last executing test programs: 5.231932645s ago: executing program 4 (id=4306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x400010, &(0x7f0000394000/0x3000)=nil, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x2}, 0x8012, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xf865, 0xc0d, 0x80, 0x1, 0xc7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0xb, @void, @value, @void, @value}, 0x48) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206c1801d82b68d04f3048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1bfd151d7bb5754603b6b0e362d8041bdc61529260e6c", 0x75}, {&(0x7f0000002880)="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", 0x11a}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff160f374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030d070047bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f209da5", 0xac}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a5", 0x3b}, {&(0x7f0000000180)="df2966f83be61be11a9831c2e62c48d200e5ef6d8633d6649f81483cbc10718f59d4d3dc25fb782b4fdc860f55724dd87c32431d89b0308d4b485cd6e33677f9a435b540f044c23f51305edb2a14923925ef64a400ea0d6ea8c9a927449c6b8a8785fd6c9624e876a2572a2b668b940f38c4eaad93", 0x75}], 0x5}}], 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) 5.027767126s ago: executing program 1 (id=4307): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) 3.766407164s ago: executing program 1 (id=4316): openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@nodioread_nolock}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000e90000000000000003000600000000000200f10100000000000000000000000002000100000000000000000d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=@delchain={0x2c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0xa}]}, 0x2c}}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002e000100000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00Mh\x00'/23], 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000380)=ANY=[@ANYBLOB="155fe1f0cb9c9286d6f72adfa5aa3f4fdd72715bebabdc98c77cf5f2a90c46ea89e49ec7805e715976e02cc92fdb84a81a5ce1f9f76d7c4bd4110eb5940d0a8bb154b109f83aa40ba6a84dd58d5bf84276a26f28"], 0x1) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040003000c0001"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) 3.471598166s ago: executing program 4 (id=4318): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0), 0x4) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 3.154810688s ago: executing program 0 (id=4322): socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_pts(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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", @ANYRES32=r1], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 3.122668169s ago: executing program 1 (id=4323): socketpair(0x27, 0x0, 0xffffffff, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='netlink_extack\x00'}, 0xb) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0xc4}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000790698e1000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffff8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 3.089781419s ago: executing program 0 (id=4324): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') fchdir(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x100) socket$inet6(0xa, 0x4, 0x8e68) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f0000000040)=0x12, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x102020, 0x800000000, 0x0, 0x6, 0x3, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@deltclass={0x30, 0x29, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x0, 0x7}, {0x4}}, [@tclass_kind_options=@c_netem={0xa}]}, 0x30}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x3, &(0x7f0000000440)={@dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010101, @empty}, 0xc) 2.803711631s ago: executing program 1 (id=4326): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000140)={[{@shortname_win95}, {@numtail}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}]}, 0xfa, 0x299, &(0x7f0000000280)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000680), 0x1, 0x400000) sendto$inet(r3, &(0x7f0000000780)="ba62713232d339ab83bbb749f626eea91db19b68b065e7c0a03118433337916a233b751146fcb82ba2c1b6bacecec9ddbc97ff2aac8877777d5fa6e38d1a4c972021056b2aee0f16dabb81ac391349703e34787a8d332d5319cdacef83e2289d43218d69a657fef5f8342eae1b9c3b32ac041cf64559c092cbecb66fbc90db3619d8c64ee2f5783145398b45e5a8ea81a980a5c03130e6b8eb5c1bd260ec8894c017472433b71ca952bed28819f8945bcb6eeffe6c550266c8cd075be3c7b028", 0xc0, 0x20000000, &(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) select(0x3f, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1000000100000000, 0xfe, 0x5, 0x4004, 0x0, 0x8}, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") 2.772911921s ago: executing program 3 (id=4327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r3}) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5408, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f00000003c0)="85", 0x1}], 0x1, 0x1200, 0x0, 0x3) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYRES64=r7, @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r8}, 0x20) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000800), 0x531900, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syslog(0x3, &(0x7f0000002180)=""/183, 0xb7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0xf00}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x80, 0xcd59531204c78243, 0xd7b, 0x9, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp_prespec={0x44, 0x14, 0xa4, 0x3, 0x2, [{@loopback, 0x2}, {@private=0xa010500, 0x9028c768}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sync() 2.686399431s ago: executing program 0 (id=4328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) 2.596871542s ago: executing program 4 (id=4329): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080028bd7000ffdbdf253700000008000300", @ANYRES32=r4, @ANYBLOB="dca470e6b6d25a6da7503f9bda026e78d8603e95ffef97a636bb5704612d9440cdc213abee93efc10532ae30caefd554bf4e1917099454b81cbf80dfce946e75a537253e9d5c703a5b1217b7afbf8207a6593b2fcd92d8588ed8b70d40252cde4ab431d9c9410e820a75b50ecaec79d4edb9daa633b6f6cfe0fc186b2f76c344004db6aa0a4687f4c6"], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0xcc1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={&(0x7f0000000640)="41058e323c638f55000000000000040000000000000000d1811d43ef31510074e0f269e23c650e28956774f7cebe3cfbf294e39f41e641c7b3fd85ff444079457f818991e90683723b5e84240bf825e47bd25bee1f2e24f84e78176067e3eb213822a06387e7f7b7aa934f845c57e0318aab7aa30f0e07c46441dd617e8d04f4a64991a20af2b107d758a1863e84c51a2601c95dc000c573ffe9a9539bc2e5238924d86f86a890e309eb", &(0x7f0000000400)=""/51, &(0x7f00000004c0)="13e7b438748b4504437e11ba95cf12223282eb18c5ef9a39104730e1a33419dc4c43ebe5d17fb9feb07030ea971109df20ae65ca4b9bd5985965961576be97c45272552d1c20bef47b3b88e37a8779dbdb4ffe0a20b8e171fa96f9396f16b28e22db7d632997ad4d67c7260ac2a3ae705092b4e6422b", &(0x7f0000000800)="1473702eda8754f19e424babf3f179399f01b47ca073fe6f52122eac9e7b7cfd0811f93efc3788389f6279f40d41bcf38fe3055762af52a37798d515a255b1d2ce8f71f06f8b62a4802d78b36d7f343d658e715224ce75aed8f3c2f5102dee62fb37f39b17eed4249807e8fc097a3baff8349b6b6e7a6683a36b030f958f2cd676a5d38daae24deb39745da4a1728853a6bd516b4d28d2bfe8ce5551447b1a36e577ab0678c02bce04f325cb9068c2b33b11f7edf69edc807edbce696a88b390cb6da9e556c210a1979503242d3072bb7c16682afc8ea95009ec478a5f90e5020cd4baa99c563bb35b", 0x7ffb, 0xffffffffffffffff, 0x4}, 0x38) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x50) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}], 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000005200df25000000008964f2f13d5588f8ae36a47da952c7147d972cae048fecd162643570cbf643f605508cff66a1900000000000000000"], 0x14}}, 0x0) r10 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r10, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000600)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x120030, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$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") 2.473670473s ago: executing program 3 (id=4330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000e90000000000000003000600000000000200f10100000000000000000000000002000100000000000000000d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 2.342188484s ago: executing program 3 (id=4331): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x2000000000000100, 0x2202, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x3005, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x0, 0xfffffffd}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x540, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.148061705s ago: executing program 4 (id=4332): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}, 0x1, 0xd, 0x0, 0x8004}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) 1.670880139s ago: executing program 0 (id=4333): setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') 1.318274821s ago: executing program 3 (id=4335): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x49b, &(0x7f0000001040)="$eJzs3MtvVNUfAPDvnbY8fjzaHyIKglbQSHy0tKCycKFGExeamOgCl7UtiAzU0JoIabQYg0tD4t64NPEvcOfGqAtj4lYTl4aEaGNCcTXmvugwnSltaTvS+XyS6ZxzH3PO9957Zs69p/cG0LH60z9JxPaI+DUievPsrQv0529zs9OjN2anR5Oo1d74M8mWuz47PVouWq63rcgcrkRUPkni+WRhuZMXLp4ZqVbHzxf5wamz7w1OXrj41OmzI6fGT42fGz5+/NjRoWefGX56VeJM47q+78OJ/XtfeevKa6Mnrrz9w9dptfYcyOfXx3FbN5oE1ER/utX+qmUa5z26jLrfDXbUpZPuNlaEZemKiHR39WTtvze6Yn7n9cbLH7dec/P6VBBYM+lv0yIteaYGbGBJtLsGQHuUP/Tp+W/5Wqeux3/CtRciNhXpudnp0bmb8XdHpZjes4bl90fEiZl/vkhfsdzrEAAAK5D1bZ5s1v+rxJ7sPR/r2FmMofRFxP8jYldE3BMRuyPi3ohs2fsi4v585VrvEsvvb8gv7P9Urjat8ypJ+3/P1fX95uriL976uorcjiz+nuTk6er4kWKbHI6ezWl+aJEyvn3pl89azavv/6WvtPyyL1hU4Gp3wwW6sZGpkdXaCNcuRezrbhZ/cnMkID0C9kbEvuV99M4ycfrxr/a3Wuj28S9iFcaZal9GPJbv/5loiL+ULD4+ObglquNHBsujYqEff778eqvy7yj+VXDt4AN5Yn7/NyzR+3eSj9f2RLU6fn5y+WVc/u3Tluc0Kz3+NyVvZmPWP72TT/tgZGrq/FDEpuTVLF+e02XTh+fXLfPl8unxf/hQ8/a/q1gnjT/dSulBfCAiHoyIh4q6PxwRByPi0CLxf//iI+8uEn8SSbRv/1+KGGv6/Xfz+O9L6sfrV5DoOvPdN61GzOv3fy1ptf+PxUz2XZvLvv9uY6kVvMPNBwAAAHeFSkRsj6QykKf7t0elMjCQ/w//7vhfpToxOfXEyYn3z43l9wj0RU+lvNLVW3c9dCiZKT4xzw8X14rL+UeL68afd23N8gOjE9WxNscOnW7bre0/yvaf+qOr3bUD1pz7taBzNbb/SpvqAay/pfz+OxeAjenW9r8l/bO1XXUB1pfzf+hczdr/Rw15/X/YmBY+AOj3Jo+sAzYi/X/oXNo/dC7tHzpSfif8lVjJff0rT5Q3C6z8c7Ys+Q7/TkmUT7xYy7K2xvyUqLQ95A5KpC1mfQudf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3ezfAAAA//+5XeWQ") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_open_dev$tty1(0xc, 0x4, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfd14) socket$vsock_stream(0x28, 0x1, 0x0) 1.178030182s ago: executing program 2 (id=4336): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') fchdir(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x100) socket$inet6(0xa, 0x4, 0x8e68) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f0000000040)=0x12, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x102020, 0x800000000, 0x0, 0x6, 0x3, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@deltclass={0x30, 0x29, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x0, 0x7}, {0x4}}, [@tclass_kind_options=@c_netem={0xa}]}, 0x30}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x3, &(0x7f0000000440)={@dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010101, @empty}, 0xc) 703.618775ms ago: executing program 1 (id=4337): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x0, 0xfffffffc, 0xffffffffffffff83, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x18, 0x0, "50e4d101a949f3f4d3479fb3110fbb83dc7a2414e74ef9c682c427e1a542df3531062020eb16da11d6707d82272beab27a1da6e527cceef0e7db687b56729c203d01b7693f6d4c81a64de132e818dea3"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x1ff, @mcast1, 0x5}}, 0x0, 0x0, 0x0, 0x0, "d3d87bc1779db0260137ffea3b267abe0be604d99164ceede9ce200eb018abebbf99a8ae25b276a2357aabc5bfbcd104244b1bcd3f8dcc8bb1afb8237f33ee41a904e61d65a7bacfec9dc935544d3f64"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e26, 0x10001, @private0, 0x6}}, 0x0, 0x0, 0x6, 0x0, "ea1405f7ed3afb477e97815317dd90b0a9f242cdedf08f407b4090210f80a0719e68fabccef0ed76d7a757678ed4e53a259f22da747facb62bf4b908fe0781eb0402821b7c58f51226b4e01641b245e5"}, 0xd8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000840)="a5bfe2c65fe5343298698d4034d6ef36ea4cdab068b370bd5252dc688c2e27f23b32c0e7a94300010f4eea7538226231c8f6a1555d28f32eba6e0e3e66de53de40452734e65b7281200800b98053dcf9f15107d9", &(0x7f0000000640)="e2adf06d33d1b7611260bb052106145d71810c3e664339ff4ae7c833a1813ce0ab356f1b3fba087c6af8c6ce7c53360de80c4c78752d1b8702320c54e772677e653ab7e3", 0x2, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x806, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES16=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0xca02}) r8 = socket$netlink(0x10, 0x3, 0x0) preadv(r7, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) sendfile(r4, r9, 0x0, 0x1000000000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) listen(r2, 0x3) socket$inet_dccp(0x2, 0x6, 0x0) accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 685.163115ms ago: executing program 2 (id=4338): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') fchdir(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x100) socket$inet6(0xa, 0x4, 0x8e68) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f0000000040)=0x12, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x102020, 0x800000000, 0x0, 0x6, 0x3, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@deltclass={0x30, 0x29, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x0, 0x7}, {0x4}}, [@tclass_kind_options=@c_netem={0xa}]}, 0x30}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x3, &(0x7f0000000440)={@dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010101, @empty}, 0xc) 675.221756ms ago: executing program 4 (id=4339): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 600.497056ms ago: executing program 2 (id=4340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r3}) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5408, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f00000003c0)="85", 0x1}], 0x1, 0x1200, 0x0, 0x3) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYRES64=r7, @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r8}, 0x20) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000800), 0x531900, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syslog(0x3, &(0x7f0000002180)=""/183, 0xb7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0xf00}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x80, 0xcd59531204c78243, 0xd7b, 0x9, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp_prespec={0x44, 0x14, 0xa4, 0x3, 0x2, [{@loopback, 0x2}, {@private=0xa010500, 0x9028c768}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sync() 537.606386ms ago: executing program 4 (id=4341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 362.145548ms ago: executing program 3 (id=4342): socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_pts(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRES32=r1], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 299.633418ms ago: executing program 3 (id=4343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = syz_io_uring_setup(0x4003839, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x7ffe, 0x34b}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x14) io_uring_enter(r6, 0x6e2, 0x600, 0x1, 0x0, 0xfffc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x140, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1e, 0x0, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f", 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8000}, 0x50) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) msync(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) request_key(&(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000c00)='(.