, @mcast1, 0x8000, 0x7800, 0xffffffff, 0x2c0}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r7, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x40}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000cce7df250900020073797a310000000008004100736977001400330068737230000000000000000000000000e02e4a8a22085cf1eec297418a59cea59dcadada7ab34b5f5dd6290d7f4dff76df5f"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 2.273173078s ago: executing program 6 (id=6540): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r3, 0x301, 0x0, 0x3, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x40006) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c00)={0x0, 0x0}) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r9 = getpid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, {0x4}}, './bus\x00'}) syz_clone3(&(0x7f0000000cc0)={0x2000000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x3e}, &(0x7f00000003c0)=""/160, 0xa0, &(0x7f0000000940)=""/213, &(0x7f0000000b80)=[0x0, 0x0, r6, r7, r8, r9, 0xffffffffffffffff], 0x7, {r10}}, 0x58) r11 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r12 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r12, 0x2007ffb) sendfile(r11, r12, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00'}, 0x15) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.934677503s ago: executing program 5 (id=6541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a, 0x4000010, r1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x2, 0x1, 0x20, @loopback, @mcast1, 0x8000, 0x7800, 0xffffffff, 0x2c0}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001880)={'wg0\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r7, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x40}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) close(r2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000cce7df250900020073797a310000000008004100736977001400330068737230000000000000000000000000e02e4a8a22085cf1eec297418a59cea59dcadada7ab34b5f5dd6290d7f4dff76df5f"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 1.767309615s ago: executing program 5 (id=6542): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x208, 0xc8, 0x8, 0x208, 0x5803, 0x368, 0x2e8, 0x2e8, 0x368, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x168, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x10, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b500", 0x1, 0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x7, 0x4, 0x1, 0x0, "9c2d68c9fe7a3fe21a38fc41cae3540d864acbf238f3f08750d4b25cbb84846840562379ddc9f61533c3629cdd2b1708b4a1e1fb51c2bfbe4367d4af7009f411"}}}, {{@ipv6={@loopback, @private2, [0xff, 0xff000000, 0xffffff00, 0xff000000], [0xff, 0xff, 0xffffffff, 0xff], 'bond_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x3b, 0xff}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000002040)={0x400000, 0x0, 0x11}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x8, &(0x7f0000002140)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704e17372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf583a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169c968a4cdc95ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d81c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241e292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f5e63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f7d1e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c79c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa26bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d4ae3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd367e8f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45f12cb45487f353bf9c72512b3fcd55e397ea20f802f3dd4a402545ae474e5a7a523e867ea50cf9077499d4f328b3771af38a48d2cb31d737f2b63680c4e6ffd86af0e6daad357c4b073a4d1c6ee1b2978b71c2d124041cf7807a2b3f6c93be6a205734094a3fb2b536b14852a8325998058bd0fae80f14056cd2d692466d3b291c2abc7e9c4efd6b040dbc1960b7cbc6dd546e492a6364b20c50a4aa591c22d75fad000000000000000000000000003ae7895b108e897b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.749964405s ago: executing program 2 (id=6543): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r3, 0x301, 0x0, 0x3, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x40006) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c00)={0x0, 0x0}) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r9 = getpid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, {0x4}}, './bus\x00'}) syz_clone3(&(0x7f0000000cc0)={0x2000000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x3e}, &(0x7f00000003c0)=""/160, 0xa0, &(0x7f0000000940)=""/213, &(0x7f0000000b80)=[0x0, 0x0, r6, r7, r8, r9, 0xffffffffffffffff], 0x7, {r10}}, 0x58) r11 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r12 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r12, 0x2007ffb) sendfile(r11, r12, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00'}, 0x15) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.45133317s ago: executing program 5 (id=6544): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100000004000000000000000000000000000084a35bba5b14d076316a05703e02e6f18c6d3d57cdf170245e1d6a660cd4e9c30fbe0816a8048443f40000d8a36ae5cf6aa4845e583e3cb1ad707da045c5a706febc"], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x7d, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x5, 0xa, 0x3, 0x6d1}, 0x10, 0x1680e, 0xffffffffffffffff, 0x1, &(0x7f0000001b80)=[0x1, 0x1], &(0x7f0000001bc0)=[{0x4, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{r0}, &(0x7f0000000780), &(0x7f0000001cc0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r3 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESHEX=r3], 0x1, 0x522, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0x8, 0x6, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r4, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) 1.341431061s ago: executing program 0 (id=6545): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x7d, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x5, 0xa, 0x3, 0x6d1}, 0x10, 0x1680e, 0xffffffffffffffff, 0x1, &(0x7f0000001b80)=[0x1, 0x1], &(0x7f0000001bc0)=[{0x4, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{r0}, &(0x7f0000000780), &(0x7f0000001cc0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r3 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESHEX=r3], 0x1, 0x522, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0x8, 0x6, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r4, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) 1.229758813s ago: executing program 6 (id=6547): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) ioprio_set$uid(0x0, r2, 0x4004) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e000000ef060000050000000400000000000000", @ANYRES32=r0, @ANYBLOB="3201000000ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000040000000500"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2240, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(r10, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r9, @ANYRESDEC, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r7, @ANYRES8, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYBLOB="000000002c0000000000000001000000010000", @ANYRES32=r11, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xe8, 0x200400d1}, 0x80) r12 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r12, @ANYRESDEC, @ANYRESHEX=r12], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev, @in6=@empty}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) r13 = geteuid() mount$9p_rdma(&(0x7f0000000580), &(0x7f0000000700)='./file1\x00', &(0x7f0000000740), 0x400, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000004,loose,timeout=0x0000000000000002,rq=0x0000000000000002,hash,euid=', @ANYRESDEC=r1, @ANYBLOB="2c6f626a5f757368deeafeef1a4365723d26053a2f5e23", @ANYRESDEC=r2, @ANYBLOB=',euid=', @ANYRESDEC=r12, @ANYBLOB=',euid<', @ANYRESDEC=r13, @ANYBLOB=',hash,\x00']) 881.739338ms ago: executing program 5 (id=6549): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x7d, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x5, 0xa, 0x3, 0x6d1}, 0x10, 0x1680e, 0xffffffffffffffff, 0x1, &(0x7f0000001b80)=[0x1, 0x1], &(0x7f0000001bc0)=[{0x4, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{r0}, &(0x7f0000000780), &(0x7f0000001cc0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r3 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESHEX=r3], 0x1, 0x522, &(0x7f0000000a80)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0x8, 0x6, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r4, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) 678.22915ms ago: executing program 6 (id=6551): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) getpriority(0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "6455d828effa4c0c3424baf0d6794fd0"}, 0x1b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='\x00', 0xfffffffffffffffb) 676.52515ms ago: executing program 4 (id=6552): keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000a80)={0x0, 0x1000, 0xe8}, &(0x7f0000000c40)=ANY=[@ANYBLOB="656e633d72617720686173683d746767656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000000e0a83658ce9ba42aaf5271cad1ba313a748979783ffcf22e9578dd58b6319387f574d9137192d4065cbd2854dd2bb26fb3bca121d10612c8d7f5a6fa4ae9c0369df88bfcd792a86f3acb57f40eaa15ca8a1ab0ef53abf372efcf31a458c2f5cdb851cd3ff0cdcbb0b987895ba56bb7b6b46ecdd9d84f8f7d687932827b3fba93f685c1a1d44a7ebf641a3073ef5de18f5627f2402f8c3d0f5a66b0365af67bcd2bc30204"], &(0x7f0000002400)="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", &(0x7f0000000b40)=""/232) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x8, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x7a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) r8 = syz_open_pts(r4, 0x0) ioctl$TCSBRK(r8, 0x5409, 0x80000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), 0x0, 0x43, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000680), &(0x7f0000000700), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 627.572161ms ago: executing program 6 (id=6553): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r3, 0x301, 0x0, 0x3, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x40006) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c00)={0x0, 0x0}) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r9 = getpid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, {0x4}}, './bus\x00'}) syz_clone3(&(0x7f0000000cc0)={0x2000000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x3e}, &(0x7f00000003c0)=""/160, 0xa0, &(0x7f0000000940)=""/213, &(0x7f0000000b80)=[0x0, 0x0, r6, r7, r8, r9, 0xffffffffffffffff], 0x7, {r10}}, 0x58) r11 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r12 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r12, 0x2007ffb) sendfile(r11, r12, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00'}, 0x15) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 618.335731ms ago: executing program 2 (id=6554): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x7d, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x5, 0xa, 0x3, 0x6d1}, 0x10, 0x1680e, 0xffffffffffffffff, 0x1, &(0x7f0000001b80)=[0x1, 0x1], &(0x7f0000001bc0)=[{0x4, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{r0}, &(0x7f0000000780), &(0x7f0000001cc0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r3 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESHEX=r3], 0x1, 0x522, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0x8, 0x6, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r4, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) 527.660782ms ago: executing program 5 (id=6555): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x208, 0xc8, 0x8, 0x208, 0x5803, 0x368, 0x2e8, 0x2e8, 0x368, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x168, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x10, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b500", 0x1, 0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x7, 0x4, 0x1, 0x0, "9c2d68c9fe7a3fe21a38fc41cae3540d864acbf238f3f08750d4b25cbb84846840562379ddc9f61533c3629cdd2b1708b4a1e1fb51c2bfbe4367d4af7009f411"}}}, {{@ipv6={@loopback, @private2, [0xff, 0xff000000, 0xffffff00, 0xff000000], [0xff, 0xff, 0xffffffff, 0xff], 'bond_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x3b, 0xff}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000002040)={0x400000, 0x0, 0x11}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x8, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 510.032783ms ago: executing program 4 (id=6556): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 347.820085ms ago: executing program 4 (id=6557): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) syz_emit_ethernet(0xc2, &(0x7f0000000080)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x7220000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r5 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000018000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 286.697386ms ago: executing program 4 (id=6558): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) lchown(&(0x7f0000000200)='./file0\x00', r2, 0x0) r3 = dup2(r0, r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lseek(0xffffffffffffffff, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x21}, 0x2150165a, 0x40, 0x6, 0x0, 0xfffffffffffffffe, 0x4080078}) socketpair(0x3, 0x1, 0x300, &(0x7f0000000540)) 203.497947ms ago: executing program 4 (id=6559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 78.001479ms ago: executing program 4 (id=6560): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r3, 0x301, 0x0, 0x3, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x40006) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c00)={0x0, 0x0}) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r9 = getpid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, {0x4}}, './bus\x00'}) syz_clone3(&(0x7f0000000cc0)={0x2000000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x3e}, &(0x7f00000003c0)=""/160, 0xa0, &(0x7f0000000940)=""/213, &(0x7f0000000b80)=[0x0, 0x0, r6, r7, r8, r9, 0xffffffffffffffff], 0x7, {r10}}, 0x58) r11 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r12 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r12, 0x2007ffb) sendfile(r11, r12, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00'}, 0x15) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 0s ago: executing program 5 (id=6561): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100000004000000000000000000000000000084a35bba5b14d076316a05703e02e6f18c6d3d57cdf170245e1d6a660cd4e9c30fbe0816a8048443f40000d8a36ae5cf6aa4845e583e3cb1ad707da045c5a706febc"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x7d, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x5, 0xa, 0x3, 0x6d1}, 0x10, 0x1680e, 0xffffffffffffffff, 0x1, &(0x7f0000001b80)=[0x1, 0x1], &(0x7f0000001bc0)=[{0x4, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00') io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r1 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESDEC, @ANYRESHEX=r1], 0x1, 0x522, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x0, 0x8, 0x6, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r2, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) kernel console output (not intermixed with test programs): 1 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 323.543277][T18809] loop5: detected capacity change from 0 to 512 [ 323.565534][ T29] audit: type=1326 audit(1747123006.115:19143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 323.596453][ T29] audit: type=1326 audit(1747123006.115:19144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 323.615868][T18809] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 323.621749][ T29] audit: type=1326 audit(1747123006.115:19145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 323.654573][ T29] audit: type=1326 audit(1747123006.115:19146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18801 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 323.656745][T18809] EXT4-fs (loop5): 1 truncate cleaned up [ 323.702739][T18809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.811733][T18809] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 323.837786][T18809] SELinux: failed to load policy [ 323.874507][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.894741][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.912041][T18816] loop5: detected capacity change from 0 to 512 [ 323.919990][T18816] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 323.939936][T18816] EXT4-fs (loop5): 1 truncate cleaned up [ 323.946287][T18816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.991613][T18816] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 324.004988][T18816] SELinux: failed to load policy [ 324.128118][T18826] loop6: detected capacity change from 0 to 8192 [ 324.170408][T18826] loop6: p1 p3 p4 [ 324.174388][T18826] loop6: p1 size 8390912 extends beyond EOD, truncated [ 324.182839][T18826] loop6: p3 size 589824 extends beyond EOD, truncated [ 324.348985][T18831] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 324.377489][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.764966][T18831] SELinux: failed to load policy [ 324.827881][T18832] lo speed is unknown, defaulting to 1000 [ 324.946973][T18835] loop5: detected capacity change from 0 to 512 [ 324.961420][T18835] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 324.979284][T18835] EXT4-fs (loop5): 1 truncate cleaned up [ 324.991949][T18835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.096772][T18835] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 325.155461][T18835] SELinux: failed to load policy [ 325.162270][T18855] loop6: detected capacity change from 0 to 512 [ 325.180029][T18855] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 325.192447][T18853] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 325.202732][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.210390][T18853] SELinux: failed to load policy [ 325.222410][T18855] EXT4-fs (loop6): 1 truncate cleaned up [ 325.242899][T18855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.257853][T18861] loop5: detected capacity change from 0 to 512 [ 325.266564][T18861] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 325.288525][T18861] EXT4-fs (loop5): 1 truncate cleaned up [ 325.553633][T18873] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 325.594363][T18873] SELinux: failed to load policy [ 325.867241][T18861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.918736][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.952388][T18861] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 325.991914][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.498867][T18891] loop5: detected capacity change from 0 to 2048 [ 326.523067][T18891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.683030][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.697025][T18900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5552'. [ 326.707321][T18900] siw: device registration error -23 [ 326.818364][T18912] loop5: detected capacity change from 0 to 512 [ 326.849228][T18912] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 326.852580][T18917] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 326.874004][T18919] loop6: detected capacity change from 0 to 2048 [ 326.887542][T18912] EXT4-fs (loop5): 1 truncate cleaned up [ 326.894006][T18912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.932869][T18919] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.946544][T18925] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 326.974824][T18912] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 327.008676][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.126884][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.127258][T18932] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5564'. [ 327.156120][T18932] loop5: detected capacity change from 0 to 2048 [ 327.206267][T18936] loop5: detected capacity change from 0 to 512 [ 327.221964][T18936] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 327.247790][T18936] EXT4-fs (loop5): 1 truncate cleaned up [ 327.254570][T18936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.289068][T18943] loop6: detected capacity change from 0 to 512 [ 327.309704][T18941] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 327.357344][T18943] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 327.374468][T18936] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 327.675295][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.965893][T18943] EXT4-fs (loop6): 1 truncate cleaned up [ 327.972695][T18943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.081591][T18943] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 328.118744][T18943] sel_write_load: 6 callbacks suppressed [ 328.118757][T18943] SELinux: failed to load policy [ 328.201396][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.576624][T18980] loop6: detected capacity change from 0 to 2048 [ 328.633676][T18980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.972524][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.105804][T18984] lo speed is unknown, defaulting to 1000 [ 329.360019][T19001] loop6: detected capacity change from 0 to 512 [ 329.391082][T19001] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 329.453780][T19001] EXT4-fs (loop6): 1 truncate cleaned up [ 329.459825][T19001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.556134][T19001] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 329.570202][T19001] SELinux: failed to load policy [ 329.623206][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.965482][T19022] loop5: detected capacity change from 0 to 512 [ 329.972776][T19022] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 330.007420][T19022] EXT4-fs (loop5): 1 truncate cleaned up [ 330.052180][T19022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.139396][T19026] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 330.164726][T19026] SELinux: failed to load policy [ 330.222242][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.343297][T19023] lo speed is unknown, defaulting to 1000 [ 330.437648][T19032] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 331.741971][T19058] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 331.881118][T19048] lo speed is unknown, defaulting to 1000 [ 332.161660][T19064] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 332.186132][T19049] lo speed is unknown, defaulting to 1000 [ 332.618913][T19069] loop6: detected capacity change from 0 to 512 [ 332.716419][T19069] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 332.754247][T19069] EXT4-fs (loop6): 1 truncate cleaned up [ 332.769950][T19069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.869543][T19073] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 332.914645][T19073] SELinux: failed to load policy [ 332.919672][T19069] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 332.950856][T19069] SELinux: failed to load policy [ 333.010938][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.346045][T19087] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 333.360217][T19087] SELinux: failed to load policy [ 333.419833][T19091] loop5: detected capacity change from 0 to 2048 [ 333.427498][T19090] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 333.615865][T19098] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 333.765904][T19091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.797559][T19102] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 333.839134][T19102] SELinux: failed to load policy [ 334.008404][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.018357][T19109] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 334.037585][T19109] SELinux: failed to load policy [ 334.073304][T19117] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 334.113801][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 334.113817][ T29] audit: type=1400 audit(1747123016.835:19197): avc: denied { create } for pid=19116 comm="syz.5.5629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 334.151533][T19123] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 334.242765][T19131] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 334.305067][T19133] loop5: detected capacity change from 0 to 2048 [ 334.359345][T19133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.836006][T19145] lo speed is unknown, defaulting to 1000 [ 334.957986][T19142] lo speed is unknown, defaulting to 1000 [ 335.123468][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.295954][T19151] loop6: detected capacity change from 0 to 512 [ 335.380578][T19151] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 335.470791][T19155] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 335.474370][T19151] EXT4-fs (loop6): 1 truncate cleaned up [ 335.551006][T19151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.662533][T19151] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 335.728318][T19151] SELinux: failed to load policy [ 335.786021][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.245811][T19165] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 336.256523][T19165] SELinux: failed to load policy [ 336.323232][T19173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5650'. [ 336.332406][T19173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5650'. [ 336.423875][T19176] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 336.622899][T19182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5654'. [ 336.631990][T19182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5654'. [ 336.670379][T19185] loop5: detected capacity change from 0 to 512 [ 336.677201][T19185] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 336.698727][T19187] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 336.727750][T19185] EXT4-fs (loop5): 1 truncate cleaned up [ 336.751354][T19185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.775382][T19193] loop6: detected capacity change from 0 to 512 [ 336.792971][T19193] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 336.806749][T19190] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 336.827572][T19190] SELinux: failed to load policy [ 336.834111][T19185] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 336.851019][T19185] SELinux: failed to load policy [ 336.894593][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.922280][T19193] EXT4-fs (loop6): 1 truncate cleaned up [ 336.933775][T19193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.004007][T19200] loop5: detected capacity change from 0 to 512 [ 337.048835][T19193] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 337.059038][T19193] SELinux: failed to load policy [ 337.072400][T19198] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 337.092920][T19200] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 337.116105][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.117323][T19198] SELinux: failed to load policy [ 337.161622][T19200] EXT4-fs (loop5): 1 truncate cleaned up [ 337.167722][T19200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.207398][T19203] loop6: detected capacity change from 0 to 2048 [ 337.224635][T19200] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 337.233755][T19200] SELinux: failed to load policy [ 337.273004][T19203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.291214][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.343420][T19209] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5664'. [ 337.352490][T19209] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5664'. [ 337.578092][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.615176][T19222] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 337.624874][T19220] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 337.720883][T19229] loop6: detected capacity change from 0 to 512 [ 337.754744][T19229] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 337.812459][T19227] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 338.054917][T19236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5673'. [ 338.064036][T19236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5673'. [ 338.092318][T19229] EXT4-fs (loop6): 1 truncate cleaned up [ 338.098481][T19229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.178107][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.214470][T19242] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 338.283986][T19244] loop6: detected capacity change from 0 to 512 [ 338.311491][T19244] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 338.333047][T19244] EXT4-fs (loop6): 1 truncate cleaned up [ 338.341693][T19244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.375446][T19244] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 338.531278][T19244] sel_write_load: 1 callbacks suppressed [ 338.531292][T19244] SELinux: failed to load policy [ 338.619792][T19253] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 338.641080][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.686276][T19258] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5681'. [ 338.696857][T19258] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5681'. [ 339.181218][T19279] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 339.201950][T19280] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 339.293099][T19284] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 339.556605][T19297] loop6: detected capacity change from 0 to 2048 [ 339.616933][T19297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.844190][T19310] loop5: detected capacity change from 0 to 512 [ 339.861598][T19310] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 339.901861][T19310] EXT4-fs (loop5): 1 truncate cleaned up [ 339.972067][T19321] loop5: detected capacity change from 0 to 512 [ 339.993486][T19321] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 340.011561][T19321] EXT4-fs (loop5): 1 truncate cleaned up [ 340.123832][T19321] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 340.138821][T19321] SELinux: failed to load policy [ 340.841857][T19354] loop6: detected capacity change from 0 to 512 [ 340.881989][T19354] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 340.971950][T19354] EXT4-fs (loop6): 1 truncate cleaned up [ 341.027324][T19354] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 341.037422][T19354] SELinux: failed to load policy [ 341.100080][T19359] loop6: detected capacity change from 0 to 512 [ 341.155414][T19359] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 341.364795][T19365] xt_check_target: 1 callbacks suppressed [ 341.364811][T19365] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 341.388991][T19359] EXT4-fs (loop6): 1 truncate cleaned up [ 341.428406][T19358] lo speed is unknown, defaulting to 1000 [ 341.678686][T19375] __nla_validate_parse: 4 callbacks suppressed [ 341.678758][T19375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5721'. [ 341.695046][T19375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5721'. [ 342.186276][T19384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5725'. [ 342.195945][T19384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5725'. [ 342.205462][T19385] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 342.285413][T19388] loop6: detected capacity change from 0 to 512 [ 342.292017][T19390] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 342.322534][T19388] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 342.361492][T19388] EXT4-fs (loop6): 1 truncate cleaned up [ 342.367340][T19396] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 342.407103][T19393] SELinux: failed to load policy [ 342.439115][T19388] SELinux: policydb version -2107352572 does not match my version range 15-34 [ 342.457361][T19404] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 342.482872][T19388] SELinux: failed to load policy [ 342.492357][T19406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5733'. [ 342.502733][T19406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5733'. [ 342.523039][T19410] loop5: detected capacity change from 0 to 512 [ 342.533611][T19412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5736'. [ 342.542707][T19412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5736'. [ 342.558103][T19410] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 342.589463][T19414] SELinux: failed to load policy [ 342.592721][T19410] EXT4-fs (loop5): 1 truncate cleaned up [ 342.627193][T19410] SELinux: failed to load policy [ 342.664940][T19426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5742'. [ 342.674724][T19426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5742'. [ 342.735827][T19431] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 342.813408][T19439] loop5: detected capacity change from 0 to 2048 [ 342.852752][T19441] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 342.869645][T19436] SELinux: failed to load policy [ 342.896561][T19444] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 343.338178][T19470] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 343.461828][T19474] loop5: detected capacity change from 0 to 512 [ 343.468783][T19474] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 343.504577][T19474] EXT4-fs (loop5): 1 truncate cleaned up [ 344.065862][T19499] loop5: detected capacity change from 0 to 8192 [ 344.141791][T19499] loop5: p1 p3 p4 [ 344.145785][T19499] loop5: p1 size 8390912 extends beyond EOD, truncated [ 344.154528][T19499] loop5: p3 size 589824 extends beyond EOD, truncated [ 344.223964][T19504] siw: device registration error -23 [ 344.454034][T19511] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 344.586719][ T29] audit: type=1326 audit(1747123027.305:19198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19517 comm="syz.0.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 344.628088][ T29] audit: type=1326 audit(1747123027.305:19199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19517 comm="syz.0.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 344.725168][ T29] audit: type=1326 audit(1747123027.375:19200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19517 comm="syz.0.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 344.751216][ T29] audit: type=1326 audit(1747123027.375:19201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19517 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 344.774992][ T29] audit: type=1326 audit(1747123027.375:19202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19517 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 344.800303][ T29] audit: type=1326 audit(1747123027.375:19203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19517 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 344.824697][ T29] audit: type=1326 audit(1747123027.375:19204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19517 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 344.849037][ T29] audit: type=1326 audit(1747123027.375:19205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19517 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 344.874218][ T29] audit: type=1326 audit(1747123027.375:19206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19517 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 344.898227][ T29] audit: type=1326 audit(1747123027.375:19207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19517 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 345.001774][T19520] lo speed is unknown, defaulting to 1000 [ 345.105177][T19534] netlink: 'syz.4.5780': attribute type 13 has an invalid length. [ 345.204476][T19533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=19533 comm=syz.4.5780 [ 345.276442][T19538] siw: device registration error -23 [ 345.317662][T19540] netlink: 'syz.5.5783': attribute type 13 has an invalid length. [ 345.385016][T19547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=19547 comm=syz.5.5783 [ 345.493402][T19540] tipc: Resetting bearer [ 345.505692][T19540] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.514648][T19540] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.524965][T19540] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.534010][T19540] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.712841][T19552] lo speed is unknown, defaulting to 1000 [ 345.915411][T19554] SELinux: failed to load policy [ 346.005038][T16145] syz1: Port: 1 Link DOWN [ 346.289514][T19582] sd 0:0:1:0: device reset [ 346.348966][T19585] netlink: 'syz.0.5799': attribute type 13 has an invalid length. [ 346.505991][T19583] lo speed is unknown, defaulting to 1000 [ 346.747633][T19594] __nla_validate_parse: 25 callbacks suppressed [ 346.747646][T19594] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5803'. [ 346.764115][T19594] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5803'. [ 347.029278][T19596] lo speed is unknown, defaulting to 1000 [ 347.293645][T19607] sd 0:0:1:0: device reset [ 347.298978][T19610] netlink: 'syz.4.5810': attribute type 13 has an invalid length. [ 347.327653][T19615] loop6: detected capacity change from 0 to 512 [ 347.335530][T19615] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 347.377515][T19622] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 347.395440][T19620] SELinux: failed to load policy [ 347.448938][T19615] EXT4-fs (loop6): 1 truncate cleaned up [ 347.556399][T19632] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 347.584309][T19630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5818'. [ 347.593453][T19630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5818'. [ 347.758259][T19634] lo speed is unknown, defaulting to 1000 [ 347.938491][T19636] lo speed is unknown, defaulting to 1000 [ 348.944423][T19651] sd 0:0:1:0: device reset [ 349.149766][T19659] lo speed is unknown, defaulting to 1000 [ 349.401165][T19667] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 349.412106][T19665] netlink: 'syz.2.5827': attribute type 13 has an invalid length. [ 349.455503][ T9] lo speed is unknown, defaulting to 1000 [ 349.461309][ T9] syz0: Port: 1 Link DOWN [ 349.470395][T19665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=19665 comm=syz.2.5827 [ 349.494488][ T9] lo speed is unknown, defaulting to 1000 [ 349.504935][T19671] netlink: 'syz.4.5830': attribute type 13 has an invalid length. [ 349.528777][T19671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=19671 comm=syz.4.5830 [ 349.577886][T19674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5831'. [ 349.587494][T19674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5831'. [ 349.661667][T19678] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5833'. [ 349.671348][T19678] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5833'. [ 349.796202][T19679] lo speed is unknown, defaulting to 1000 [ 350.037774][T19684] netlink: 'syz.6.5834': attribute type 13 has an invalid length. [ 350.049633][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 350.049645][ T29] audit: type=1326 audit(1747123032.775:19335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19683 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 350.082507][ T29] audit: type=1326 audit(1747123032.785:19336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19683 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 350.106171][ T29] audit: type=1326 audit(1747123032.785:19337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19683 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 350.129781][ T29] audit: type=1326 audit(1747123032.785:19338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19683 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 350.154795][ T29] audit: type=1326 audit(1747123032.785:19339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19683 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 350.178434][ T29] audit: type=1326 audit(1747123032.785:19340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19683 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 350.203089][ T29] audit: type=1326 audit(1747123032.785:19341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19683 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 350.226748][ T29] audit: type=1326 audit(1747123032.785:19342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19683 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 350.251416][ T29] audit: type=1326 audit(1747123032.785:19343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19683 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 350.274898][ T29] audit: type=1326 audit(1747123032.785:19344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19683 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 350.328490][T19688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5836'. [ 350.337631][T19688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5836'. [ 350.413216][T19697] netlink: 'syz.4.5839': attribute type 13 has an invalid length. [ 350.442257][T19703] sd 0:0:1:0: device reset [ 350.612133][T19727] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 350.656203][T19734] netlink: 'syz.0.5853': attribute type 13 has an invalid length. [ 351.132794][T19751] lo speed is unknown, defaulting to 1000 [ 351.853951][T19765] sd 0:0:1:0: device reset [ 351.919910][T19773] netlink: 'syz.6.5866': attribute type 13 has an invalid length. [ 351.962793][T19776] __nla_validate_parse: 12 callbacks suppressed [ 351.962808][T19776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5867'. [ 351.978301][T19776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5867'. [ 352.231618][T19782] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 352.429023][T19787] lo speed is unknown, defaulting to 1000 [ 352.869265][T19791] sd 0:0:1:0: device reset [ 353.040521][T19797] netlink: 'syz.2.5872': attribute type 13 has an invalid length. [ 353.070256][T19799] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5873'. [ 353.079274][T19799] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5873'. [ 353.137419][T19797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=19797 comm=syz.2.5872 [ 353.276123][T19802] lo speed is unknown, defaulting to 1000 [ 354.023932][T19821] lo speed is unknown, defaulting to 1000 [ 354.147061][T19824] loop5: detected capacity change from 0 to 8192 [ 354.195790][T19827] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5880'. [ 354.206051][T19827] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5880'. [ 354.227094][T19829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5881'. [ 354.233028][T19824] loop5: p1 p3 p4 [ 354.236178][T19829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5881'. [ 354.239899][T19824] loop5: p1 size 8390912 extends beyond EOD, truncated [ 354.427833][T19824] loop5: p3 size 589824 extends beyond EOD, truncated [ 354.967585][T19854] lo speed is unknown, defaulting to 1000 [ 355.417908][T19859] sd 0:0:1:0: device reset [ 355.438664][T19865] loop6: detected capacity change from 0 to 512 [ 355.475409][T19865] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 355.507825][T19865] EXT4-fs (loop6): 1 truncate cleaned up [ 355.527442][T19865] EXT4-fs mount: 19 callbacks suppressed [ 355.527460][T19865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.591099][T19874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5892'. [ 355.600159][T19874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5892'. [ 355.662664][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.907718][T19889] lo speed is unknown, defaulting to 1000 [ 356.918853][T19898] netlink: 'syz.5.5900': attribute type 13 has an invalid length. [ 357.111377][T19903] __nla_validate_parse: 2 callbacks suppressed [ 357.111475][T19903] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5902'. [ 357.127391][T19903] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5902'. [ 357.302510][T19892] lo speed is unknown, defaulting to 1000 [ 357.713247][T19911] lo speed is unknown, defaulting to 1000 [ 357.870021][T19914] lo speed is unknown, defaulting to 1000 [ 358.858910][T19927] sd 0:0:1:0: device reset [ 358.877480][T19929] netlink: 'syz.6.5910': attribute type 13 has an invalid length. [ 359.048702][T19931] lo speed is unknown, defaulting to 1000 [ 359.291609][T19929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=19929 comm=syz.6.5910 [ 359.306557][T19937] netlink: 'syz.5.5912': attribute type 13 has an invalid length. [ 359.646794][T19952] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5915'. [ 359.655841][T19952] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5915'. [ 359.962928][T19946] lo speed is unknown, defaulting to 1000 [ 360.047596][T19966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5918'. [ 360.057250][T19966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5918'. [ 361.167627][T19984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5923'. [ 361.176799][T19984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5923'. [ 361.234195][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 361.234207][ T29] audit: type=1326 audit(1747123043.955:19445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19986 comm="syz.0.