\'\x00\xcf\xa5\xd2s\x9c\xcc\xb3\r\xeb\xbe\xcf\xc7\xfc-\xe2\xa0=\xc5\xe6\xd9\xc7A\xf5\x99^\x81\xb4-|\tt!\xe7\xec\x97\xf8\x99\x83\xb1\xdc1\x9f\xe6\x9a8\xfd\xc2W\xda\xc4*\xe0\xa9\xe9\x83\b\x15\\7\x8eQ\xf9\xd6W\xd1+j\x10S\xc1\x853\xf8\x8e\x062\x14\x8f\a\x03\xa2hOO\xaac\xc0\t9\xcb\x88k\xeb\xf0\xd2\x06\xb5:\xbcS\f\xb9(\xc9!\xc3\xca\xe8\x9b9\x89\xd6ZB!1\'\xf0,,\xe3\x02\x8a\xea\xf1\xdfKt\x92\xebU\x1f\xdfq\xab3L\x9d\xcf\xb1\b\xe9O@\xc4a\x8b\x95}?\xa9x\xbd\b\xc93e\xaf\x824<\xbd\x11)I&\xbe\tR\xf0\x81L\xdc\x86\x0f@\xb1\xc2P\xe8J\xedd{\xac\x85X\x1b\xd6\x97X\xce\f,\xd77S\xcc\xce\xe0\xad\xd3L\x1cN<=\x1f\xb0\x8d!\xb5!\xaf\x8d\xf1\xcc\xf7\xdb\x16\xb5\x9f\xdck\xa6$\xb5\xe1\xf5\x1e\x81\x8a\xcb\x98\xb6\xdb\x8e\f=\x1ae\xcc[$\xba*\x01\x00\x00\x00\x00\x00\x00\x00e\x12H\xbbE\xdbN\x80\xcb\xbd\xea\xe0O\x80\xe6Pu\x94\xf8\xb7,\xb8\xe0c\xc54\xbc^\x05W\x8d\xd0\xd1\x1bU<\xd6\xd3\x06\xe86\x89\xf6\x05\xfd\xf9\xf9\x05`\xf3s\xe5g\xc2\x82\xa8\xe9\x97@\x8fP\x17\x96\xe0b9\x83\x90\x8f\xc0\xf0\x99\x86V\xc7(Z\xea\xd8\xee\xe6KZ\x104ai\'\xdd\xf0\xef\xd3;\x83-\x92d\x04\xc2\xba,\x88\xc3\xb4\xc9L\xd4c\x9a6\xcdW\x8f\x8a\xdfq\xc4\x0e\xe8\x85\x1eQM\x8a#\xe3\xc5)\xc0\x9eY:\xc1\x85`or<\xef\xde\x18]%R\xf6\x95\xf9\xa4`\xd9\x9a\x98?\xeb8h\xe0\x92\x8f4]\x84\x80.(\x99W\xe5v\xdb\x0fs', r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r2], 0x7c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x0) pwritev2(r10, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) truncate(&(0x7f0000000080)='./file1\x00', 0xfe0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 279.263238ms ago: executing program 2 (id=4344): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @ldst, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0xc, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x4}, 0x40db, 0x2, 0x8, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 252.387268ms ago: executing program 1 (id=4345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000a020000000000000000000001"], 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000004700000001000100080000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000007ffcb964000000000000000000e62c489d000000"], 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)=0x60030000000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001010000000000000900110000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186a00000000000085100000faffffff9500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], 0x0, 0x3da, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x4, 0x4c5f, 0x4}, 0x10, 0x0, r5, 0x2, &(0x7f00000003c0)=[r6, r6, r6, 0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x1, 0x1, 0x7}, {0x2, 0x4, 0xe, 0xb}], 0x10, 0x5, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002080)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e8, 0x1b8, 0x0, 0x288, 0x358, 0x1b8, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0x190, 0x1b8, 0x0, {0x0, 0x3a010000}, [@common=@unspec=@string={{0xc0}, {0x80, 0x865, 'kmp\x00', "871257ca19501bbbedba3bdc1aa5b51de78b223e6445cbccae6de2473931cc713fede9cd10a827b6751d9653b8682787f50788388b04a4de4913b55559d4a2d0804d5d3fd70c52275dadc020d1d2f80a44858d311cf65eca9398cf1889047e222bdb37c576d36b9e727781e993a7b9ce44706a3f605e89ddc606c841cf43fe0c", 0x59, 0x1, {0x5}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x35}}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0xff000000, 0xffffffff, 0xff, 0xffffff00], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'rose0\x00', 'sit0\x00', {0xff}, {0xff}, 0xd4, 0x80, 0x4, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) r7 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r7, 0x6a, 0x4, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r9 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfb4b76d0fe3d1681, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 227.223248ms ago: executing program 0 (id=4346): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080028bd7000ffdbdf253700000008000300", @ANYRES32=r4, @ANYBLOB="dca470e6b6d25a6da7503f9bda026e78d8603e95ffef97a636bb5704612d9440cdc213abee93efc10532ae30caefd554bf4e1917099454b81cbf80dfce946e75a537253e9d5c703a5b1217b7afbf8207a6593b2fcd92d8588ed8b70d40252cde4ab431d9c9410e820a75b50ecaec79d4edb9daa633b6f6cfe0fc186b2f76c344004db6aa0a4687f4c6"], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0xcc1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={&(0x7f0000000640)="41058e323c638f55000000000000040000000000000000d1811d43ef31510074e0f269e23c650e28956774f7cebe3cfbf294e39f41e641c7b3fd85ff444079457f818991e90683723b5e84240bf825e47bd25bee1f2e24f84e78176067e3eb213822a06387e7f7b7aa934f845c57e0318aab7aa30f0e07c46441dd617e8d04f4a64991a20af2b107d758a1863e84c51a2601c95dc000c573ffe9a9539bc2e5238924d86f86a890e309eb", &(0x7f0000000400)=""/51, &(0x7f00000004c0)="13e7b438748b4504437e11ba95cf12223282eb18c5ef9a39104730e1a33419dc4c43ebe5d17fb9feb07030ea971109df20ae65ca4b9bd5985965961576be97c45272552d1c20bef47b3b88e37a8779dbdb4ffe0a20b8e171fa96f9396f16b28e22db7d632997ad4d67c7260ac2a3ae705092b4e6422b", &(0x7f0000000800)="1473702eda8754f19e424babf3f179399f01b47ca073fe6f52122eac9e7b7cfd0811f93efc3788389f6279f40d41bcf38fe3055762af52a37798d515a255b1d2ce8f71f06f8b62a4802d78b36d7f343d658e715224ce75aed8f3c2f5102dee62fb37f39b17eed4249807e8fc097a3baff8349b6b6e7a6683a36b030f958f2cd676a5d38daae24deb39745da4a1728853a6bd516b4d28d2bfe8ce5551447b1a36e577ab0678c02bce04f325cb9068c2b33b11f7edf69edc807edbce696a88b390cb6da9e556c210a1979503242d3072bb7c16682afc8ea95009ec478a5f90e5020cd4baa99c563bb35b", 0x7ffb, 0xffffffffffffffff, 0x4}, 0x38) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x50) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000005200df25000000008964f2f13d5588f8ae36a47da952c7147d972cae048fecd162643570cbf643f605508cff66a1900000000000000000"], 0x14}}, 0x0) r9 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r9, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000600)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x120030, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$eJzs3E1sVNUeAPD/nc70Ax6PPh6PJ4hJEY2NxhYKCgs3GE1caGLEhS6bthCkUENrIoRISQwuDYl749ItC7fqzrgycYsLFyaGhBgSA7gac2funU7no5/TjjC/XzKdc+49955z7rnn3jP3zDSAnjWS/kki/hURtyNidzW6PMFI9e3BvatTD+9dnYrFcvn0H0kl3f00nilk7zuzfY4WIgqfJg07rJq/fOX85OzszKUsPr5w4cPx+ctXXjx3YfLszNmZixMnTx4/dvTEyxMvrb9SLfJL63X/wCdzB/e/8f7Nt6aK+fLB7L2+Hp0yEiP1RblVX6xnO51Zl+2qCyfFLhaEdUnbLW2uUqX/746+0HjQK8rlcnmg/erFcqPrTUuAR1YSbVYMZpcH4DGV3+jTz7/5q3b3H9ry4UfX3T1V/QCU1vtB9qquKdaeZ5QaPt920khEvLf415fpK1Z6DvHrFhUAAOg5353KR4KN479C7KtL9+9sDmU4Iv4TEXsi4r8RsTci/hdRSfv/iHiiMYMkorxC/nsb4s3jn8KdzdRvNen475Vsbmv5+C8f/cVwXxbblX4eri6bOZIdk9EoDZw5NztzdIU8vn/t58/brasf/6WvNP98LJiV406x4QHd9OTC5IYr3ODu9YgDxcb6J8W04fKZgCQi9kfEgXXsd7gufO75rw/WIqXl6Vavf0W5xZRedGKqovxVxHPV9l+MZe2/lGOy8vzk+GDMzhwZT8+CIy3z+PGnG2+3y3/V+n/zW+Mmr5/49vRmq12Ttv+OuvM/8vnbpfoPJxFJbb52fv153Pjls8p+Rw43r9vo+d+fvFsJ92fLPp5cWLh0NKI/ebN5+cTStnk8T5/Wf/Rw6/6/J9smPRJPRkR6Ej9VdwKnZT8UEU9HRIuq1fzw6jMftFu3xvN/y6T1n25x/bu2vP2X5us3EOg7f+j2wzYXj7W1//FKaDRb0vr6lyy7RKy1gB05iAAAAPAPV4jKd/8LY7VwoTA2Vn0GtDd2FGbn5hdeODP30cXp6m8EhqNUyJ90VZ8Hl5L8+edwXXyiIX4se278Rd9QJT42NTc73e3KQ4/bWenzSVP/T/3e1+3SAVvOT36gd63W//fd3KaCANvO/R96V13/X2yTZNE3ZeDx5P4PvatV/7+2gW2AR0tZX4aepv9D7yrGO7VwoaslAbab+z/0pM38rn/1QHmgYclANTAYzYljcGuKMdQirxaBg1t2EPJAOrJa51Z/9kdsPvehjWyV/zeFtmmisL4dDkTzqr7o9HEuxRqO2Nl9HT/5y9l35Tt92tzaln7aKtCVyxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDH/R0AAP//b9HZQw==") 182.076029ms ago: executing program 0 (id=4347): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000140)={[{@shortname_win95}, {@numtail}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}]}, 0xfa, 0x299, &(0x7f0000000280)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000680), 0x1, 0x400000) sendto$inet(r3, &(0x7f0000000780)="ba62713232d339ab83bbb749f626eea91db19b68b065e7c0a03118433337916a233b751146fcb82ba2c1b6bacecec9ddbc97ff2aac8877777d5fa6e38d1a4c972021056b2aee0f16dabb81ac391349703e34787a8d332d5319cdacef83e2289d43218d69a657fef5f8342eae1b9c3b32ac041cf64559c092cbecb66fbc90db3619d8c64ee2f5783145398b45e5a8ea81a980a5c03130e6b8eb5c1bd260ec8894c017472433b71ca952bed28819f8945bcb6eeffe6c550266c8cd075be3c7b028", 0xc0, 0x20000000, &(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) select(0x3f, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1000000100000000, 0xfe, 0x5, 0x4004, 0x0, 0x8}, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") 128.135279ms ago: executing program 2 (id=4348): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x24a, &(0x7f0000000d40)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoLN2SgcyHGICCqciNgoiRAT7LJWNhZaq6SyCWJntJQ0wUYRrKKmiI2gwcJgocXK7iRhTVbUbNw5Mp8PTOZP5s3vDTvft9u83QCNdTHJ5SStJLNJOkmK0RPurZaL+7urM5vXk37/qV+K4XnVfuWg3YUkvSSPJNkoi7zSTpbXn9v5beuJB95e6tz/4fqzM1O9yX27O9tP7n1w9a1Prjy8/NU3P10tcjndv9zX6SvGHGsXyW3/R7EbRNGuuwf8G9fe+PjbQe5vT3LfMP+dlKlevHcWb9ro5KH3/67tuz9/fec0+wqcvn6/M3gP7PWBximTdFOUc0mq7bKcm6s+w3/XOl++urD4+uzLC0vzL9U9UgGnpZtsP/7ZuU8vHMn/j60q/8DZNcj/09fWvh9s77Xq7g0wFXdVq0H+Z19YeTDyD40j/9Bc8g/NJf/QXPIPzSX/0FzyD2dY52Cjd3hodNKN/ENzyT80l/xDc43mHwBolv65umcgA3Wpe/wBAAAAAAAAAAAAAAAAAACOW53ZvH6wTKvmF+8lu48laY+r3xr+HnFy8/Dv+V+LwWmHiqrZRJ6/Z8ILTOijmmdf3/JDvfW/vLve+ivzSe/NJJfa7ePPX7H//J3crf/w/86LExb4j4oj+48+M936R/2xVm/9K1vJ54Px59K48afMHcP1+PGnO/oVyyf02u8TXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICp+TMAAP//GEht1Q==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) 0s ago: executing program 2 (id=4349): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0), 0x4) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) kernel console output (not intermixed with test programs): access beyond end of device [ 506.162438][T15230] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 506.184746][T15230] syz.1.3714: attempt to access beyond end of device [ 506.184746][T15230] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 506.239701][T15230] syz.1.3714: attempt to access beyond end of device [ 506.239701][T15230] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 506.302268][T15230] syz.1.3714: attempt to access beyond end of device [ 506.302268][T15230] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 506.316655][T15230] syz.1.3714: attempt to access beyond end of device [ 506.316655][T15230] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 506.339038][T15230] syz.1.3714: attempt to access beyond end of device [ 506.339038][T15230] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 506.352586][T15230] syz.1.3714: attempt to access beyond end of device [ 506.352586][T15230] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 506.367060][T15230] syz.1.3714: attempt to access beyond end of device [ 506.367060][T15230] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 506.380713][T15230] syz.1.3714: attempt to access beyond end of device [ 506.380713][T15230] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 506.415559][T15237] random: crng reseeded on system resumption [ 506.623113][T15241] lo speed is unknown, defaulting to 1000 [ 506.629281][T15241] lo speed is unknown, defaulting to 1000 [ 506.635252][T15241] lo speed is unknown, defaulting to 1000 [ 506.725981][T15241] infiniband sz1: set down [ 506.730546][T15241] infiniband sz1: added lo [ 506.735095][ T3369] lo speed is unknown, defaulting to 1000 [ 506.770293][T15241] RDS/IB: sz1: added [ 506.774375][T15241] smc: adding ib device sz1 with port count 1 [ 506.780778][T15241] smc: ib device sz1 port 1 has pnetid [ 506.786731][ T3369] lo speed is unknown, defaulting to 1000 [ 506.792857][T15241] lo speed is unknown, defaulting to 1000 [ 506.912619][T15241] lo speed is unknown, defaulting to 1000 [ 506.948532][T15241] lo speed is unknown, defaulting to 1000 [ 507.011436][T15241] lo speed is unknown, defaulting to 1000 [ 507.093511][T15241] lo speed is unknown, defaulting to 1000 [ 508.000251][T15270] random: crng reseeded on system resumption [ 508.217429][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3730'. [ 508.232043][T15274] bridge0: port 4(gretap0) entered blocking state [ 508.238644][T15274] bridge0: port 4(gretap0) entered disabled state [ 508.245461][T15274] gretap0: entered allmulticast mode [ 508.251338][T15274] gretap0: entered promiscuous mode [ 508.256931][T15274] bridge0: port 4(gretap0) entered blocking state [ 508.263423][T15274] bridge0: port 4(gretap0) entered forwarding state [ 508.263664][T15264] loop4: detected capacity change from 0 to 128 [ 508.272657][T15276] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 508.276647][T15280] gretap0: left allmulticast mode [ 508.291044][T15280] gretap0: left promiscuous mode [ 508.296238][T15280] bridge0: port 4(gretap0) entered disabled state [ 508.305044][T15278] bridge0: port 3(gretap0) entered blocking state [ 508.311620][T15278] bridge0: port 3(gretap0) entered disabled state [ 508.318669][T15278] gretap0: entered allmulticast mode [ 508.328909][T15278] gretap0: entered promiscuous mode [ 508.334657][T15278] bridge0: port 3(gretap0) entered blocking state [ 508.341145][T15278] bridge0: port 3(gretap0) entered forwarding state [ 508.349087][T15281] gretap0: left allmulticast mode [ 508.354284][T15281] gretap0: left promiscuous mode [ 508.359547][T15281] bridge0: port 3(gretap0) entered disabled state [ 508.434046][T15291] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 508.449850][T15291] loop3: detected capacity change from 0 to 256 [ 508.456806][T15291] FAT-fs (loop3): bogus sectors per cluster 223 [ 508.463105][T15291] FAT-fs (loop3): Can't find a valid FAT filesystem [ 508.513180][T15291] loop3: detected capacity change from 0 to 512 [ 508.524215][T15295] loop2: detected capacity change from 0 to 512 [ 508.546375][T15295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 508.555365][T15291] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 508.605506][T15295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.618407][T15291] EXT4-fs (loop3): 1 truncate cleaned up [ 508.626604][T15291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.640904][T15295] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.726803][T15295] netlink: 'syz.2.3737': attribute type 1 has an invalid length. [ 508.734760][T15295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3737'. [ 508.758148][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.816084][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.827389][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3739'. [ 508.833208][T15302] netlink: 'syz.3.3738': attribute type 4 has an invalid length. [ 508.836543][T15304] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 508.917525][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 508.917543][ T29] audit: type=1326 audit(1741367655.587:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15311 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 508.947398][ T29] audit: type=1326 audit(1741367655.587:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15311 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 508.986869][ T29] audit: type=1326 audit(1741367655.627:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15311 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 509.010582][ T29] audit: type=1326 audit(1741367655.627:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15311 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 509.034229][ T29] audit: type=1326 audit(1741367655.627:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15311 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 509.058103][ T29] audit: type=1326 audit(1741367655.627:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15311 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 509.081812][ T29] audit: type=1326 audit(1741367655.627:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15311 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 509.105510][ T29] audit: type=1326 audit(1741367655.627:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15311 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 509.129270][ T29] audit: type=1326 audit(1741367655.627:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15311 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 509.152909][ T29] audit: type=1326 audit(1741367655.627:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15311 comm="syz.0.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 509.991409][T15326] loop3: detected capacity change from 0 to 128 [ 510.077533][T15319] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 510.466327][T15337] loop3: detected capacity change from 0 to 512 [ 510.534469][T15337] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 510.573177][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3753'. [ 510.586010][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3751'. [ 510.595975][T15351] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 510.616573][T15346] hsr_slave_1 (unregistering): left promiscuous mode [ 510.631185][T15351] loop1: detected capacity change from 0 to 512 [ 510.639141][T15337] EXT4-fs (loop3): 1 truncate cleaned up [ 510.645979][T15337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.660935][T15355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3751'. [ 510.756015][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.777469][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3754'. [ 513.326299][T15371] loop4: detected capacity change from 0 to 512 [ 513.785429][T15378] random: crng reseeded on system resumption [ 513.907766][T15371] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.3757: Failed to acquire dquot type 1 [ 513.919750][T15371] EXT4-fs (loop4): 1 truncate cleaned up [ 513.925962][T15371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.938494][T15371] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.040791][T15387] tipc: Enabling of bearer rejected, already enabled [ 514.079611][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 514.079629][ T29] audit: type=1326 audit(1741367660.747:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 514.109331][ T29] audit: type=1326 audit(1741367660.747:8155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 514.132889][ T29] audit: type=1326 audit(1741367660.747:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 514.156424][ T29] audit: type=1326 audit(1741367660.747:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 514.180023][ T29] audit: type=1326 audit(1741367660.747:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 514.203578][ T29] audit: type=1326 audit(1741367660.747:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 514.227076][ T29] audit: type=1326 audit(1741367660.747:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 514.250620][ T29] audit: type=1326 audit(1741367660.747:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 514.274124][ T29] audit: type=1326 audit(1741367660.747:8162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 514.297642][ T29] audit: type=1326 audit(1741367660.747:8163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15389 comm="syz.3.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 514.342126][T15387] IPVS: persistence engine module ip_vs_pe_& not found [ 514.377129][T15392] loop3: detected capacity change from 0 to 8192 [ 514.399027][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.447294][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3764'. [ 514.467114][T15400] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 514.489258][T15400] loop4: detected capacity change from 0 to 512 [ 515.319494][T15415] loop1: detected capacity change from 0 to 128 [ 515.788498][T15424] random: crng reseeded on system resumption [ 516.388084][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3777'. [ 516.411937][T15435] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3777'. [ 516.516954][T15444] rdma_rxe: rxe_newlink: failed to add lo [ 516.841900][T15454] loop4: detected capacity change from 0 to 1024 [ 516.849412][T15454] EXT4-fs: Ignoring removed orlov option [ 516.855162][T15454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.880500][T15454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.165296][T15460] loop3: detected capacity change from 0 to 512 [ 517.186588][T15460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 517.242649][T15460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.283456][T15460] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.401560][T15464] netlink: 'syz.3.3783': attribute type 1 has an invalid length. [ 517.409399][T15464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3783'. [ 517.597000][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.296209][T15477] loop3: detected capacity change from 0 to 128 [ 518.478808][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3788'. [ 518.514446][T15479] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 518.596358][T15479] loop1: detected capacity change from 0 to 512 [ 518.698684][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3789'. [ 518.711571][T15484] tipc: Enabling of bearer rejected, already enabled [ 518.732798][ T7258] bio_check_eod: 6290 callbacks suppressed [ 518.732816][ T7258] kworker/u8:14: attempt to access beyond end of device [ 518.732816][ T7258] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 518.762027][T15482] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 518.790798][T15484] IPVS: persistence engine module ip_vs_pe_& not found [ 518.853337][T15489] loop1: detected capacity change from 0 to 512 [ 518.860340][T15489] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 518.878717][T15489] EXT4-fs (loop1): 1 truncate cleaned up [ 518.884949][T15489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.921130][T15491] IPVS: persistence engine module ip_vs_pe_& not found [ 519.506181][T15507] loop2: detected capacity change from 0 to 512 [ 519.527677][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.544802][T15507] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 519.557976][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 519.557993][ T29] audit: type=1326 audit(1741367666.227:8214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.1.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 519.602511][T15512] loop1: detected capacity change from 0 to 8192 [ 519.603082][ T29] audit: type=1326 audit(1741367666.227:8215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.1.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 519.632500][ T29] audit: type=1326 audit(1741367666.227:8216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.1.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 519.658061][ T29] audit: type=1326 audit(1741367666.227:8217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.1.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 519.668281][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.681628][ T29] audit: type=1326 audit(1741367666.227:8218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.1.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 519.714112][ T29] audit: type=1326 audit(1741367666.227:8219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.1.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 519.737638][ T29] audit: type=1326 audit(1741367666.227:8220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.1.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 519.761240][ T29] audit: type=1326 audit(1741367666.227:8221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.1.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 519.784821][ T29] audit: type=1326 audit(1741367666.227:8222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.1.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 519.811118][ T29] audit: type=1326 audit(1741367666.227:8223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15511 comm="syz.1.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 519.996522][T15525] netlink: 'syz.3.3803': attribute type 4 has an invalid length. [ 520.110032][T15533] IPVS: persistence engine module ip_vs_pe_& not found [ 520.498912][T15542] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 520.606445][T15544] loop3: detected capacity change from 0 to 256 [ 520.632835][T15544] FAT-fs (loop3): bogus sectors per cluster 223 [ 520.639236][T15544] FAT-fs (loop3): Can't find a valid FAT filesystem [ 520.726447][T15542] loop3: detected capacity change from 0 to 512 [ 520.752599][T15542] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 520.795651][T15542] EXT4-fs (loop3): 1 truncate cleaned up [ 520.802402][T15542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.956820][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.201763][T15550] loop1: detected capacity change from 0 to 2048 [ 521.243667][T15550] loop1: p2 p3 < > p4 < p5 > [ 521.248393][T15550] loop1: partition table partially beyond EOD, truncated [ 521.288917][T15550] loop1: p3 start 4284289 is beyond EOD, truncated [ 521.642319][T15563] netlink: 'syz.1.3814': attribute type 4 has an invalid length. [ 521.757459][T15567] loop4: detected capacity change from 0 to 128 [ 521.786127][T15573] loop1: detected capacity change from 0 to 128 [ 521.793111][T15569] IPVS: persistence engine module ip_vs_pe_& not found [ 521.800202][T15567] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 521.834193][T15573] syz.1.3818: attempt to access beyond end of device [ 521.834193][T15573] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 521.856280][T15573] syz.1.3818: attempt to access beyond end of device [ 521.856280][T15573] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 521.870166][T15573] syz.1.3818: attempt to access beyond end of device [ 521.870166][T15573] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 521.875849][T15577] loop4: detected capacity change from 0 to 256 [ 521.893340][T15573] syz.1.3818: attempt to access beyond end of device [ 521.893340][T15573] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 521.907516][T15577] FAT-fs (loop4): bogus sectors per cluster 223 [ 521.914010][T15577] FAT-fs (loop4): Can't find a valid FAT filesystem [ 521.922116][T15573] syz.1.3818: attempt to access beyond end of device [ 521.922116][T15573] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 521.944952][T15577] loop4: detected capacity change from 0 to 512 [ 521.962129][T15577] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 521.963222][T15573] syz.1.3818: attempt to access beyond end of device [ 521.963222][T15573] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 522.004621][T15577] EXT4-fs (loop4): 1 truncate cleaned up [ 522.009979][T15573] syz.1.3818: attempt to access beyond end of device [ 522.009979][T15573] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 522.010873][T15577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.026802][T15573] syz.1.3818: attempt to access beyond end of device [ 522.026802][T15573] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 522.074031][T15573] syz.1.3818: attempt to access beyond end of device [ 522.074031][T15573] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 522.089385][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.099651][T15575] loop2: detected capacity change from 0 to 128 [ 522.233848][T15583] loop4: detected capacity change from 0 to 8192 [ 522.789944][T15603] netlink: 'syz.3.3828': attribute type 4 has an invalid length. [ 522.869182][T15606] IPVS: persistence engine module ip_vs_pe_& not found [ 522.882955][T15604] loop2: detected capacity change from 0 to 128 [ 522.975988][T15615] loop3: detected capacity change from 0 to 512 [ 522.982762][T15615] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 522.998050][T15615] EXT4-fs (loop3): 1 truncate cleaned up [ 