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 361.333871][ T29] audit: type=1326 audit(1747123043.985:19446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19986 comm="syz.0.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 361.358255][ T29] audit: type=1326 audit(1747123043.995:19447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19986 comm="syz.0.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 361.381598][T19936] lo speed is unknown, defaulting to 1000 [ 361.382569][ T29] audit: type=1326 audit(1747123043.995:19448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19986 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 361.411270][ T29] audit: type=1326 audit(1747123043.995:19449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19986 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 361.434431][ T29] audit: type=1326 audit(1747123043.995:19450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19986 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 361.458285][ T29] audit: type=1326 audit(1747123043.995:19451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19986 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 361.482046][ T29] audit: type=1326 audit(1747123043.995:19452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19986 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 361.505285][ T29] audit: type=1326 audit(1747123043.995:19453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19986 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 361.529082][ T29] audit: type=1326 audit(1747123043.995:19454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19986 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37834e969 code=0x7ffc0000 [ 361.643411][T19975] lo speed is unknown, defaulting to 1000 [ 361.654267][T19994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5926'. [ 361.663370][T19994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5926'. [ 361.717775][T19982] lo speed is unknown, defaulting to 1000 [ 361.993660][T20009] sd 0:0:1:0: device reset [ 362.114073][T20011] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 363.012773][T20021] netlink: 'syz.2.5935': attribute type 13 has an invalid length. [ 363.067615][T20012] lo speed is unknown, defaulting to 1000 [ 363.150228][T20017] lo speed is unknown, defaulting to 1000 [ 363.338975][T20031] netlink: 'syz.5.5938': attribute type 13 has an invalid length. [ 364.211602][T20031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20031 comm=syz.5.5938 [ 365.279522][T20037] lo speed is unknown, defaulting to 1000 [ 365.377917][T20042] lo speed is unknown, defaulting to 1000 [ 365.412555][T20041] lo speed is unknown, defaulting to 1000 [ 365.566659][T20050] netlink: 'syz.4.5943': attribute type 13 has an invalid length. [ 365.577507][T20050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20050 comm=syz.4.5943 [ 365.919936][T20063] lo speed is unknown, defaulting to 1000 [ 366.150036][T20065] lo speed is unknown, defaulting to 1000 [ 366.882552][T20068] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 366.937434][T20075] __nla_validate_parse: 2 callbacks suppressed [ 366.937447][T20075] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5953'. [ 366.953249][T20075] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5953'. [ 366.962222][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 366.962232][ T29] audit: type=1326 audit(1747123049.645:19498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20072 comm="syz.6.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 366.992580][ T29] audit: type=1326 audit(1747123049.645:19499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20072 comm="syz.6.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 367.016374][ T29] audit: type=1326 audit(1747123049.645:19500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20072 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 367.040383][ T29] audit: type=1326 audit(1747123049.645:19501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20072 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 367.064243][ T29] audit: type=1326 audit(1747123049.645:19502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20072 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 367.087428][ T29] audit: type=1326 audit(1747123049.645:19503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20072 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 367.111205][ T29] audit: type=1326 audit(1747123049.645:19504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20072 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 367.134378][ T29] audit: type=1326 audit(1747123049.645:19505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20072 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 367.158162][ T29] audit: type=1326 audit(1747123049.645:19506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20072 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 367.181862][ T29] audit: type=1326 audit(1747123049.645:19507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20072 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 367.415436][T20096] netlink: 'syz.5.5960': attribute type 13 has an invalid length. [ 367.437981][T20096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20096 comm=syz.5.5960 [ 367.653565][T20100] lo speed is unknown, defaulting to 1000 [ 367.836365][T20102] lo speed is unknown, defaulting to 1000 [ 368.641853][T20109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5962'. [ 368.652261][T20109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5962'. [ 368.959561][T20117] netlink: 'syz.6.5965': attribute type 13 has an invalid length. [ 368.972494][T20117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20117 comm=syz.6.5965 [ 370.370847][T20119] lo speed is unknown, defaulting to 1000 [ 370.466762][T20113] loop5: detected capacity change from 0 to 8192 [ 370.553445][T20113] loop5: p1 p3 p4 [ 370.557264][T20113] loop5: p1 size 8390912 extends beyond EOD, truncated [ 370.567229][T20113] loop5: p3 size 589824 extends beyond EOD, truncated [ 370.844598][T20137] lo speed is unknown, defaulting to 1000 [ 371.048787][T20140] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 371.208684][T20148] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5972'. [ 371.217752][T20148] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5972'. [ 371.233802][T20151] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5975'. [ 371.242932][T20151] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5975'. [ 372.404147][T20158] lo speed is unknown, defaulting to 1000 [ 372.475463][T20164] lo speed is unknown, defaulting to 1000 [ 372.577512][T20167] netlink: 'syz.4.5979': attribute type 13 has an invalid length. [ 372.608240][T20172] sd 0:0:1:0: device reset [ 372.617893][T20167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20167 comm=syz.4.5979 [ 372.659512][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 372.659525][ T29] audit: type=1326 audit(1747123055.375:19555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.5.5983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 372.689898][ T29] audit: type=1326 audit(1747123055.375:19556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="syz.5.5983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 372.714237][ T29] audit: type=1326 audit(1747123055.375:19557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 372.737425][ T29] audit: type=1326 audit(1747123055.375:19558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 372.761170][ T29] audit: type=1326 audit(1747123055.375:19559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 372.848849][T20177] loop6: detected capacity change from 0 to 8192 [ 372.898543][T20177] loop6: p1 p3 p4 [ 372.902439][T20177] loop6: p1 size 8390912 extends beyond EOD, truncated [ 372.956454][T20177] loop6: p3 size 589824 extends beyond EOD, truncated [ 373.021901][ T29] audit: type=1326 audit(1747123055.585:19560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 373.046383][ T29] audit: type=1326 audit(1747123055.605:19561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 373.069573][ T29] audit: type=1326 audit(1747123055.605:19562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 373.094160][ T29] audit: type=1326 audit(1747123055.605:19563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 373.117313][ T29] audit: type=1326 audit(1747123055.605:19564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20174 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e56ae969 code=0x7ffc0000 [ 373.137182][T20187] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 373.144550][T20184] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 373.232008][T20193] netlink: 'syz.2.5987': attribute type 13 has an invalid length. [ 373.252991][T20193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20193 comm=syz.2.5987 [ 373.295550][T20195] netlink: 'syz.4.5989': attribute type 13 has an invalid length. [ 373.323908][T20199] sd 0:0:1:0: device reset [ 373.488461][T20202] loop5: detected capacity change from 0 to 2048 [ 373.811556][T20208] lo speed is unknown, defaulting to 1000 [ 373.942686][T20213] lo speed is unknown, defaulting to 1000 [ 375.117857][T20224] lo speed is unknown, defaulting to 1000 [ 375.887211][T20229] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 376.371861][T20227] lo speed is unknown, defaulting to 1000 [ 376.502112][T20235] netlink: 'syz.4.6002': attribute type 13 has an invalid length. [ 376.881985][T20257] loop6: detected capacity change from 0 to 8192 [ 376.930973][T20257] loop6: p1 p3 p4 [ 376.934877][T20257] loop6: p1 size 8390912 extends beyond EOD, truncated [ 376.945421][T20257] loop6: p3 size 589824 extends beyond EOD, truncated [ 377.023211][T20259] lo speed is unknown, defaulting to 1000 [ 377.882303][T20265] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 377.914700][T20267] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 377.996196][T20269] loop5: detected capacity change from 0 to 2048 [ 378.024869][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 378.024885][ T29] audit: type=1326 audit(1747123060.745:19619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20272 comm="syz.6.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 378.055411][ T29] audit: type=1326 audit(1747123060.745:19620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20272 comm="syz.6.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 378.079039][ T29] audit: type=1326 audit(1747123060.745:19621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20272 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 378.166781][ T29] audit: type=1326 audit(1747123060.745:19622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20272 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 378.190075][ T29] audit: type=1326 audit(1747123060.745:19623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20272 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 378.214150][ T29] audit: type=1326 audit(1747123060.745:19624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20272 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 378.238258][ T29] audit: type=1326 audit(1747123060.745:19625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20272 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 378.247183][T20286] netlink: 'syz.6.6019': attribute type 13 has an invalid length. [ 378.262271][ T29] audit: type=1326 audit(1747123060.745:19626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20272 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 378.262343][ T29] audit: type=1326 audit(1747123060.745:19627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20272 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 378.262373][ T29] audit: type=1326 audit(1747123060.745:19628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20272 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 378.456083][T20293] loop5: detected capacity change from 0 to 2048 [ 378.481005][T20296] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6023'. [ 378.491381][T20296] siw: device registration error -23 [ 378.703355][T20305] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 378.935674][T20296] loop6: detected capacity change from 0 to 2048 [ 378.977178][T20309] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 379.027223][T20315] sd 0:0:1:0: device reset [ 379.123065][T20324] netlink: 'syz.6.6033': attribute type 13 has an invalid length. [ 379.152187][T20326] loop5: detected capacity change from 0 to 2048 [ 379.475000][T20338] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6039'. [ 379.498080][T20338] loop5: detected capacity change from 0 to 2048 [ 379.517790][T20340] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 379.674062][T20341] lo speed is unknown, defaulting to 1000 [ 379.888459][T20344] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 380.005896][T20356] netlink: 'syz.5.6046': attribute type 13 has an invalid length. [ 380.028782][T20360] loop6: detected capacity change from 0 to 2048 [ 380.039507][T20358] netlink: 'syz.2.6045': attribute type 13 has an invalid length. [ 380.058796][T20358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20358 comm=syz.2.6045 [ 380.077078][T20360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.393965][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.405901][T20380] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 382.706294][T20389] lo speed is unknown, defaulting to 1000 [ 384.115833][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 384.115851][ T29] audit: type=1326 audit(1747123066.835:19701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20400 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 384.149532][ T29] audit: type=1326 audit(1747123066.865:19702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20400 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 384.174537][ T29] audit: type=1326 audit(1747123066.865:19703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20400 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 384.197680][ T29] audit: type=1326 audit(1747123066.865:19704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20400 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 384.222113][ T29] audit: type=1326 audit(1747123066.865:19705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20400 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 384.245381][ T29] audit: type=1326 audit(1747123066.865:19706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20400 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 384.269682][ T29] audit: type=1326 audit(1747123066.865:19707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20400 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 384.293964][ T29] audit: type=1326 audit(1747123066.865:19708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20400 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 384.317172][ T29] audit: type=1326 audit(1747123066.865:19709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20400 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 384.341384][ T29] audit: type=1326 audit(1747123066.865:19710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20400 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 384.511760][T20398] lo speed is unknown, defaulting to 1000 [ 385.531616][T20372] loop5: detected capacity change from 0 to 8192 [ 385.614347][T20414] netlink: 'syz.6.6059': attribute type 13 has an invalid length. [ 385.645361][T20415] loop5: detected capacity change from 0 to 2048 [ 385.865930][T20434] netlink: 'syz.4.6068': attribute type 13 has an invalid length. [ 386.132395][T20435] lo speed is unknown, defaulting to 1000 [ 386.282835][T20440] lo speed is unknown, defaulting to 1000 [ 386.815662][T20434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20434 comm=syz.4.6068 [ 387.027402][T20446] loop6: detected capacity change from 0 to 2048 [ 387.052360][T20446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.113041][T20453] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 388.517436][T20471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6076'. [ 388.527900][T20471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6076'. [ 388.593531][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.737730][T20472] lo speed is unknown, defaulting to 1000 [ 389.297294][T20483] lo speed is unknown, defaulting to 1000 [ 389.538877][T20485] lo speed is unknown, defaulting to 1000 [ 389.557840][T20477] loop6: detected capacity change from 0 to 2048 [ 389.904781][T20493] netlink: 'syz.6.6082': attribute type 13 has an invalid length. [ 390.160505][T20496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20496 comm=syz.6.6082 [ 390.283667][T20494] lo speed is unknown, defaulting to 1000 [ 390.434261][T20500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6084'. [ 390.443324][T20500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6084'. [ 390.504015][T20503] sd 0:0:1:0: device reset [ 390.681257][T20510] loop6: detected capacity change from 0 to 2048 [ 390.714429][T20510] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.813699][T20518] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6089'. [ 390.824151][T20518] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6089'. [ 391.267765][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.437833][T20540] loop6: detected capacity change from 0 to 2048 [ 391.683368][T20548] netlink: 'syz.5.6102': attribute type 13 has an invalid length. [ 391.867037][T20549] lo speed is unknown, defaulting to 1000 [ 392.073444][T20548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20548 comm=syz.5.6102 [ 392.151991][T20552] sd 0:0:1:0: device reset [ 392.249969][T20558] loop5: detected capacity change from 0 to 2048 [ 392.459497][T20567] netlink: 'syz.6.6109': attribute type 13 has an invalid length. [ 392.483011][T20565] syz.5.6105: attempt to access beyond end of device [ 392.483011][T20565] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 392.546397][T20567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20567 comm=syz.6.6109 [ 392.629335][T20571] loop5: detected capacity change from 0 to 2048 [ 392.642376][T20571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.717030][T20573] loop6: detected capacity change from 0 to 2048 [ 392.746033][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.798524][T20573] syz.6.6112: attempt to access beyond end of device [ 392.798524][T20573] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 392.874001][T20583] netlink: 'syz.6.6115': attribute type 13 has an invalid length. [ 392.912955][T20583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20583 comm=syz.6.6115 [ 392.938297][T20585] sd 0:0:1:0: device reset [ 392.994990][T20592] sd 0:0:1:0: device reset [ 393.005914][T20588] loop6: detected capacity change from 0 to 2048 [ 393.055781][T20588] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.070343][T20601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6119'. [ 393.079326][T20601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6119'. [ 393.171050][T20603] netlink: 'syz.2.6120': attribute type 13 has an invalid length. [ 393.188273][T20603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20603 comm=syz.2.6120 [ 393.443067][T20611] sd 0:0:1:0: device reset [ 393.601149][T20613] lo speed is unknown, defaulting to 1000 [ 394.742851][T20615] lo speed is unknown, defaulting to 1000 [ 394.865989][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.086235][T20625] loop5: detected capacity change from 0 to 2048 [ 395.283188][T20632] lo speed is unknown, defaulting to 1000 [ 395.463735][T20631] syz.5.6126: attempt to access beyond end of device [ 395.463735][T20631] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 395.873336][T20648] sd 0:0:1:0: device reset [ 396.304020][T20652] lo speed is unknown, defaulting to 1000 [ 397.763562][T20672] loop5: detected capacity change from 0 to 2048 [ 397.897740][T20672] syz.5.6143: attempt to access beyond end of device [ 397.897740][T20672] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 398.022983][T20684] sd 0:0:1:0: device reset [ 398.196538][T20688] loop5: detected capacity change from 0 to 2048 [ 398.213694][T20690] sd 0:0:1:0: device reset [ 398.242745][T20688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.555883][T20703] sd 0:0:1:0: device reset [ 399.012542][ T9981] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 399.053508][ T9981] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 399.066045][ T9981] EXT4-fs (loop5): This should not happen!! Data will be lost [ 399.066045][ T9981] [ 399.076358][ T9981] EXT4-fs (loop5): Total free blocks count 0 [ 399.082458][ T9981] EXT4-fs (loop5): Free/Dirty block details [ 399.088347][ T9981] EXT4-fs (loop5): free_blocks=2415919504 [ 399.094104][ T9981] EXT4-fs (loop5): dirty_blocks=7488 [ 399.099394][ T9981] EXT4-fs (loop5): Block reservation details [ 399.106092][ T9981] EXT4-fs (loop5): i_reserved_data_blocks=468 [ 399.124726][T20724] loop6: detected capacity change from 0 to 2048 [ 399.135157][T20726] sd 0:0:1:0: device reset [ 399.178651][ T9981] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 2048 with error 28 [ 399.198685][T20724] syz.6.6155: attempt to access beyond end of device [ 399.198685][T20724] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 400.131212][T20745] lo speed is unknown, defaulting to 1000 [ 400.708857][T20758] loop5: detected capacity change from 0 to 2048 [ 400.755864][T20750] syz.5.6164: attempt to access beyond end of device [ 400.755864][T20750] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 401.466453][T20774] loop6: detected capacity change from 0 to 2048 [ 401.504576][T20774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.643237][T20780] loop5: detected capacity change from 0 to 8192 [ 401.740402][T20780] loop5: p1 p3 p4 [ 401.744297][T20780] loop5: p1 size 8390912 extends beyond EOD, truncated [ 401.753305][T20780] loop5: p3 size 589824 extends beyond EOD, truncated [ 401.818221][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.319948][T20799] netlink: 'syz.4.6173': attribute type 13 has an invalid length. [ 402.342253][T20799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20799 comm=syz.4.6173 [ 402.818690][T20817] loop5: detected capacity change from 0 to 2048 [ 402.974709][T20813] syz.5.6177: attempt to access beyond end of device [ 402.974709][T20813] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 403.068752][T20823] netlink: 'syz.2.6180': attribute type 13 has an invalid length. [ 403.091271][T20823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20823 comm=syz.2.6180 [ 403.143412][T20828] loop6: detected capacity change from 0 to 2048 [ 403.227130][T20836] netlink: 'syz.2.6183': attribute type 13 has an invalid length. [ 403.238158][T20836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20836 comm=syz.2.6183 [ 403.264616][T20837] syz.6.6182: attempt to access beyond end of device [ 403.264616][T20837] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 403.381174][T20847] loop5: detected capacity change from 0 to 2048 [ 403.422255][T20849] netlink: 'syz.6.6186': attribute type 13 has an invalid length. [ 403.614571][T20855] loop6: detected capacity change from 0 to 2048 [ 403.728700][T20855] syz.6.6189: attempt to access beyond end of device [ 403.728700][T20855] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 403.761392][T20847] syz.5.6187: attempt to access beyond end of device [ 403.761392][T20847] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 404.205273][T20872] loop6: detected capacity change from 0 to 2048 [ 404.317428][T20875] loop5: detected capacity change from 0 to 2048 [ 404.649915][T20879] syz.5.6195: attempt to access beyond end of device [ 404.649915][T20879] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 404.667110][T20872] syz.6.6194: attempt to access beyond end of device [ 404.667110][T20872] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 404.832758][T20880] lo speed is unknown, defaulting to 1000 [ 405.228226][T20888] loop6: detected capacity change from 0 to 2048 [ 405.459340][T20894] syz.6.6198: attempt to access beyond end of device [ 405.459340][T20894] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 405.591285][T20902] loop5: detected capacity change from 0 to 2048 [ 405.645218][T20902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.685371][T20910] loop6: detected capacity change from 0 to 2048 [ 405.743456][T20910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.192814][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.239573][ T9953] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 406.270942][ T9953] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 406.283446][ T9953] EXT4-fs (loop6): This should not happen!! Data will be lost [ 406.283446][ T9953] [ 406.294290][ T9953] EXT4-fs (loop6): Total free blocks count 0 [ 406.300347][ T9953] EXT4-fs (loop6): Free/Dirty block details [ 406.306281][ T9953] EXT4-fs (loop6): free_blocks=2415919504 [ 406.312105][ T9953] EXT4-fs (loop6): dirty_blocks=2352 [ 406.317434][ T9953] EXT4-fs (loop6): Block reservation details [ 406.324700][ T9953] EXT4-fs (loop6): i_reserved_data_blocks=147 [ 406.348900][T20924] loop5: detected capacity change from 0 to 2048 [ 406.386964][ T9953] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 1338 with error 28 [ 406.484452][T20924] syz.5.6208: attempt to access beyond end of device [ 406.484452][T20924] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 407.065491][T20954] loop5: detected capacity change from 0 to 2048 [ 407.173445][T20954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.387080][T20965] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 407.479651][ T9991] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 407.498145][ T9991] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 186 with error 28 [ 407.510600][ T9991] EXT4-fs (loop5): This should not happen!! Data will be lost [ 407.510600][ T9991] [ 407.520862][ T9991] EXT4-fs (loop5): Total free blocks count 0 [ 407.526861][ T9991] EXT4-fs (loop5): Free/Dirty block details [ 407.532862][ T9991] EXT4-fs (loop5): free_blocks=2415919504 [ 407.538593][ T9991] EXT4-fs (loop5): dirty_blocks=208 [ 407.543870][ T9991] EXT4-fs (loop5): Block reservation details [ 407.549938][ T9991] EXT4-fs (loop5): i_reserved_data_blocks=13 [ 407.574369][T20969] loop6: detected capacity change from 0 to 2048 [ 407.826613][T20968] syz.6.6217: attempt to access beyond end of device [ 407.826613][T20968] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 408.036547][ T9991] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 186 with max blocks 2048 with error 28 [ 408.099292][T20976] loop6: detected capacity change from 0 to 2048 [ 408.140316][T20976] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ184467440737095516150xffffffffffffffff' [ 408.381537][T20983] loop5: detected capacity change from 0 to 2048 [ 408.798682][T20986] syz.5.6221: attempt to access beyond end of device [ 408.798682][T20986] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 408.866890][T20988] loop5: detected capacity change from 0 to 2048 [ 408.904310][T20988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.170512][ T9981] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 409.230171][ T9981] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 688 with error 28 [ 409.242625][ T9981] EXT4-fs (loop5): This should not happen!! Data will be lost [ 409.242625][ T9981] [ 409.242665][T20997] loop6: detected capacity change from 0 to 2048 [ 409.252343][ T9981] EXT4-fs (loop5): Total free blocks count 0 [ 409.252361][ T9981] EXT4-fs (loop5): Free/Dirty block details [ 409.252375][ T9981] EXT4-fs (loop5): free_blocks=2415919504 [ 409.277821][ T9981] EXT4-fs (loop5): dirty_blocks=1056 [ 409.283145][ T9981] EXT4-fs (loop5): Block reservation details [ 409.289127][ T9981] EXT4-fs (loop5): i_reserved_data_blocks=72 [ 409.310658][ T9981] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 688 with max blocks 644 with error 28 [ 409.327424][T20997] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ184467440737095516150xffffffffffffffff' [ 410.109873][T21013] loop5: detected capacity change from 0 to 2048 [ 410.141944][T21013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.299710][T21019] loop6: detected capacity change from 0 to 2048 [ 410.364699][T21019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.822541][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.941193][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.994508][T21037] loop6: detected capacity change from 0 to 2048 [ 411.051784][T21039] loop5: detected capacity change from 0 to 2048 [ 411.163119][T21042] syz.6.6238: attempt to access beyond end of device [ 411.163119][T21042] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 411.182874][T21043] syz.5.6239: attempt to access beyond end of device [ 411.182874][T21043] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 411.424778][T21047] loop6: detected capacity change from 0 to 2048 [ 411.443022][T21047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.838843][T21060] lo speed is unknown, defaulting to 1000 [ 412.968240][T21063] lo speed is unknown, defaulting to 1000 [ 