523.004655][T15615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.037963][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.061360][T15621] loop3: detected capacity change from 0 to 128 [ 523.069104][T15621] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 523.125706][T15619] loop4: detected capacity change from 0 to 128 [ 523.219926][T15627] loop4: detected capacity change from 0 to 128 [ 523.226815][T15627] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 523.509671][T15636] IPVS: persistence engine module ip_vs_pe_& not found [ 523.522977][T15639] netlink: 'syz.0.3842': attribute type 4 has an invalid length. [ 523.595442][T15646] loop2: detected capacity change from 0 to 128 [ 523.602339][T15646] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 523.636299][T15648] loop2: detected capacity change from 0 to 256 [ 523.643115][T15648] FAT-fs (loop2): bogus sectors per cluster 223 [ 523.649518][T15648] FAT-fs (loop2): Can't find a valid FAT filesystem [ 523.670331][T15648] loop2: detected capacity change from 0 to 512 [ 523.678466][T15648] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 523.690147][T15648] EXT4-fs (loop2): 1 truncate cleaned up [ 523.696442][T15648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.727941][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.869542][T15660] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 523.886137][T15660] loop1: detected capacity change from 0 to 256 [ 523.892897][T15660] FAT-fs (loop1): bogus sectors per cluster 223 [ 523.899338][T15660] FAT-fs (loop1): Can't find a valid FAT filesystem [ 523.911881][T15660] loop1: detected capacity change from 0 to 512 [ 523.919314][T15660] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 523.931465][T15660] EXT4-fs (loop1): 1 truncate cleaned up [ 523.937657][T15660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.964724][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.004037][T15676] IPVS: persistence engine module ip_vs_pe_& not found [ 525.053767][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3859'. [ 525.083917][T15683] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3859'. [ 525.321225][T15698] random: crng reseeded on system resumption [ 526.145776][T15705] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 526.162546][T15705] loop3: detected capacity change from 0 to 256 [ 526.184309][T15705] FAT-fs (loop3): bogus sectors per cluster 223 [ 526.190717][T15705] FAT-fs (loop3): Can't find a valid FAT filesystem [ 526.296131][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 526.296149][ T29] audit: type=1326 audit(1741367672.967:8447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 526.328883][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3864'. [ 526.345341][T15705] loop3: detected capacity change from 0 to 512 [ 526.354575][ T29] audit: type=1326 audit(1741367673.017:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0706104127 code=0x7ffc0000 [ 526.378081][ T29] audit: type=1326 audit(1741367673.017:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07060a9359 code=0x7ffc0000 [ 526.401604][ T29] audit: type=1326 audit(1741367673.017:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 526.425163][ T29] audit: type=1326 audit(1741367673.017:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 526.448717][ T29] audit: type=1326 audit(1741367673.017:8452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 526.472936][ T29] audit: type=1326 audit(1741367673.017:8453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 526.496533][ T29] audit: type=1326 audit(1741367673.017:8454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 526.520154][ T29] audit: type=1326 audit(1741367673.017:8455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0706104127 code=0x7ffc0000 [ 526.523798][T15705] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 526.543736][ T29] audit: type=1326 audit(1741367673.017:8456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.0.3865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07060a9359 code=0x7ffc0000 [ 526.593248][T15713] loop4: detected capacity change from 0 to 512 [ 526.602778][T15709] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 526.668519][T15705] EXT4-fs (loop3): 1 truncate cleaned up [ 526.674702][T15705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.692876][T15724] loop1: detected capacity change from 0 to 2048 [ 526.703106][T15722] loop4: detected capacity change from 0 to 128 [ 526.712819][T15722] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 526.752265][T15724] loop1: p2 p3 < > p4 < p5 > [ 526.757025][T15724] loop1: partition table partially beyond EOD, truncated [ 526.783764][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.796395][T15724] loop1: p3 start 4284289 is beyond EOD, truncated [ 527.410491][T15743] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 527.423775][T15744] bridge0: port 3(gretap0) entered blocking state [ 527.430290][T15744] bridge0: port 3(gretap0) entered disabled state [ 527.437295][T15744] gretap0: entered allmulticast mode [ 527.443964][T15744] gretap0: entered promiscuous mode [ 527.449748][T15744] bridge0: port 3(gretap0) entered blocking state [ 527.455236][T15743] loop1: detected capacity change from 0 to 256 [ 527.456300][T15744] bridge0: port 3(gretap0) entered forwarding state [ 527.475750][T15744] gretap0: left allmulticast mode [ 527.480810][T15744] gretap0: left promiscuous mode [ 527.485947][T15744] bridge0: port 3(gretap0) entered disabled state [ 527.509731][T15743] FAT-fs (loop1): bogus sectors per cluster 223 [ 527.516094][T15743] FAT-fs (loop1): Can't find a valid FAT filesystem [ 527.537618][T15743] loop1: detected capacity change from 0 to 512 [ 527.546790][T15749] loop3: detected capacity change from 0 to 128 [ 527.554037][T15743] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 527.592193][T15749] bio_check_eod: 19026 callbacks suppressed [ 527.592209][T15749] syz.3.3881: attempt to access beyond end of device [ 527.592209][T15749] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 527.614663][T15743] EXT4-fs (loop1): 1 truncate cleaned up [ 527.620779][T15743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.676560][T15749] syz.3.3881: attempt to access beyond end of device [ 527.676560][T15749] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 527.691861][T15749] syz.3.3881: attempt to access beyond end of device [ 527.691861][T15749] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 527.748963][T15749] syz.3.3881: attempt to access beyond end of device [ 527.748963][T15749] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 527.763778][T15749] syz.3.3881: attempt to access beyond end of device [ 527.763778][T15749] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 527.818693][T15755] loop4: detected capacity change from 0 to 512 [ 527.827556][T15756] kernel read not supported for file /policy (pid: 15756 comm: syz.2.3879) [ 527.839355][T15749] syz.3.3881: attempt to access beyond end of device [ 527.839355][T15749] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 527.859107][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.868787][T15749] syz.3.3881: attempt to access beyond end of device [ 527.868787][T15749] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 527.907930][T15755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.920711][T15755] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.948790][T15759] loop1: detected capacity change from 0 to 2048 [ 527.956718][T15749] syz.3.3881: attempt to access beyond end of device [ 527.956718][T15749] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 527.972328][T15749] syz.3.3881: attempt to access beyond end of device [ 527.972328][T15749] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 527.987115][T15749] syz.3.3881: attempt to access beyond end of device [ 527.987115][T15749] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 528.013837][T15759] loop1: p2 p3 < > p4 < p5 > [ 528.018643][T15759] loop1: partition table partially beyond EOD, truncated [ 528.087714][T15759] loop1: p3 start 4284289 is beyond EOD, truncated [ 528.312526][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 528.581284][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.597308][T15770] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 528.778398][T15775] loop2: detected capacity change from 0 to 256 [ 528.795470][T15775] FAT-fs (loop2): bogus sectors per cluster 223 [ 528.801881][T15775] FAT-fs (loop2): Can't find a valid FAT filesystem [ 528.831083][T15775] loop2: detected capacity change from 0 to 512 [ 528.842354][T15777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3888'. [ 528.843910][T15775] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 528.864358][T15777] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3888'. [ 528.875521][T15775] EXT4-fs (loop2): 1 truncate cleaned up [ 528.881509][T15775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.916641][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.938851][T15792] loop4: detected capacity change from 0 to 128 [ 528.946251][T15792] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 529.080465][T15798] loop4: detected capacity change from 0 to 2048 [ 529.161684][T15798] loop4: p2 p3 < > p4 < p5 > [ 529.166457][T15798] loop4: partition table partially beyond EOD, truncated [ 529.197642][T15798] loop4: p3 start 4284289 is beyond EOD, truncated [ 529.258617][T15804] loop4: detected capacity change from 0 to 128 [ 530.041013][T15808] loop3: detected capacity change from 0 to 512 [ 530.069123][T15808] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 530.116648][T15808] EXT4-fs (loop3): 1 truncate cleaned up [ 530.163751][T15808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.264642][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.457083][T15826] loop1: detected capacity change from 0 to 128 [ 530.471667][T15826] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 530.532567][T15828] random: crng reseeded on system resumption [ 530.683007][T15831] loop1: detected capacity change from 0 to 8192 [ 530.935617][T15835] loop4: detected capacity change from 0 to 128 [ 531.835943][T15842] loop2: detected capacity change from 0 to 128 [ 531.873338][T15842] FAT-fs (loop2): IO charset koi8-u not found [ 532.081389][T15849] loop2: detected capacity change from 0 to 128 [ 532.103778][T15849] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 532.116531][T15849] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 532.173194][T12578] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 532.330336][T15857] loop4: detected capacity change from 0 to 512 [ 532.364913][T15857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.382971][T15857] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.432393][T15856] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #12: comm syz.4.3913: invalid size [ 532.568587][T15865] loop2: detected capacity change from 0 to 128 [ 532.587298][T15865] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 532.817670][T15875] random: crng reseeded on system resumption [ 533.208508][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 533.208526][ T29] audit: type=1326 audit(1741367679.877:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1747a7d169 code=0x0 [ 533.875826][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3929'. [ 533.886309][T15898] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 533.952394][T15899] loop1: detected capacity change from 0 to 512 [ 534.068177][T15899] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 534.078298][T15899] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 534.088235][T15899] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.3927: Failed to acquire dquot type 1 [ 534.102005][T15899] EXT4-fs (loop1): 1 truncate cleaned up [ 534.108552][T15899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.121271][T15899] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.563314][T15908] tipc: Enabling of bearer rejected, already enabled [ 534.667649][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.716608][T15908] IPVS: persistence engine module ip_vs_pe_& not found [ 534.932042][ T29] audit: type=1326 audit(1741367681.597:8965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 534.955681][ T29] audit: type=1326 audit(1741367681.597:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 534.979250][ T29] audit: type=1326 audit(1741367681.597:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 535.002972][ T29] audit: type=1326 audit(1741367681.597:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 535.026630][ T29] audit: type=1326 audit(1741367681.597:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 535.050236][ T29] audit: type=1326 audit(1741367681.597:8970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 535.073850][ T29] audit: type=1326 audit(1741367681.597:8971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15915 comm="syz.3.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 535.176888][T15922] random: crng reseeded on system resumption [ 535.519016][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3940'. [ 535.546625][T15934] random: crng reseeded on system resumption [ 535.719825][T15932] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 535.806334][T15936] loop2: detected capacity change from 0 to 512 [ 535.978918][T15945] loop2: detected capacity change from 0 to 2048 [ 536.034123][T15945] loop2: p2 p3 < > p4 < p5 > [ 536.038920][T15945] loop2: partition table partially beyond EOD, truncated [ 536.047154][T15945] loop2: p3 start 4284289 is beyond EOD, truncated [ 536.168857][T15948] loop1: detected capacity change from 0 to 512 [ 536.275015][T15948] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.3943: Failed to acquire dquot type 1 [ 536.287476][T15948] EXT4-fs (loop1): 1 truncate cleaned up [ 536.293791][T15948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.306346][T15948] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.520636][T15957] bridge0: port 3(gretap0) entered blocking state [ 536.527225][T15957] bridge0: port 3(gretap0) entered disabled state [ 536.705245][T15957] gretap0: entered allmulticast mode [ 536.711486][T15957] gretap0: entered promiscuous mode [ 536.720722][T15957] bridge0: port 3(gretap0) entered blocking state [ 536.727232][T15957] bridge0: port 3(gretap0) entered forwarding state [ 536.895001][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.905864][T15962] loop3: detected capacity change from 0 to 512 [ 536.914061][T15962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 536.966454][T15962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.979088][T15960] gretap0: left allmulticast mode [ 536.984162][T15960] gretap0: left promiscuous mode [ 536.989308][T15960] bridge0: port 3(gretap0) entered disabled state [ 536.998939][T15962] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.036448][T15962] netlink: 'syz.3.3948': attribute type 1 has an invalid length. [ 537.044380][T15962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3948'. [ 537.082768][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.206004][T15971] loop1: detected capacity change from 0 to 8192 [ 537.357056][T15978] random: crng reseeded on system resumption [ 537.512806][T15984] bridge0: port 3(gretap0) entered blocking state [ 537.519369][T15984] bridge0: port 3(gretap0) entered disabled state [ 537.566974][T15984] gretap0: entered allmulticast mode [ 537.587400][T15984] gretap0: entered promiscuous mode [ 537.607648][T15984] bridge0: port 3(gretap0) entered blocking state [ 537.614181][T15984] bridge0: port 3(gretap0) entered forwarding state [ 537.662459][T15987] gretap0: left allmulticast mode [ 537.667672][T15987] gretap0: left promiscuous mode [ 537.672726][T15987] bridge0: port 3(gretap0) entered disabled state [ 537.721533][T15990] loop3: detected capacity change from 0 to 2048 [ 537.749175][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.786615][T15990] loop3: p2 p3 < > p4 < p5 > [ 537.791363][T15990] loop3: partition table partially beyond EOD, truncated [ 537.824676][T15999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'. [ 537.835344][T15999] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3960'. [ 537.863722][T15990] loop3: p3 start 4284289 is beyond EOD, truncated [ 538.106507][T16014] random: crng reseeded on system resumption [ 538.718697][T16028] loop3: detected capacity change from 0 to 1024 [ 538.743966][T16030] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 538.745358][T16028] EXT4-fs: Ignoring removed orlov option [ 538.761066][T16028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 538.776271][T16030] loop1: detected capacity change from 0 to 256 [ 538.783064][T16030] FAT-fs (loop1): bogus sectors per cluster 223 [ 538.789447][T16030] FAT-fs (loop1): Can't find a valid FAT filesystem [ 538.807199][T16028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.826208][T16030] loop1: detected capacity change from 0 to 512 [ 538.833947][T16030] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 538.864831][T16030] EXT4-fs (loop1): 1 truncate cleaned up [ 538.935568][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3972'. [ 538.968786][T16030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.977940][T16037] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 538.998966][T16041] loop4: detected capacity change from 0 to 512 [ 539.007189][T16041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 539.055087][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.076734][T16041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.116368][T16046] loop2: detected capacity change from 0 to 512 [ 539.144405][T16041] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.380894][T16051] netlink: 'syz.4.3973': attribute type 1 has an invalid length. [ 539.388942][T16051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3973'. [ 539.920470][T16053] loop1: detected capacity change from 0 to 512 [ 540.365842][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.388492][T16046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.425619][T16053] __quota_error: 124 callbacks suppressed [ 540.425635][T16053] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 540.441557][T16053] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 540.451510][T16053] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.3974: Failed to acquire dquot type 1 [ 540.466278][T16053] EXT4-fs (loop1): 1 truncate cleaned up [ 540.472390][T16053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.485002][T16053] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.509276][T16046] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.541777][ T29] audit: type=1326 audit(1741367687.207:9094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16063 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 540.572374][T16046] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz.2.3969: invalid size [ 540.599858][T16066] loop4: detected capacity change from 0 to 256 [ 540.606818][T16066] FAT-fs (loop4): bogus sectors per cluster 223 [ 540.613105][T16066] FAT-fs (loop4): Can't find a valid FAT filesystem [ 540.631056][T16066] loop4: detected capacity change from 0 to 512 [ 540.640948][ T29] audit: type=1326 audit(1741367687.237:9095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16063 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 540.664602][ T29] audit: type=1326 audit(1741367687.237:9096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16063 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 540.681766][T16066] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 540.688342][ T29] audit: type=1326 audit(1741367687.237:9097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16063 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 540.721643][ T29] audit: type=1326 audit(1741367687.237:9098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16063 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 540.730084][T15951] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 540.745175][ T29] audit: type=1326 audit(1741367687.237:9099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16063 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 540.783193][ T29] audit: type=1326 audit(1741367687.237:9100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16063 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 540.806740][ T29] audit: type=1326 audit(1741367687.237:9101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16063 comm="syz.0.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 540.883051][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.892621][T16066] EXT4-fs (loop4): 1 truncate cleaned up [ 540.902700][T16066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.065762][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.098182][T16073] netlink: 'syz.0.3981': attribute type 1 has an invalid length. [ 541.106085][T16073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3981'. [ 541.365171][T16084] loop1: detected capacity change from 0 to 2048 [ 541.423807][T16084] loop1: p2 p3 < > p4 < p5 > [ 541.428620][T16084] loop1: partition table partially beyond EOD, truncated [ 541.436991][T16084] loop1: p3 start 4284289 is beyond EOD, truncated [ 541.507490][T16086] loop1: detected capacity change from 0 to 512 [ 541.523859][T16086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 541.546736][T16086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.605351][T16086] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.631191][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.672086][T16086] netlink: 'syz.1.3986': attribute type 1 has an invalid length. [ 541.679952][T16086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3986'. [ 541.709372][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.789142][T16096] loop1: detected capacity change from 0 to 128 [ 541.826855][T16096] FAT-fs (loop1): IO charset koi8-u not found [ 541.830593][T16099] loop3: detected capacity change from 0 to 128 [ 541.920660][T16099] bio_check_eod: 52050 callbacks suppressed [ 541.920680][T16099] syz.3.3991: attempt to access beyond end of device [ 541.920680][T16099] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 541.984225][T16099] syz.3.3991: attempt to access beyond end of device [ 541.984225][T16099] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 541.998946][T16099] syz.3.3991: attempt to access beyond end of device [ 541.998946][T16099] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 542.012330][T16099] syz.3.3991: attempt to access beyond end of device [ 542.012330][T16099] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 542.025793][T16099] syz.3.3991: attempt to access beyond end of device [ 542.025793][T16099] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 542.039957][T16099] syz.3.3991: attempt to access beyond end of device [ 542.039957][T16099] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 542.053612][T16099] syz.3.3991: attempt to access beyond end of device [ 542.053612][T16099] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 542.067083][T16099] syz.3.3991: attempt to access beyond end of device [ 542.067083][T16099] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 542.080499][T16099] syz.3.3991: attempt to access beyond end of device [ 542.080499][T16099] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 542.093877][T16099] syz.3.3991: attempt to access beyond end of device [ 542.093877][T16099] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 542.111766][T16100] loop1: detected capacity change from 0 to 128 [ 542.129465][T16100] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 542.142062][T16100] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 542.366779][T16107] loop4: detected capacity change from 0 to 512 [ 542.487354][T16107] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.3992: Failed to acquire dquot type 1 [ 542.499823][T16107] EXT4-fs (loop4): 1 truncate cleaned up [ 542.506323][T16107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.518964][T16107] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.690661][T12761] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 542.786055][T16115] rdma_rxe: rxe_newlink: failed to add lo [ 542.819531][T16117] loop3: detected capacity change from 0 to 128 [ 542.845331][T16117] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 542.865552][T16117] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 542.902463][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3997'. [ 542.908418][T16117] EXT4-fs (loop3): shut down requested (0) [ 542.929100][T16119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3997'. [ 542.946837][T13343] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 542.977141][T16128] loop1: detected capacity change from 0 to 512 [ 542.990040][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3998'. [ 543.004990][T16130] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 543.021260][T16130] loop3: detected capacity change from 0 to 512 [ 543.043802][T16128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 543.053760][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.087561][T16128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.111026][T16128] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.139351][T16128] netlink: 'syz.1.3999': attribute type 1 has an invalid length. [ 543.144836][T16140] netlink: 'syz.4.4003': attribute type 4 has an invalid length. [ 543.147174][T16128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3999'. [ 543.179265][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.193025][T16141] random: crng reseeded on system resumption [ 543.225045][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.394453][T16149] loop1: detected capacity change from 0 to 512 [ 543.401630][T16149] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 543.433825][T16149] EXT4-fs (loop1): 1 truncate cleaned up [ 543.440314][T16149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.324256][T16174] rdma_rxe: rxe_newlink: failed to add lo [ 544.350550][T16175] loop4: detected capacity change from 0 to 512 [ 544.724358][T16175] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4011: Failed to acquire dquot type 1 [ 544.736214][T16175] EXT4-fs (loop4): 1 truncate cleaned up [ 544.742377][T16175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.754953][T16175] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.044503][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.087092][T16187] netlink: 'syz.4.4017': attribute type 4 has an invalid length. [ 546.503741][T16208] tipc: Enabling of bearer rejected, already enabled [ 546.536114][T16208] IPVS: persistence engine module ip_vs_pe_& not found [ 546.930530][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.023805][T16218] loop4: detected capacity change from 0 to 128 [ 547.143187][T16218] bio_check_eod: 2857 callbacks suppressed [ 547.143204][T16218] syz.4.4027: attempt to access beyond end of device [ 547.143204][T16218] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 547.241106][T16218] syz.4.4027: attempt to access beyond end of device [ 547.241106][T16218] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 547.289024][T16218] syz.4.4027: attempt to access beyond end of device [ 547.289024][T16218] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 547.332797][T16218] syz.4.4027: attempt to access beyond end of device [ 547.332797][T16218] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 547.386315][T16218] syz.4.4027: attempt to access beyond end of device [ 547.386315][T16218] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 547.430946][T16218] syz.4.4027: attempt to access beyond end of device [ 547.430946][T16218] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 547.475415][T16218] syz.4.4027: attempt to access beyond end of device [ 547.475415][T16218] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 547.527372][T16218] syz.4.4027: attempt to access beyond end of device [ 547.527372][T16218] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 547.560908][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4028'. [ 547.575410][T16218] syz.4.4027: attempt to access beyond end of device [ 547.575410][T16218] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 547.611007][T16221] hsr_slave_1 (unregistering): left promiscuous mode [ 547.621164][T16218] syz.4.4027: attempt to access beyond end of device [ 547.621164][T16218] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 547.647253][T16223] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4028'. [ 547.767237][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 547.767253][ T29] audit: type=1326 audit(1741367694.437:9600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16226 comm="syz.1.