413.307762][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.442265][T21077] loop6: detected capacity change from 0 to 2048 [ 413.543227][T21077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.881786][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.979601][T21082] loop6: detected capacity change from 0 to 2048 [ 414.056663][T21082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.124639][T21090] loop5: detected capacity change from 0 to 2048 [ 414.215920][ T9991] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 414.238173][ T9991] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 744 with error 28 [ 414.251459][ T9991] EXT4-fs (loop6): This should not happen!! Data will be lost [ 414.251459][ T9991] [ 414.261135][ T9991] EXT4-fs (loop6): Total free blocks count 0 [ 414.267219][ T9991] EXT4-fs (loop6): Free/Dirty block details [ 414.273128][ T9991] EXT4-fs (loop6): free_blocks=2415919504 [ 414.278865][ T9991] EXT4-fs (loop6): dirty_blocks=1168 [ 414.284799][ T9991] EXT4-fs (loop6): Block reservation details [ 414.290860][ T9991] EXT4-fs (loop6): i_reserved_data_blocks=82 [ 414.320081][T21093] syz.5.6252: attempt to access beyond end of device [ 414.320081][T21093] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 414.331251][ T9991] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 744 with max blocks 554 with error 28 [ 414.485093][T21102] sd 0:0:1:0: device reset [ 415.403877][T21114] lo speed is unknown, defaulting to 1000 [ 415.695417][T21119] netlink: 'syz.6.6260': attribute type 13 has an invalid length. [ 415.724813][T21119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21119 comm=syz.6.6260 [ 415.881812][T21124] loop6: detected capacity change from 0 to 2048 [ 416.005965][T21124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.014873][T21131] loop5: detected capacity change from 0 to 2048 [ 416.069008][T21131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.769565][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.812660][T21148] sd 0:0:1:0: device reset [ 416.817728][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.059578][T21157] loop6: detected capacity change from 0 to 2048 [ 417.073364][T21157] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ184467440737095516150xffffffffffffffff' [ 417.239280][T21160] lo speed is unknown, defaulting to 1000 [ 417.916425][T21168] loop5: detected capacity change from 0 to 2048 [ 418.123854][T21169] lo speed is unknown, defaulting to 1000 [ 418.421929][T21171] syz.5.6276: attempt to access beyond end of device [ 418.421929][T21171] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 418.846228][T21184] lo speed is unknown, defaulting to 1000 [ 419.548226][T21196] loop6: detected capacity change from 0 to 2048 [ 419.611796][T21196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.748230][T21202] lo speed is unknown, defaulting to 1000 [ 420.124124][T21210] loop5: detected capacity change from 0 to 2048 [ 420.483785][T21217] lo speed is unknown, defaulting to 1000 [ 420.748816][T21210] syz.5.6286: attempt to access beyond end of device [ 420.748816][T21210] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 420.784392][T21221] sd 0:0:1:0: device reset [ 420.845770][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.883524][T21227] loop5: detected capacity change from 0 to 2048 [ 420.932597][T21228] loop6: detected capacity change from 0 to 2048 [ 421.049410][T21228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.150945][T21227] syz.5.6290: attempt to access beyond end of device [ 421.150945][T21227] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 421.388849][T21250] loop5: detected capacity change from 0 to 2048 [ 421.455038][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.535911][T21251] syz.5.6299: attempt to access beyond end of device [ 421.535911][T21251] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 421.603723][T21253] loop6: detected capacity change from 0 to 2048 [ 421.848245][T21257] syz.6.6300: attempt to access beyond end of device [ 421.848245][T21257] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 422.060620][T21270] loop6: detected capacity change from 0 to 2048 [ 422.214008][T21278] loop5: detected capacity change from 0 to 2048 [ 422.492546][T21279] syz.6.6307: attempt to access beyond end of device [ 422.492546][T21279] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 422.493784][T21280] syz.5.6310: attempt to access beyond end of device [ 422.493784][T21280] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 422.692451][T21287] loop5: detected capacity change from 0 to 2048 [ 422.732052][T21287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.913418][T21291] lo speed is unknown, defaulting to 1000 [ 423.502041][ T9970] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 423.568444][ T9970] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1948 with error 28 [ 423.581020][ T9970] EXT4-fs (loop5): This should not happen!! Data will be lost [ 423.581020][ T9970] [ 423.591346][ T9970] EXT4-fs (loop5): Total free blocks count 0 [ 423.597436][ T9970] EXT4-fs (loop5): Free/Dirty block details [ 423.603431][ T9970] EXT4-fs (loop5): free_blocks=2415919504 [ 423.609292][ T9970] EXT4-fs (loop5): dirty_blocks=2400 [ 423.614661][ T9970] EXT4-fs (loop5): Block reservation details [ 423.621357][ T9970] EXT4-fs (loop5): i_reserved_data_blocks=167 [ 423.647862][T21314] loop6: detected capacity change from 0 to 2048 [ 423.713201][T21314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.833441][ T9970] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 1948 with max blocks 1378 with error 28 [ 423.920202][ T9981] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 423.959008][ T9981] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 800 with error 28 [ 423.972695][ T9981] EXT4-fs (loop6): This should not happen!! Data will be lost [ 423.972695][ T9981] [ 423.982379][ T9981] EXT4-fs (loop6): Total free blocks count 0 [ 423.988449][ T9981] EXT4-fs (loop6): Free/Dirty block details [ 423.994375][ T9981] EXT4-fs (loop6): free_blocks=2415919504 [ 424.000124][ T9981] EXT4-fs (loop6): dirty_blocks=800 [ 424.005338][ T9981] EXT4-fs (loop6): Block reservation details [ 424.012656][ T9981] EXT4-fs (loop6): i_reserved_data_blocks=50 [ 424.109612][T21324] loop5: detected capacity change from 0 to 2048 [ 424.148686][T21326] sd 0:0:1:0: device reset [ 424.315216][T21324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.413850][T21330] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 424.734291][ T9981] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 800 with max blocks 2048 with error 28 [ 424.927632][T21344] loop6: detected capacity change from 0 to 2048 [ 424.953113][T21344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.227034][ T9965] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 425.265095][ T9965] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 425.278763][ T9965] EXT4-fs (loop5): This should not happen!! Data will be lost [ 425.278763][ T9965] [ 425.288531][ T9965] EXT4-fs (loop5): Total free blocks count 0 [ 425.294573][ T9965] EXT4-fs (loop5): Free/Dirty block details [ 425.301681][ T9965] EXT4-fs (loop5): free_blocks=2415919504 [ 425.307424][ T9965] EXT4-fs (loop5): dirty_blocks=16400 [ 425.312864][ T9965] EXT4-fs (loop5): Block reservation details [ 425.318856][ T9965] EXT4-fs (loop5): i_reserved_data_blocks=1025 [ 425.395965][ T9965] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 425.834521][T21362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6332'. [ 425.873019][T21362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21362 comm=syz.5.6332 [ 425.941242][ T9965] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 426.044303][ T9965] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 426.056809][ T9965] EXT4-fs (loop6): This should not happen!! Data will be lost [ 426.056809][ T9965] [ 426.066512][ T9965] EXT4-fs (loop6): Total free blocks count 0 [ 426.073758][ T9965] EXT4-fs (loop6): Free/Dirty block details [ 426.079672][ T9965] EXT4-fs (loop6): free_blocks=2415919504 [ 426.085444][ T9965] EXT4-fs (loop6): dirty_blocks=3472 [ 426.090868][ T9965] EXT4-fs (loop6): Block reservation details [ 426.096850][ T9965] EXT4-fs (loop6): i_reserved_data_blocks=218 [ 426.142108][ T9965] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 1426 with error 28 [ 426.327273][T21372] lo speed is unknown, defaulting to 1000 [ 426.616006][T21379] loop6: detected capacity change from 0 to 2048 [ 426.665835][T21379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.059570][ T9814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.411668][T21403] lo speed is unknown, defaulting to 1000 [ 427.674035][T21400] loop6: detected capacity change from 0 to 2048 [ 427.709377][T21400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.771747][T21410] loop5: detected capacity change from 0 to 2048 [ 427.810185][ T9963] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 427.839792][ T9963] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1568 with error 28 [ 427.852411][ T9963] EXT4-fs (loop6): This should not happen!! Data will be lost [ 427.852411][ T9963] [ 427.863548][ T9963] EXT4-fs (loop6): Total free blocks count 0 [ 427.869624][ T9963] EXT4-fs (loop6): Free/Dirty block details [ 427.875612][ T9963] EXT4-fs (loop6): free_blocks=2415919504 [ 427.881345][ T9963] EXT4-fs (loop6): dirty_blocks=3472 [ 427.886719][ T9963] EXT4-fs (loop6): Block reservation details [ 427.893958][ T9963] EXT4-fs (loop6): i_reserved_data_blocks=251 [ 427.996211][T21410] syz.5.6345: attempt to access beyond end of device [ 427.996211][T21410] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 428.105095][ T9963] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 1568 with max blocks 2048 with error 28 [ 428.183545][T21415] loop5: detected capacity change from 0 to 2048 [ 428.231434][T21415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.341595][ T9963] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 428.384796][ T9963] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 408 with error 28 [ 428.397400][ T9963] EXT4-fs (loop5): This should not happen!! Data will be lost [ 428.397400][ T9963] [ 428.407866][ T9963] EXT4-fs (loop5): Total free blocks count 0 [ 428.413910][ T9963] EXT4-fs (loop5): Free/Dirty block details [ 428.419846][ T9963] EXT4-fs (loop5): free_blocks=2415919504 [ 428.425604][ T9963] EXT4-fs (loop5): dirty_blocks=896 [ 428.431469][ T9963] EXT4-fs (loop5): Block reservation details [ 428.437518][ T9963] EXT4-fs (loop5): i_reserved_data_blocks=69 [ 428.481192][T21423] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6348'. [ 428.490984][T21423] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6348'. [ 428.658370][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 428.658384][ T29] audit: type=1326 audit(1747123111.225:19726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21422 comm="syz.4.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 428.689374][ T29] audit: type=1326 audit(1747123111.225:19727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21422 comm="syz.4.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 428.714217][ T29] audit: type=1326 audit(1747123111.225:19728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21422 comm="syz.4.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 428.738011][ T29] audit: type=1326 audit(1747123111.225:19729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21422 comm="syz.4.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 428.762942][ T29] audit: type=1326 audit(1747123111.225:19730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21422 comm="syz.4.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 428.786557][ T29] audit: type=1326 audit(1747123111.225:19731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21422 comm="syz.4.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 428.811366][ T29] audit: type=1326 audit(1747123111.225:19732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21422 comm="syz.4.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 428.835037][ T29] audit: type=1326 audit(1747123111.225:19733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21422 comm="syz.4.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 428.859957][ T29] audit: type=1326 audit(1747123111.225:19734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21422 comm="syz.4.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 428.884765][ T29] audit: type=1326 audit(1747123111.225:19735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21422 comm="syz.4.6348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c73c9e969 code=0x7ffc0000 [ 429.003496][ T9953] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 408 with max blocks 2048 with error 28 [ 429.074812][T21439] loop6: detected capacity change from 0 to 2048 [ 429.097051][T21439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.293108][T21451] loop5: detected capacity change from 0 to 2048 [ 429.323760][ T9970] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 429.344360][ T9970] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 224 with error 28 [ 429.356810][ T9970] EXT4-fs (loop6): This should not happen!! Data will be lost [ 429.356810][ T9970] [ 429.367141][ T9970] EXT4-fs (loop6): Total free blocks count 0 [ 429.373165][ T9970] EXT4-fs (loop6): Free/Dirty block details [ 429.379217][ T9970] EXT4-fs (loop6): free_blocks=2415919504 [ 429.385117][ T9970] EXT4-fs (loop6): dirty_blocks=704 [ 429.390969][ T9970] EXT4-fs (loop6): Block reservation details [ 429.396950][ T9970] EXT4-fs (loop6): i_reserved_data_blocks=44 [ 429.405039][T21451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.452784][ T9970] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 224 with max blocks 650 with error 28 [ 429.539648][ T9970] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 429.730149][ T9970] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 698 with error 28 [ 429.743383][ T9970] EXT4-fs (loop5): This should not happen!! Data will be lost [ 429.743383][ T9970] [ 429.753743][ T9970] EXT4-fs (loop5): Total free blocks count 0 [ 429.759789][ T9970] EXT4-fs (loop5): Free/Dirty block details [ 429.765789][ T9970] EXT4-fs (loop5): free_blocks=2415919504 [ 429.772231][ T9970] EXT4-fs (loop5): dirty_blocks=704 [ 429.777456][ T9970] EXT4-fs (loop5): Block reservation details [ 429.784035][ T9970] EXT4-fs (loop5): i_reserved_data_blocks=44 [ 429.933851][T21461] netlink: 'syz.0.6361': attribute type 13 has an invalid length. [ 429.972940][T21461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21461 comm=syz.0.6361 [ 430.218154][T21463] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6362'. [ 430.227963][T21463] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6362'. [ 430.324006][ T9970] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 698 with max blocks 2048 with