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 547.806904][T16227] loop1: detected capacity change from 0 to 512 [ 547.813865][T16227] EXT4-fs: Ignoring removed bh option [ 547.819517][ T29] audit: type=1326 audit(1741367694.477:9601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16226 comm="syz.1.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 547.843212][ T29] audit: type=1326 audit(1741367694.477:9602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16226 comm="syz.1.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 547.866775][ T29] audit: type=1326 audit(1741367694.477:9603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16226 comm="syz.1.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc2929d1a3 code=0x7ffc0000 [ 547.890339][ T29] audit: type=1326 audit(1741367694.477:9604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16226 comm="syz.1.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc2929bc1f code=0x7ffc0000 [ 547.913907][ T29] audit: type=1326 audit(1741367694.477:9605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16226 comm="syz.1.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdc2929d1f7 code=0x7ffc0000 [ 547.937409][ T29] audit: type=1326 audit(1741367694.477:9606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16226 comm="syz.1.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc2929bad0 code=0x7ffc0000 [ 547.960995][ T29] audit: type=1326 audit(1741367694.477:9607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16226 comm="syz.1.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc2929cd6b code=0x7ffc0000 [ 547.984673][ T29] audit: type=1326 audit(1741367694.487:9608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16226 comm="syz.1.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc2929bdca code=0x7ffc0000 [ 548.008035][ T29] audit: type=1326 audit(1741367694.487:9609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16226 comm="syz.1.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc2929bdca code=0x7ffc0000 [ 548.111502][T16233] loop3: detected capacity change from 0 to 128 [ 548.182545][T16233] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 548.198004][T16227] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002] [ 548.209607][T16235] tipc: Started in network mode [ 548.214591][T16235] tipc: Node identity ac14140f, cluster identity 4711 [ 548.233154][T16227] EXT4-fs (loop1): 1 truncate cleaned up [ 548.243210][T16227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.256593][T16235] tipc: New replicast peer: 255.0.0.255 [ 548.262229][T16235] tipc: Enabled bearer , priority 10 [ 548.283946][T16238] IPVS: persistence engine module ip_vs_pe_& not found [ 548.566745][T16247] loop3: detected capacity change from 0 to 512 [ 548.679577][T16247] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4033: Failed to acquire dquot type 1 [ 548.692617][T16247] EXT4-fs (loop3): 1 truncate cleaned up [ 548.699068][T16247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.711808][T16247] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.077667][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.237723][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.253718][ T1046] tipc: Node number set to 2886997007 [ 549.292957][T16269] loop3: detected capacity change from 0 to 128 [ 549.304008][T16269] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 549.337102][T16273] loop4: detected capacity change from 0 to 128 [ 549.345033][T16273] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 549.697480][T16283] loop3: detected capacity change from 0 to 512 [ 549.930064][T16283] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4046: Failed to acquire dquot type 1 [ 549.942446][T16283] EXT4-fs (loop3): 1 truncate cleaned up [ 549.948959][T16283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.961494][T16283] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.737361][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.821548][T16295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4048'. [ 550.833518][T16295] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 550.870290][T16295] loop3: detected capacity change from 0 to 512 [ 550.898920][T16292] loop4: detected capacity change from 0 to 8192 [ 551.345132][T16316] netlink: 'syz.1.4056': attribute type 4 has an invalid length. [ 552.107980][T16326] loop4: detected capacity change from 0 to 2048 [ 552.140585][T16330] loop3: detected capacity change from 0 to 128 [ 552.161842][T16332] tipc: Enabling of bearer rejected, already enabled [ 552.163592][T16326] loop4: p2 p3 < > p4 < p5 > [ 552.174151][T16326] loop4: partition table partially beyond EOD, truncated [ 552.186515][T16330] bio_check_eod: 1529 callbacks suppressed [ 552.186565][T16330] syz.3.4062: attempt to access beyond end of device [ 552.186565][T16330] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 552.190042][T16332] IPVS: persistence engine module ip_vs_pe_@ not found [ 552.213121][T16326] loop4: p3 start 4284289 is beyond EOD, truncated [ 552.221216][T16330] syz.3.4062: attempt to access beyond end of device [ 552.221216][T16330] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 552.235236][T16330] syz.3.4062: attempt to access beyond end of device [ 552.235236][T16330] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 552.248628][T16330] syz.3.4062: attempt to access beyond end of device [ 552.248628][T16330] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 552.261990][T16330] syz.3.4062: attempt to access beyond end of device [ 552.261990][T16330] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 552.276613][T16330] syz.3.4062: attempt to access beyond end of device [ 552.276613][T16330] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 552.309540][T16330] syz.3.4062: attempt to access beyond end of device [ 552.309540][T16330] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 552.413969][T16330] syz.3.4062: attempt to access beyond end of device [ 552.413969][T16330] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 552.427766][T16330] syz.3.4062: attempt to access beyond end of device [ 552.427766][T16330] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 552.442112][T16330] syz.3.4062: attempt to access beyond end of device [ 552.442112][T16330] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 552.502649][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4068'. [ 552.513607][T16350] bridge0: port 3(gretap0) entered blocking state [ 552.520085][T16350] bridge0: port 3(gretap0) entered disabled state [ 552.542346][T16350] gretap0: entered allmulticast mode [ 552.554179][T16350] gretap0: entered promiscuous mode [ 552.559862][T16350] bridge0: port 3(gretap0) entered blocking state [ 552.566391][T16350] bridge0: port 3(gretap0) entered forwarding state [ 552.578231][T16350] gretap0: left allmulticast mode [ 552.583338][T16350] gretap0: left promiscuous mode [ 552.588526][T16350] bridge0: port 3(gretap0) entered disabled state [ 552.644024][T16352] loop1: detected capacity change from 0 to 8192 [ 552.787362][T16363] loop2: detected capacity change from 0 to 1024 [ 552.850412][T16363] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 552.862768][T16363] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 552.893674][T16363] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 552.905368][T16363] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 552.914745][T16363] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 553.089700][T16369] tipc: Enabling of bearer rejected, already enabled [ 553.119946][T16369] IPVS: persistence engine module ip_vs_pe_& not found [ 553.391596][T16378] loop4: detected capacity change from 0 to 2048 [ 553.450904][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 553.450920][ T29] audit: type=1326 audit(1741367700.117:9829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.1.4080" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2929d169 code=0x0 [ 553.481376][T16378] loop4: p2 p3 < > p4 < p5 > [ 553.486135][T16378] loop4: partition table partially beyond EOD, truncated [ 553.493842][T16378] loop4: p3 start 4284289 is beyond EOD, truncated [ 553.893224][T16395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4084'. [ 553.954720][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4085'. [ 553.964473][T16397] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 554.039161][T16400] tipc: Enabling of bearer rejected, already enabled [ 554.057323][T16400] IPVS: persistence engine module ip_vs_pe_& not found [ 554.076864][T16402] loop4: detected capacity change from 0 to 128 [ 554.150579][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4088'. [ 554.178239][T16411] loop2: detected capacity change from 0 to 256 [ 554.186486][T16404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4088'. [ 554.193459][T16409] loop3: detected capacity change from 0 to 128 [ 554.196838][T16411] FAT-fs (loop2): bogus sectors per cluster 223 [ 554.208006][T16411] FAT-fs (loop2): Can't find a valid FAT filesystem [ 554.230891][T16409] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 554.262544][T16411] loop2: detected capacity change from 0 to 512 [ 554.271937][T16411] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 554.318260][T16413] kernel read not supported for file /policy (pid: 16413 comm: syz.0.4091) [ 554.493796][T16411] EXT4-fs (loop2): 1 truncate cleaned up [ 554.500135][T16411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.591335][T16424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4095'. [ 554.612257][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.637938][T16429] tipc: Enabling of bearer rejected, already enabled [ 554.661593][T16429] IPVS: persistence engine module ip_vs_pe_& not found [ 554.681767][T16434] loop1: detected capacity change from 0 to 128 [ 554.705529][T16434] FAT-fs (loop1): IO charset koi8-u not found [ 554.783866][T16439] loop1: detected capacity change from 0 to 128 [ 554.792930][T16439] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 554.923759][T16439] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 554.956424][T16443] loop3: detected capacity change from 0 to 512 [ 554.984681][T16443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.997390][T16443] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.010549][T16443] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #12: comm syz.3.4096: invalid size [ 555.526526][T12761] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 555.727670][ T29] audit: type=1326 audit(1741367702.317:9830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16454 comm="syz.1.4104" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc2929d169 code=0x0 [ 555.750701][ T29] audit: type=1326 audit(1741367702.337:9831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.4.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab243d169 code=0x7ffc0000 [ 555.774291][ T29] audit: type=1326 audit(1741367702.347:9832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.4.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ab243d169 code=0x7ffc0000 [ 555.797955][ T29] audit: type=1326 audit(1741367702.347:9833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.4.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab243d169 code=0x7ffc0000 [ 555.821583][ T29] audit: type=1326 audit(1741367702.347:9834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.4.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ab243d169 code=0x7ffc0000 [ 555.845153][ T29] audit: type=1326 audit(1741367702.347:9835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.4.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab243d169 code=0x7ffc0000 [ 555.868714][ T29] audit: type=1326 audit(1741367702.347:9836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.4.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ab243d169 code=0x7ffc0000 [ 555.892164][ T29] audit: type=1326 audit(1741367702.347:9837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.4.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab243d169 code=0x7ffc0000 [ 555.915959][ T29] audit: type=1326 audit(1741367702.347:9838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.4.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8ab243d169 code=0x7ffc0000 [ 556.128688][T16461] loop4: detected capacity change from 0 to 8192 [ 556.176784][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.215911][T16464] loop3: detected capacity change from 0 to 128 [ 556.223923][T16464] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 556.237554][T16464] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 556.277311][T16464] EXT4-fs (loop3): shut down requested (0) [ 556.369463][T13343] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 556.492458][T16468] loop3: detected capacity change from 0 to 2048 [ 556.613723][T16468] loop3: p2 p3 < > p4 < p5 > [ 556.618453][T16468] loop3: partition table partially beyond EOD, truncated [ 556.639392][T16475] loop2: detected capacity change from 0 to 1024 [ 556.649991][T16474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4110'. [ 556.651888][T16468] loop3: p3 start 4284289 is beyond EOD, truncated [ 556.679977][T16475] EXT4-fs: Ignoring removed orlov option [ 556.685834][T16475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 556.713147][T16481] loop4: detected capacity change from 0 to 256 [ 556.725441][T16481] FAT-fs (loop4): bogus sectors per cluster 223 [ 556.725506][T16475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.731765][T16481] FAT-fs (loop4): Can't find a valid FAT filesystem [ 556.811283][T16481] loop4: detected capacity change from 0 to 512 [ 556.820432][T16481] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 556.842390][T16481] EXT4-fs (loop4): 1 truncate cleaned up [ 556.851901][T16481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.911017][T16487] loop3: detected capacity change from 0 to 8192 [ 556.930987][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.073719][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.147889][T16511] loop1: detected capacity change from 0 to 512 [ 558.234625][T16511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.247354][T16511] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.300967][T16511] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #12: comm syz.1.4117: invalid size [ 558.306157][T16512] loop2: detected capacity change from 0 to 2048 [ 558.326149][T16517] bridge0: port 3(gretap0) entered blocking state [ 558.332670][T16517] bridge0: port 3(gretap0) entered disabled state [ 558.387734][T16517] gretap0: entered allmulticast mode [ 558.399477][T16518] loop3: detected capacity change from 0 to 512 [ 558.453055][T16518] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4120: Failed to acquire dquot type 1 [ 558.465664][T16518] EXT4-fs (loop3): 1 truncate cleaned up [ 558.471909][T16518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.484590][T16518] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.518947][T16517] gretap0: entered promiscuous mode [ 558.555661][T16517] bridge0: port 3(gretap0) entered blocking state [ 558.562193][T16517] bridge0: port 3(gretap0) entered forwarding state [ 558.604405][T16521] gretap0: left allmulticast mode [ 558.609504][T16521] gretap0: left promiscuous mode [ 558.614666][T16521] bridge0: port 3(gretap0) entered disabled state [ 558.634853][T16512] loop2: p2 p3 < > p4 < p5 > [ 558.639635][T16512] loop2: partition table partially beyond EOD, truncated [ 558.722957][T16512] loop2: p3 start 4284289 is beyond EOD, truncated [ 559.168804][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.511993][T16538] random: crng reseeded on system resumption [ 559.530126][T16540] loop2: detected capacity change from 0 to 256 [ 559.538206][T16540] FAT-fs (loop2): bogus sectors per cluster 223 [ 559.544539][T16540] FAT-fs (loop2): Can't find a valid FAT filesystem [ 559.559058][T16540] loop2: detected capacity change from 0 to 512 [ 559.566489][T16540] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 559.578642][T16540] EXT4-fs (loop2): 1 truncate cleaned up [ 559.584972][T16540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.621638][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.645602][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 559.645620][ T29] audit: type=1326 audit(1741367706.307:9948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3da4d169 code=0x7ffc0000 [ 559.675495][ T29] audit: type=1326 audit(1741367706.307:9949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3da4d169 code=0x7ffc0000 [ 559.699033][ T29] audit: type=1326 audit(1741367706.307:9950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe3da4d169 code=0x7ffc0000 [ 559.722569][ T29] audit: type=1326 audit(1741367706.307:9951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3da4d169 code=0x7ffc0000 [ 559.742426][T16546] loop2: detected capacity change from 0 to 8192 [ 559.746209][ T29] audit: type=1326 audit(1741367706.307:9952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3da4d169 code=0x7ffc0000 [ 559.776341][ T29] audit: type=1326 audit(1741367706.307:9953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe3da4d169 code=0x7ffc0000 [ 559.799989][ T29] audit: type=1326 audit(1741367706.307:9954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3da4d169 code=0x7ffc0000 [ 559.823509][ T29] audit: type=1326 audit(1741367706.307:9955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe3da4d169 code=0x7ffc0000 [ 559.846967][ T29] audit: type=1326 audit(1741367706.307:9956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3da4d169 code=0x7ffc0000 [ 559.870652][ T29] audit: type=1326 audit(1741367706.307:9957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16544 comm="syz.2.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3da4d169 code=0x7ffc0000 [ 560.098698][T16553] loop4: detected capacity change from 0 to 512 [ 560.115239][T16553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.127823][T16553] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.187045][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.391425][T16563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4133'. [ 561.253030][T16571] loop4: detected capacity change from 0 to 512 [ 561.283930][T16571] EXT4-fs: Ignoring removed bh option [ 561.321213][T16571] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002] [ 561.340328][T16571] EXT4-fs (loop4): 1 truncate cleaned up [ 561.369470][T16571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.653844][T16576] bridge0: port 3(syz_tun) entered blocking state [ 561.660401][T16576] bridge0: port 3(syz_tun) entered disabled state [ 562.136327][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.449528][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.536180][T16585] random: crng reseeded on system resumption [ 562.803697][T16595] loop2: detected capacity change from 0 to 512 [ 562.895976][T16595] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4140: Failed to acquire dquot type 1 [ 562.917020][T16595] EXT4-fs (loop2): 1 truncate cleaned up [ 562.923477][T16595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.936038][T16595] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.293455][T16600] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 563.405796][T16610] bridge0: port 4(gretap0) entered blocking state [ 563.412311][T16610] bridge0: port 4(gretap0) entered disabled state [ 563.434018][T16610] gretap0: entered allmulticast mode [ 563.486939][T16610] gretap0: entered promiscuous mode [ 563.492460][T16610] bridge0: port 4(gretap0) entered blocking state [ 563.496192][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.498945][T16610] bridge0: port 4(gretap0) entered forwarding state [ 563.516810][T16612] gretap0: left allmulticast mode [ 563.521899][T16612] gretap0: left promiscuous mode [ 563.527050][T16612] bridge0: port 4(gretap0) entered disabled state [ 563.976621][T16625] loop4: detected capacity change from 0 to 512 [ 564.001157][T16625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 564.030502][T16628] rdma_rxe: rxe_newlink: failed to add lo [ 564.066656][T16625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.086461][T16625] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.163705][T16631] random: crng reseeded on system resumption [ 564.173619][T16639] loop1: detected capacity change from 0 to 512 [ 564.244315][T16641] netlink: 'syz.4.4151': attribute type 1 has an invalid length. [ 564.252207][T16641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4151'. [ 564.534899][T16646] loop2: detected capacity change from 0 to 128 [ 565.055573][T16639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.068602][T16639] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.081678][T16639] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #12: comm syz.1.4148: invalid size [ 565.094781][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 565.094799][ T29] audit: type=1326 audit(1741367711.767:10043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.0.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 565.132053][T16654] bio_check_eod: 30721 callbacks suppressed [ 565.132068][T16654] syz.2.4157: attempt to access beyond end of device [ 565.132068][T16654] loop2: rw=2049, sector=145, nr_sectors = 760 limit=128 [ 565.163061][ T29] audit: type=1326 audit(1741367711.797:10044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.0.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 565.186775][ T29] audit: type=1326 audit(1741367711.797:10045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.0.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 565.210388][ T29] audit: type=1326 audit(1741367711.797:10046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.0.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 565.234298][ T29] audit: type=1326 audit(1741367711.797:10047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.0.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 565.258043][ T29] audit: type=1326 audit(1741367711.797:10048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.0.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 565.282000][ T29] audit: type=1326 audit(1741367711.797:10049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.0.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 565.305598][ T29] audit: type=1326 audit(1741367711.797:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.0.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 565.329276][ T29] audit: type=1326 audit(1741367711.797:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.0.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 565.352950][ T29] audit: type=1326 audit(1741367711.797:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.0.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f070610d1a3 code=0x7ffc0000 [ 565.529677][T16654] syz.2.4157: attempt to access beyond end of device [ 565.529677][T16654] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 565.550751][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.553867][T16654] syz.2.4157: attempt to access beyond end of device [ 565.553867][T16654] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 565.574018][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.583763][T16654] syz.2.4157: attempt to access beyond end of device [ 565.583763][T16654] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 565.597472][T16654] syz.2.4157: attempt to access beyond end of device [ 565.597472][T16654] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 565.611019][T16654] syz.2.4157: attempt to access beyond end of device [ 565.611019][T16654] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 565.624320][T16654] syz.2.4157: attempt to access beyond end of device [ 565.624320][T16654] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 565.637804][T16654] syz.2.4157: attempt to access beyond end of device [ 565.637804][T16654] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 565.651274][T16654] syz.2.4157: attempt to access beyond end of device [ 565.651274][T16654] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 565.676964][T16654] syz.2.4157: attempt to access beyond end of device [ 565.676964][T16654] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 566.005368][T16671] loop2: detected capacity change from 0 to 512 [ 566.154116][T16671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.166776][T16671] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.262141][T16678] loop1: detected capacity change from 0 to 512 [ 566.270398][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.285395][T16678] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.4165: Failed to acquire dquot type 1 [ 566.298671][T16678] EXT4-fs (loop1): 1 truncate cleaned up [ 566.304963][T16678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.317661][T16678] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.739852][T16683] loop2: detected capacity change from 0 to 512 [ 566.766199][T16683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.789632][T16683] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.838320][T16691] loop3: detected capacity change from 0 to 128 [ 566.845298][T16691] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 566.932621][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.009219][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.081106][T16701] bridge0: port 3(gretap0) entered blocking state [ 567.087627][T16701] bridge0: port 3(gretap0) entered disabled state [ 567.094257][T16701] gretap0: entered allmulticast mode [ 567.100351][T16701] gretap0: entered promiscuous mode [ 567.111225][T16702] loop1: detected capacity change from 0 to 128 [ 567.118249][T16701] bridge0: port 3(gretap0) entered blocking state [ 567.124803][T16701] bridge0: port 3(gretap0) entered forwarding state [ 567.132197][T16702] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 567.152964][T16698] gretap0: left allmulticast mode [ 567.158119][T16698] gretap0: left promiscuous mode [ 567.163274][T16698] bridge0: port 3(gretap0) entered disabled state [ 567.329465][T16708] loop2: detected capacity change from 0 to 2048 [ 567.478520][T16708] loop2: p2 p3 < > p4 < p5 > [ 567.483293][T16708] loop2: partition table partially beyond EOD, truncated [ 567.514287][T16708] loop2: p3 start 4284289 is beyond EOD, truncated [ 567.926709][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4176'. [ 567.958692][T16716] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 569.700986][T16747] loop3: detected capacity change from 0 to 512 [ 569.786707][T16747] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4186: Failed to acquire dquot type 1 [ 569.800104][T16747] EXT4-fs (loop3): 1 truncate cleaned up [ 569.806343][T16747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.819042][T16747] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.374864][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.441786][T16759] bridge0: port 3(gretap0) entered blocking state [ 570.448403][T16759] bridge0: port 3(gretap0) entered disabled state [ 570.595516][T16759] gretap0: entered allmulticast mode [ 570.612637][T16759] gretap0: entered promiscuous mode [ 570.623300][T16759] bridge0: port 3(gretap0) entered blocking state [ 570.629859][T16759] bridge0: port 3(gretap0) entered forwarding state [ 571.531823][T16775] loop1: detected capacity change from 0 to 128 [ 571.579177][T16775] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 572.214394][T16785] bridge0: port 3(gretap0) entered blocking state [ 572.220924][T16785] bridge0: port 3(gretap0) entered disabled state [ 572.236228][T16785] gretap0: entered allmulticast mode [ 572.252357][T16785] gretap0: entered promiscuous mode [ 572.276490][T16785] bridge0: port 3(gretap0) entered blocking state [ 572.283062][T16785] bridge0: port 3(gretap0) entered forwarding state [ 572.323372][T16788] gretap0: left allmulticast mode [ 572.328510][T16788] gretap0: left promiscuous mode [ 572.333715][T16788] bridge0: port 3(gretap0) entered disabled state [ 572.576777][T16793] random: crng reseeded on system resumption [ 572.945211][T16795] netlink: 'syz.0.4200': attribute type 1 has an invalid length. [ 572.952994][T16795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4200'. [ 573.158291][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 573.158307][ T29] audit: type=1326 audit(1741367719.827:10081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f070610d169 code=0x0 [ 573.201093][T16809] random: crng reseeded on system resumption [ 573.351920][T16817] loop2: detected capacity change from 0 to 128 [ 573.362276][T16817] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 573.989727][T16828] random: crng reseeded on system resumption [ 574.346395][T16836] loop3: detected capacity change from 0 to 512 [ 574.360460][ T29] audit: type=1326 audit(1741367721.027:10082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16837 comm="syz.1.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 574.384269][ T29] audit: type=1326 audit(1741367721.027:10083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16837 comm="syz.1.