error 28 [ 430.941887][T21483] loop6: detected capacity change from 0 to 2048 [ 431.001687][T21488] loop5: detected capacity change from 0 to 2048 [ 431.107584][T21486] syz.6.6368: attempt to access beyond end of device [ 431.107584][T21486] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 431.154993][T21492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6370'. [ 431.161672][T21488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.217222][T21495] sd 0:0:1:0: device reset [ 431.329621][T21499] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6374'. [ 431.338796][T21499] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6374'. [ 431.379949][ T9963] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 431.406954][ T9963] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 680 with error 28 [ 431.419383][ T9963] EXT4-fs (loop5): This should not happen!! Data will be lost [ 431.419383][ T9963] [ 431.430368][ T9963] EXT4-fs (loop5): Total free blocks count 0 [ 431.436363][ T9963] EXT4-fs (loop5): Free/Dirty block details [ 431.442431][ T9963] EXT4-fs (loop5): free_blocks=2415919504 [ 431.448174][ T9963] EXT4-fs (loop5): dirty_blocks=1584 [ 431.454041][ T9963] EXT4-fs (loop5): Block reservation details [ 431.460020][ T9963] EXT4-fs (loop5): i_reserved_data_blocks=114 [ 431.473975][T21508] loop6: detected capacity change from 0 to 2048 [ 431.548234][ T9963] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 680 with max blocks 2048 with error 28 [ 431.635253][T21512] syz.6.6375: attempt to access beyond end of device [ 431.635253][T21512] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 431.757691][T21515] sd 0:0:1:0: device reset [ 431.940691][T21520] loop6: detected capacity change from 0 to 2048 [ 432.164833][T21520] syz.6.6380: attempt to access beyond end of device [ 432.164833][T21520] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 432.261774][T21528] loop5: detected capacity change from 0 to 2048 [ 432.353754][T21531] loop6: detected capacity change from 0 to 2048 [ 432.364928][T21528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.459470][T21531] syz.6.6384: attempt to access beyond end of device [ 432.459470][T21531] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 432.503181][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6383'. [ 432.599172][T21539] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6386'. [ 432.608303][T21539] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6386'. [ 432.722083][T21545] loop6: detected capacity change from 0 to 2048 [ 432.798284][T21545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.013179][T21561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6391'. [ 433.042100][T21561] siw: device registration error -23 [ 433.135602][ T9981] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 433.160344][ T9953] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 433.185437][ T9981] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 433.197973][ T9981] EXT4-fs (loop5): This should not happen!! Data will be lost [ 433.197973][ T9981] [ 433.207948][ T9981] EXT4-fs (loop5): Total free blocks count 0 [ 433.214621][ T9981] EXT4-fs (loop5): Free/Dirty block details [ 433.220688][ T9981] EXT4-fs (loop5): free_blocks=2415919504 [ 433.226427][ T9981] EXT4-fs (loop5): dirty_blocks=4832 [ 433.231795][ T9981] EXT4-fs (loop5): Block reservation details [ 433.237788][ T9981] EXT4-fs (loop5): i_reserved_data_blocks=302 [ 433.244573][ T9953] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 433.257130][ T9953] EXT4-fs (loop6): This should not happen!! Data will be lost [ 433.257130][ T9953] [ 433.266810][ T9953] EXT4-fs (loop6): Total free blocks count 0 [ 433.273458][ T9953] EXT4-fs (loop6): Free/Dirty block details [ 433.279358][ T9953] EXT4-fs (loop6): free_blocks=2415919504 [ 433.285118][ T9953] EXT4-fs (loop6): dirty_blocks=4272 [ 433.290468][ T9953] EXT4-fs (loop6): Block reservation details [ 433.296484][ T9953] EXT4-fs (loop6): i_reserved_data_blocks=267 [ 433.353333][ T9981] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 2048 with error 28 [ 433.413187][ T9981] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 2048 with error 28 [ 433.726674][T21573] loop5: detected capacity change from 0 to 2048 [ 433.811552][T21577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6396'. [ 433.812270][T21573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.298542][T21586] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6399'. [ 434.307724][T21586] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6399'. [ 434.421359][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 434.421376][ T29] audit: type=1326 audit(1747123117.105:19772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.6.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 434.452493][ T29] audit: type=1326 audit(1747123117.105:19773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.6.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 434.476303][ T29] audit: type=1326 audit(1747123117.105:19774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.6.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 434.501407][ T29] audit: type=1326 audit(1747123117.105:19775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.6.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 434.525117][ T29] audit: type=1326 audit(1747123117.105:19776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.6.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 434.549951][ T29] audit: type=1326 audit(1747123117.105:19777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.6.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 434.574718][ T29] audit: type=1326 audit(1747123117.105:19778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.6.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 434.598313][ T29] audit: type=1326 audit(1747123117.105:19779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.6.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 434.621872][ T29] audit: type=1326 audit(1747123117.105:19780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.6.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 434.646663][ T29] audit: type=1326 audit(1747123117.105:19781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.6.6399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a0d5ae969 code=0x7ffc0000 [ 434.715293][T21591] loop6: detected capacity change from 0 to 2048 [ 434.921754][T21591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.167595][ T9953] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 435.199119][ T9953] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 435.211669][ T9953] EXT4-fs (loop5): This should not happen!! Data will be lost [ 435.211669][ T9953] [ 435.222019][ T9953] EXT4-fs (loop5): Total free blocks count 0 [ 435.228025][ T9953] EXT4-fs (loop5): Free/Dirty block details [ 435.234062][ T9953] EXT4-fs (loop5): free_blocks=2415919504 [ 435.239825][ T9953] EXT4-fs (loop5): dirty_blocks=3744 [ 435.245340][ T9953] EXT4-fs (loop5): Block reservation details [ 435.251854][ T9953] EXT4-fs (loop5): i_reserved_data_blocks=234 [ 435.270586][ T9970] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1686 with error 28 [ 435.322188][ T9953] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 435.337438][ T9953] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 435.350597][ T9953] EXT4-fs (loop6): This should not happen!! Data will be lost [ 435.350597][ T9953] [ 435.360389][ T9953] EXT4-fs (loop6): Total free blocks count 0 [ 435.366379][ T9953] EXT4-fs (loop6): Free/Dirty block details [ 435.372304][ T9953] EXT4-fs (loop6): free_blocks=2415919504 [ 435.378068][ T9953] EXT4-fs (loop6): dirty_blocks=4208 [ 435.384026][ T9953] EXT4-fs (loop6): Block reservation details [ 435.390120][ T9953] EXT4-fs (loop6): i_reserved_data_blocks=263 [ 435.410001][ T9953] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 2048 with error 28 [ 435.508425][T21617] sd 0:0:1:0: device reset [ 435.520075][T21615] loop5: detected capacity change from 0 to 2048 [ 435.764779][T21613] syz.5.6403: attempt to access beyond end of device [ 435.764779][T21613] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 435.769661][T21629] sd 0:0:1:0: device reset [ 435.934355][T21634] sd 0:0:1:0: device reset [ 435.997907][T21637] loop6: detected capacity change from 0 to 2048 [ 436.004876][T21641] sd 0:0:1:0: device reset [ 436.051679][T21644] sd 0:0:1:0: device reset [ 436.065650][T21637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.487830][T21651] lo speed is unknown, defaulting to 1000 [ 436.983132][ T9970] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 437.000762][ T9970] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 437.013405][ T9970] EXT4-fs (loop6): This should not happen!! Data will be lost [ 437.013405][ T9970] [ 437.024468][ T9970] EXT4-fs (loop6): Total free blocks count 0 [ 437.030497][ T9970] EXT4-fs (loop6): Free/Dirty block details [ 437.036399][ T9970] EXT4-fs (loop6): free_blocks=2415919504 [ 437.042150][ T9970] EXT4-fs (loop6): dirty_blocks=3792 [ 437.047621][ T9970] EXT4-fs (loop6): Block reservation details [ 437.054994][ T9970] EXT4-fs (loop6): i_reserved_data_blocks=258 [ 437.167700][T21660] sd 0:0:1:0: device reset [ 437.263802][ T9970] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 2048 with error 28 [ 437.854982][T21677] sd 0:0:1:0: device reset [ 437.858851][T21676] loop5: detected capacity change from 0 to 2048 [ 437.959717][T21680] loop6: detected capacity change from 0 to 2048 [ 438.054996][T21681] syz.5.6426: attempt to access beyond end of device [ 438.054996][T21681] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 438.132565][T21680] syz.6.6427: attempt to access beyond end of device [ 438.132565][T21680] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 438.283179][T21685] loop5: detected capacity change from 0 to 2048 [ 438.307107][T21689] loop6: detected capacity change from 0 to 2048 [ 438.331222][T21685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.575805][T21689] syz.6.6431: attempt to access beyond end of device [ 438.575805][T21689] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 438.877541][T21698] loop6: detected capacity change from 0 to 2048 [ 438.899250][T21702] sd 0:0:1:0: device reset [ 438.925651][T21698] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.970234][ T9953] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 439.060158][ T9953] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 439.073375][ T9953] EXT4-fs (loop5): This should not happen!! Data will be lost [ 439.073375][ T9953] [ 439.083050][ T9953] EXT4-fs (loop5): Total free blocks count 0 [ 439.089042][ T9953] EXT4-fs (loop5): Free/Dirty block details [ 439.095016][ T9953] EXT4-fs (loop5): free_blocks=2415919504 [ 439.101559][ T9953] EXT4-fs (loop5): dirty_blocks=3440 [ 439.106931][ T9953] EXT4-fs (loop5): Block reservation details [ 439.113070][ T9953] EXT4-fs (loop5): i_reserved_data_blocks=222 [ 439.204441][ T9953] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 2048 with error 28 [ 439.270791][ T9965] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 439.316794][ T9965] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 928 with error 28 [ 439.329258][ T9965] EXT4-fs (loop6): This should not happen!! Data will be lost [ 439.329258][ T9965] [ 439.339005][ T9965] EXT4-fs (loop6): Total free blocks count 0 [ 439.345626][ T9965] EXT4-fs (loop6): Free/Dirty block details [ 439.351626][ T9965] EXT4-fs (loop6): free_blocks=2415919504 [ 439.357385][ T9965] EXT4-fs (loop6): dirty_blocks=944 [ 439.362628][ T9965] EXT4-fs (loop6): Block reservation details [ 439.368610][ T9965] EXT4-fs (loop6): i_reserved_data_blocks=59 [ 439.489964][ T9965] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 928 with max blocks 2048 with error 28 [ 439.984661][T21729] loop5: detected capacity change from 0 to 2048 [ 440.402256][T21732] syz.5.6441: attempt to access beyond end of device [ 440.402256][T21732] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 440.419032][T21734] netlink: 'syz.6.6443': attribute type 13 has an invalid length. [ 440.512890][T21734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21734 comm=syz.6.6443 [ 441.009582][T21744] loop6: detected capacity change from 0 to 2048 [ 441.164299][T21749] syz.6.6448: attempt to access beyond end of device [ 441.164299][T21749] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 441.407511][T21763] loop6: detected capacity change from 0 to 2048 [ 441.453528][T21763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.524935][T21776] loop5: detected capacity change from 0 to 2048 [ 441.768032][T21776] syz.5.6454: attempt to access beyond end of device [ 441.768032][T21776] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 441.953394][T21782] loop5: detected capacity change from 0 to 2048 [ 441.993625][T21782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.414474][T21788] sd 0:0:1:0: device reset [ 442.430817][ T9965] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 442.451511][ T9965] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 442.464642][ T9965] EXT4-fs (loop6): This should not happen!! Data will be lost [ 442.464642][ T9965] [ 442.474336][ T9965] EXT4-fs (loop6): Total free blocks count 0 [ 442.480494][ T9965] EXT4-fs (loop6): Free/Dirty block details [ 442.486466][ T9965] EXT4-fs (loop6): free_blocks=2415919504 [ 442.492841][ T9965] EXT4-fs (loop6): dirty_blocks=7776 [ 442.498126][ T9965] EXT4-fs (loop6): Block reservation details [ 442.504143][ T9965] EXT4-fs (loop6): i_reserved_data_blocks=486 [ 442.534174][ T9953] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 442.545982][ T9965] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 442.577075][ T9953] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 442.589596][ T9953] EXT4-fs (loop5): This should not happen!! Data will be lost [ 442.589596][ T9953] [ 442.599260][ T9953] EXT4-fs (loop5): Total free blocks count 0 [ 442.606491][ T9953] EXT4-fs (loop5): Free/Dirty block details [ 442.612482][ T9953] EXT4-fs (loop5): free_blocks=2415919504 [ 442.618219][ T9953] EXT4-fs (loop5): dirty_blocks=6608 [ 442.623572][ T9953] EXT4-fs (loop5): Block reservation details [ 442.629612][ T9953] EXT4-fs (loop5): i_reserved_data_blocks=447 [ 442.785217][ T9953] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 2048 with error 28 [ 442.937628][T21800] loop6: detected capacity change from 0 to 2048 [ 443.207408][T21804] loop6: detected capacity change from 0 to 2048 [ 443.367978][T21804] syz.6.6465: attempt to access beyond end of device [ 443.367978][T21804] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 443.604738][T21810] loop6: detected capacity change from 0 to 2048 [ 443.624960][T21813] netlink: 'syz.4.6468': attribute type 13 has an invalid length. [ 443.633743][T21814] loop5: detected capacity change from 0 to 2048 [ 443.635509][T21813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21813 comm=syz.4.6468 [ 443.673202][T21814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.829754][T21817] syz.6.6469: attempt to access beyond end of device [ 443.829754][T21817] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 444.066269][ T9953] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 444.075166][T21826] loop6: detected capacity change from 0 to 2048 [ 444.105138][ T9953] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 110 with error 28 [ 444.118183][ T9953] EXT4-fs (loop5): This should not happen!! Data will be lost [ 444.118183][ T9953] [ 444.127838][ T9953] EXT4-fs (loop5): Total free blocks count 0 [ 444.133848][ T9953] EXT4-fs (loop5): Free/Dirty block details [ 444.139799][ T9953] EXT4-fs (loop5): free_blocks=2415919504 [ 444.146181][ T9953] EXT4-fs (loop5): dirty_blocks=128 [ 444.151519][ T9953] EXT4-fs (loop5): Block reservation details [ 444.157492][ T9953] EXT4-fs (loop5): i_reserved_data_blocks=8 [ 444.416291][ T9953] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 110 with max blocks 1852 with error 28 [ 444.478349][T21835] loop6: detected capacity change from 0 to 2048 [ 444.596581][T21836] syz.6.6475: attempt to access beyond end of device [ 444.596581][T21836] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 444.709285][T21838] sd 0:0:1:0: device reset [ 444.845028][T21848] sd 0:0:1:0: device reset [ 444.895577][T21852] netlink: 'syz.0.6483': attribute type 13 has an invalid length. [ 444.921546][T21852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21852 comm=syz.0.6483 [ 444.934407][T21859] loop6: detected capacity change from 0 to 2048 [ 444.953914][T21861] loop5: detected capacity change from 0 to 2048 [ 444.993702][T21861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.122041][T21859] syz.6.6486: attempt to access beyond end of device [ 445.122041][T21859] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 445.454665][T21883] loop6: detected capacity change from 0 to 2048 [ 445.512446][T21883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.236400][ T9965] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 446.260403][ T9965] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 446.272939][ T9965] EXT4-fs (loop5): This should not happen!! Data will be lost [ 446.272939][ T9965] [ 446.283392][ T9965] EXT4-fs (loop5): Total free blocks count 0 [ 446.289395][ T9965] EXT4-fs (loop5): Free/Dirty block details [ 446.295325][ T9965] EXT4-fs (loop5): free_blocks=2415919504 [ 446.301242][ T9965] EXT4-fs (loop5): dirty_blocks=10320 [ 446.306628][ T9965] EXT4-fs (loop5): Block reservation details [ 446.313213][ T9965] EXT4-fs (loop5): i_reserved_data_blocks=645 [ 446.325386][ T9953] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 446.341975][ T9953] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 446.354484][ T9953] EXT4-fs (loop6): This should not happen!! Data will be lost [ 446.354484][ T9953] [ 446.364201][ T9953] EXT4-fs (loop6): Total free blocks count 0 [ 446.370809][ T9953] EXT4-fs (loop6): Free/Dirty block details [ 446.376724][ T9953] EXT4-fs (loop6): free_blocks=2415919504 [ 446.382593][ T9953] EXT4-fs (loop6): dirty_blocks=8144 [ 446.387884][ T9953] EXT4-fs (loop6): Block reservation details [ 446.394048][ T9953] EXT4-fs (loop6): i_reserved_data_blocks=509 [ 446.576304][ T9965] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 446.645173][ T9953] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 446.941473][T21906] sd 0:0:1:0: device reset [ 446.977178][T21904] loop5: detected capacity change from 0 to 2048 [ 446.989015][T21908] loop6: detected capacity change from 0 to 2048 [ 447.089810][T21904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.114503][T21908] syz.6.6499: attempt to access beyond end of device [ 447.114503][T21908] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 447.363183][T21916] loop6: detected capacity change from 0 to 2048 [ 447.403396][T21916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.089712][ T9963] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 448.111770][ T9965] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 448.128144][ T9963] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 448.128246][ T9965] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 448.141480][ T9963] EXT4-fs (loop5): This should not happen!! Data will be lost [ 448.141480][ T9963] [ 448.141495][ T9963] EXT4-fs (loop5): Total free blocks count 0 [ 448.141509][ T9963] EXT4-fs (loop5): Free/Dirty block details [ 448.141563][ T9963] EXT4-fs (loop5): free_blocks=2415919504 [ 448.141575][ T9963] EXT4-fs (loop5): dirty_blocks=5712 [ 448.141587][ T9963] EXT4-fs (loop5): Block reservation details [ 448.141615][ T9963] EXT4-fs (loop5): i_reserved_data_blocks=357 [ 448.200685][ T9965] EXT4-fs (loop6): This should not happen!! Data will be lost [ 448.200685][ T9965] [ 448.211561][ T9965] EXT4-fs (loop6): Total free blocks count 0 [ 448.217663][ T9965] EXT4-fs (loop6): Free/Dirty block details [ 448.223622][ T9965] EXT4-fs (loop6): free_blocks=2415919504 [ 448.229349][ T9965] EXT4-fs (loop6): dirty_blocks=4128 [ 448.234767][ T9965] EXT4-fs (loop6): Block reservation details [ 448.242017][ T9965] EXT4-fs (loop6): i_reserved_data_blocks=266 [ 448.252853][ T9963] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 2048 with error 28 [ 448.493973][ T9965] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 2048 with error 28 [ 448.602510][T21943] loop5: detected capacity change from 0 to 2048 [ 448.702241][T21946] loop6: detected capacity change from 0 to 2048 [ 448.744070][T21946] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.866583][T21941] syz.5.6508: attempt to access beyond end of device [ 448.866583][T21941] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 448.926128][T21954] netlink: 'syz.5.6512': attribute type 13 has an invalid length. [ 448.980567][T21954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21954 comm=syz.5.6512 [ 449.094719][ T9970] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 449.131524][ T9970] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 662 with error 28 [ 449.143966][ T9970] EXT4-fs (loop6): This should not happen!! Data will be lost [ 449.143966][ T9970] [ 449.154350][ T9970] EXT4-fs (loop6): Total free blocks count 0 [ 449.161011][ T9970] EXT4-fs (loop6): Free/Dirty block details [ 449.166921][ T9970] EXT4-fs (loop6): free_blocks=2415919504 [ 449.172685][ T9970] EXT4-fs (loop6): dirty_blocks=1104 [ 449.178023][ T9970] EXT4-fs (loop6): Block reservation details [ 449.184762][ T9970] EXT4-fs (loop6): i_reserved_data_blocks=75 [ 449.200979][T21958] loop5: detected capacity change from 0 to 2048 [ 449.241396][ T9970] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 662 with max blocks 1192 with error 28 [ 449.471005][T21960] sd 0:0:1:0: device reset [ 449.482160][T21957] syz.5.6513: attempt to access beyond end of device [ 449.482160][T21957] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 449.597370][T21964] netlink: 'syz.2.6517': attribute type 13 has an invalid length. [ 449.698940][T21973] netlink: 'syz.5.6520': attribute type 13 has an invalid length. [ 449.723458][T21973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21973 comm=syz.5.6520 [ 449.869371][T21984] loop5: detected capacity change from 0 to 2048 [ 449.985650][T21984] syz.5.6526: attempt to access beyond end of device [ 449.985650][T21984] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 450.018911][T21991] loop6: detected capacity change from 0 to 2048 [ 450.173979][T21998] netlink: 'syz.5.6530': attribute type 13 has an invalid length. [ 450.217788][T21998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21998 comm=syz.5.6530 [ 450.223878][T21988] syz.6.6523: attempt to access beyond end of device [ 450.223878][T21988] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 450.561341][T22001] loop5: detected capacity change from 0 to 2048 [ 450.607420][T22004] loop6: detected capacity change from 0 to 2048 [ 450.670453][T22001] syz.5.6532: attempt to access beyond end of device [ 450.670453][T22001] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 450.841591][T22009] loop5: detected capacity change from 0 to 2048 [ 450.850438][T22003] syz.6.6531: attempt to access beyond end of device [ 450.850438][T22003] loop6: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 450.967268][T22012] syz.5.6535: attempt to access beyond end of device [ 450.967268][T22012] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 451.123400][T22025] loop6: detected capacity change from 0 to 2048 [ 451.157078][T22023] xt_TCPMSS: Only works on TCP SYN packets [ 451.165636][T22025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.177967][T22023] loop5: detected capacity change from 0 to 512 [ 451.185983][T22023] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 451.273568][T22023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.303940][T22023] ext4 filesystem being mounted at /1130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.317397][T22023] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.6539: corrupted xattr block 32: bad e_name length [ 451.331916][T22023] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 451.341737][T22023] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.6539: corrupted xattr block 32: bad e_name length [ 451.355475][T22023] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 451.364673][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 451.364688][ T29] audit: type=1400 audit(1747123134.095:19794): avc: denied { setattr } for pid=22022 comm="syz.5.6539" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 451.394245][T22023] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.6539: corrupted xattr block 32: bad e_name length [ 451.431648][ T4471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.989979][ T9970] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 452.021169][ T9970] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 452.034437][ T9970] EXT4-fs (loop6): This should not happen!! Data will be lost [ 452.034437][ T9970] [ 452.044385][ T9970] EXT4-fs (loop6): Total free blocks count 0 [ 452.050561][ T9970] EXT4-fs (loop6): Free/Dirty block details [ 452.056629][ T9970] EXT4-fs (loop6): free_blocks=2415919504 [ 452.056779][T22047] loop5: detected capacity change from 0 to 2048 [ 452.063088][ T9970] EXT4-fs (loop6): dirty_blocks=4368 [ 452.074077][ T9970] EXT4-fs (loop6): Block reservation details [ 452.080075][ T9970] EXT4-fs (loop6): i_reserved_data_blocks=273 [ 452.170883][ T9970] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2048 with max blocks 2048 with error 28 [ 452.211696][T22051] syz.5.6544: attempt to access beyond end of device [ 452.211696][T22051] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 452.307876][T22053] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 452.501162][T22058] __nla_validate_parse: 2 callbacks suppressed [ 452.501237][T22058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6547'. [ 452.569877][T22058] siw: device registration error -23 [ 452.582313][T22056] xt_TCPMSS: Only works on TCP SYN packets [ 452.588320][T22060] loop5: detected capacity change from 0 to 2048 [ 452.623313][T22058] loop6: detected capacity change from 0 to 2048 [ 452.774640][T22060] syz.5.6549: attempt to access beyond end of device [ 452.774640][T22060] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 452.805638][T22065] xt_TCPMSS: Only works on TCP SYN packets [ 452.812693][T22072] loop6: detected capacity change from 0 to 2048 [ 452.844626][T22072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.023116][T22081] sd 0:0:1:0: device reset [ 453.104863][T22083] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 453.143481][ T9963] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 453.168683][ T9963] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1584 with error 28 [ 453.181227][ T9963] EXT4-fs (loop6): This should not happen!! Data will be lost [ 453.181227][ T9963] [ 453.192108][ T9963] EXT4-fs (loop6): Total free blocks count 0 [ 453.198239][ T9963] EXT4-fs (loop6): Free/Dirty block details [ 453.204174][ T9963] EXT4-fs (loop6): free_blocks=2415919504 [ 453.210001][ T9963] EXT4-fs (loop6): dirty_blocks=3632 [ 453.215409][ T9963] EXT4-fs (loop6): Block reservation details [ 453.222707][ T9963] EXT4-fs (loop6): i_reserved_data_blocks=262 [ 453.336317][ T9963] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 1584 with max blocks 2048 with error 28 [ 453.477722][T22080] ================================================================== [ 453.485868][T22080] BUG: KCSAN: data-race in __mark_inode_dirty / move_expired_inodes [ 453.493896][T22080] [ 453.496239][T22080] read-write to 0xffff88812b4397e8 of 4 bytes by task 9970 on cpu 0: [ 453.504327][T22080] move_expired_inodes+0x17a/0x400 [ 453.509465][T22080] queue_io+0xd9/0x2c0 [ 453.513572][T22080] wb_writeback+0x226/0x5c0 [ 453.518094][T22080] wb_workfn+0x194/0x910 [ 453.522386][T22080] process_scheduled_works+0x4ce/0x9d0 [ 453.527880][T22080] worker_thread+0x582/0x770 [ 453.532500][T22080] kthread+0x489/0x510 [ 453.536591][T22080] ret_from_fork+0x4b/0x60 [ 453.541031][T22080] ret_from_fork_asm+0x1a/0x30 [ 453.545840][T22080] [ 453.548172][T22080] read to 0xffff88812b4397e8 of 4 bytes by task 22080 on cpu 1: [ 453.555814][T22080] __mark_inode_dirty+0x18e/0x760 [ 453.560872][T22080] mark_buffer_dirty+0x133/0x210 [ 453.565837][T22080] block_write_end+0x12e/0x210 [ 453.570626][T22080] ext4_da_write_end+0x1ed/0x7b0 [ 453.575589][T22080] generic_perform_write+0x312/0x490 [ 453.580926][T22080] ext4_buffered_write_iter+0x1ee/0x3c0 [ 453.586508][T22080] ext4_file_write_iter+0x383/0xf00 [ 453.591733][T22080] iter_file_splice_write+0x5f2/0x970 [ 453.597131][T22080] direct_splice_actor+0x156/0x2a0 [ 453.602256][T22080] splice_direct_to_actor+0x312/0x680 [ 453.607665][T22080] do_splice_direct+0xda/0x150 [ 453.612447][T22080] do_sendfile+0x380/0x640 [ 453.616888][T22080] __x64_sys_sendfile64+0x105/0x150 [ 453.622101][T22080] x64_sys_call+0xb39/0x2fb0 [ 453.626728][T22080] do_syscall_64+0xd0/0x1a0 [ 453.631239][T22080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.637131][T22080] [ 453.639456][T22080] value changed: 0x00000020 -> 0x00010022 [ 453.645171][T22080] [ 453.647489][T22080] Reported by Kernel Concurrency Sanitizer on: [ 453.653651][T22080] CPU: 1 UID: 0 PID: 22080 Comm: syz.6.6553 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 453.666157][T22080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 453.676218][T22080] ================================================================== [ 453.748510][T22096] loop5: detected capacity change from 0 to 2048 [ 453.932159][T22095] syz.5.6561: attempt to access beyond end of device [ 453.932159][T22095] loop5: rw=0, sector=1936, nr_sectors = 128 limit=2048