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 574.390281][T16836] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 574.408037][ T29] audit: type=1326 audit(1741367721.027:10084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16837 comm="syz.1.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 574.440185][ T29] audit: type=1326 audit(1741367721.027:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16837 comm="syz.1.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 574.463788][ T29] audit: type=1326 audit(1741367721.027:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16837 comm="syz.1.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 574.508254][ T29] audit: type=1326 audit(1741367721.097:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16837 comm="syz.1.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 574.531958][ T29] audit: type=1326 audit(1741367721.097:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16837 comm="syz.1.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 574.555850][ T29] audit: type=1326 audit(1741367721.097:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16837 comm="syz.1.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 574.579464][ T29] audit: type=1326 audit(1741367721.097:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16837 comm="syz.1.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 574.635429][T16836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.648139][T16836] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.698384][T16836] netlink: 'syz.3.4214': attribute type 1 has an invalid length. [ 574.706300][T16836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4214'. [ 574.720537][T16845] loop1: detected capacity change from 0 to 8192 [ 574.756582][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.870131][T16855] loop3: detected capacity change from 0 to 128 [ 574.889974][T16855] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 575.137311][T16855] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 575.234425][T16860] loop2: detected capacity change from 0 to 512 [ 575.762079][T16855] EXT4-fs (loop3): shut down requested (0) [ 575.836396][T13343] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 575.894404][T16860] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4221: Failed to acquire dquot type 1 [ 575.907440][T16860] EXT4-fs (loop2): 1 truncate cleaned up [ 575.913573][T16860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.926171][T16860] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.194808][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.260076][T16869] loop2: detected capacity change from 0 to 512 [ 576.289685][T16869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 576.354920][T16869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.395971][T16869] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.509300][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.561125][T16866] loop3: detected capacity change from 0 to 128 [ 576.786503][ T6460] bio_check_eod: 2455 callbacks suppressed [ 576.786519][ T6460] kworker/u8:11: attempt to access beyond end of device [ 576.786519][ T6460] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 576.827490][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4229'. [ 576.836945][T16879] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 576.854276][T16879] loop4: detected capacity change from 0 to 512 [ 576.885976][T16882] loop2: detected capacity change from 0 to 2048 [ 576.892557][T16883] loop3: detected capacity change from 0 to 512 [ 576.909983][T16883] EXT4-fs: Ignoring removed orlov option [ 576.921407][T16883] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.4228: casefold flag without casefold feature [ 576.945226][T16883] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.4228: couldn't read orphan inode 15 (err -117) [ 576.958033][T16882] loop2: p2 p3 < > p4 < p5 > [ 576.962750][T16882] loop2: partition table partially beyond EOD, truncated [ 576.970271][T16882] loop2: p3 start 4284289 is beyond EOD, truncated [ 576.977346][T16883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.977814][T16890] random: crng reseeded on system resumption [ 576.999275][T16888] netlink: 'syz.0.4231': attribute type 1 has an invalid length. [ 577.007131][T16888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4231'. [ 577.168654][T16900] random: crng reseeded on system resumption [ 577.418623][T16913] loop2: detected capacity change from 0 to 1024 [ 577.426120][T16913] EXT4-fs: Ignoring removed orlov option [ 577.431843][T16913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 577.503828][T16913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.853356][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.862524][T16910] loop4: detected capacity change from 0 to 128 [ 577.947620][ T7264] kworker/u8:17: attempt to access beyond end of device [ 577.947620][ T7264] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 578.247483][T16930] loop3: detected capacity change from 0 to 512 [ 578.335493][T16930] __quota_error: 49 callbacks suppressed [ 578.335515][T16930] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 578.351275][T16930] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 578.361221][T16930] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4243: Failed to acquire dquot type 1 [ 578.376281][T16930] EXT4-fs (loop3): 1 truncate cleaned up [ 578.382611][T16930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.395212][T16930] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.627444][T16935] loop4: detected capacity change from 0 to 2048 [ 579.046173][T16935] loop4: p2 p3 < > p4 < p5 > [ 579.050930][T16935] loop4: partition table partially beyond EOD, truncated [ 579.072175][T16935] loop4: p3 start 4284289 is beyond EOD, truncated [ 579.154202][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.302653][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.466292][T16952] gretap0: left allmulticast mode [ 579.471465][T16952] gretap0: left promiscuous mode [ 579.476654][T16952] bridge0: port 3(gretap0) entered disabled state [ 579.506312][T16962] random: crng reseeded on system resumption [ 579.535214][T16961] loop1: detected capacity change from 0 to 128 [ 579.596212][ T29] audit: type=1326 audit(1741367726.257:10138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16963 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 579.596692][ T29] audit: type=1326 audit(1741367726.267:10139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16963 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 579.596722][ T29] audit: type=1326 audit(1741367726.267:10140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16963 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 579.597069][ T29] audit: type=1326 audit(1741367726.267:10141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16963 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 579.597415][ T29] audit: type=1326 audit(1741367726.267:10142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16963 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 579.597512][ T29] audit: type=1326 audit(1741367726.267:10143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16963 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 579.598829][ T29] audit: type=1326 audit(1741367726.267:10144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16963 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 579.598901][ T29] audit: type=1326 audit(1741367726.267:10145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16963 comm="syz.3.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747a7d169 code=0x7ffc0000 [ 579.700726][T16969] loop4: detected capacity change from 0 to 512 [ 579.722079][T16961] syz.1.4254: attempt to access beyond end of device [ 579.722079][T16961] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 579.751124][T16961] syz.1.4254: attempt to access beyond end of device [ 579.751124][T16961] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 579.751272][T16961] syz.1.4254: attempt to access beyond end of device [ 579.751272][T16961] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 579.751461][T16961] syz.1.4254: attempt to access beyond end of device [ 579.751461][T16961] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 579.751510][T16961] syz.1.4254: attempt to access beyond end of device [ 579.751510][T16961] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 579.751564][T16961] syz.1.4254: attempt to access beyond end of device [ 579.751564][T16961] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 579.751612][T16961] syz.1.4254: attempt to access beyond end of device [ 579.751612][T16961] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 579.751679][T16961] syz.1.4254: attempt to access beyond end of device [ 579.751679][T16961] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 579.776348][T16969] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4251: Failed to acquire dquot type 1 [ 579.776949][T16969] EXT4-fs (loop4): 1 truncate cleaned up [ 579.777333][T16969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.777457][T16969] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.802886][T16964] loop3: detected capacity change from 0 to 8192 [ 580.248722][T13168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.301268][T16980] loop4: detected capacity change from 0 to 128 [ 580.507781][T16982] loop1: detected capacity change from 0 to 2048 [ 580.551393][T16982] loop1: p2 p3 < > p4 < p5 > [ 580.551407][T16982] loop1: partition table partially beyond EOD, truncated [ 580.564760][T16982] loop1: p3 start 4284289 is beyond EOD, truncated [ 580.873082][T16993] random: crng reseeded on system resumption [ 581.685663][T17011] loop4: detected capacity change from 0 to 128 [ 581.712813][T17012] tipc: Enabling of bearer rejected, already enabled [ 581.761103][T17012] IPVS: persistence engine module ip_vs_pe_& not found [ 581.801263][T17011] bio_check_eod: 25743 callbacks suppressed [ 581.801290][T17011] syz.4.4269: attempt to access beyond end of device [ 581.801290][T17011] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 581.870421][T17016] loop1: detected capacity change from 0 to 2048 [ 581.888812][T17011] syz.4.4269: attempt to access beyond end of device [ 581.888812][T17011] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 581.934391][T17011] syz.4.4269: attempt to access beyond end of device [ 581.934391][T17011] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 581.949284][T17011] syz.4.4269: attempt to access beyond end of device [ 581.949284][T17011] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 581.963051][T17016] loop1: p2 p3 < > p4 < p5 > [ 581.963096][T17011] syz.4.4269: attempt to access beyond end of device [ 581.963096][T17011] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 581.967855][T17016] loop1: partition table partially beyond EOD, truncated [ 581.984140][T17011] syz.4.4269: attempt to access beyond end of device [ 581.984140][T17011] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 582.002533][T17011] syz.4.4269: attempt to access beyond end of device [ 582.002533][T17011] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 582.017953][T17011] syz.4.4269: attempt to access beyond end of device [ 582.017953][T17011] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 582.031404][T17011] syz.4.4269: attempt to access beyond end of device [ 582.031404][T17011] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 582.046190][T17016] loop1: p3 start 4284289 is beyond EOD, truncated [ 582.054385][T17011] syz.4.4269: attempt to access beyond end of device [ 582.054385][T17011] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 582.479074][T17032] loop1: detected capacity change from 0 to 512 [ 582.520514][T17032] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 582.585384][T17032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.633627][T17032] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.735879][T17041] loop4: detected capacity change from 0 to 128 [ 582.746179][T17040] netlink: 'syz.1.4277': attribute type 1 has an invalid length. [ 582.753997][T17040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4277'. [ 582.786270][T17038] netlink: 'syz.3.4279': attribute type 4 has an invalid length. [ 582.824882][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.975532][T17046] loop3: detected capacity change from 0 to 1024 [ 583.000839][T17046] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 583.012718][T17046] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 583.063788][T17046] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 583.075207][T17046] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 583.084674][T17046] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 583.347107][T17055] loop3: detected capacity change from 0 to 128 [ 583.398352][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 583.398370][ T29] audit: type=1326 audit(1741367730.067:10220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 583.460103][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4286'. [ 583.479532][T17060] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 583.490347][ T29] audit: type=1326 audit(1741367730.107:10221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 583.514043][ T29] audit: type=1326 audit(1741367730.107:10222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 583.537641][ T29] audit: type=1326 audit(1741367730.107:10223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 583.561326][ T29] audit: type=1326 audit(1741367730.107:10224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 583.584928][ T29] audit: type=1326 audit(1741367730.107:10225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 583.608626][ T29] audit: type=1326 audit(1741367730.107:10226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 583.632480][ T29] audit: type=1326 audit(1741367730.107:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 583.637758][T17055] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 583.656062][ T29] audit: type=1326 audit(1741367730.107:10228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 583.656101][ T29] audit: type=1326 audit(1741367730.107:10229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.1.4285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fdc2929d169 code=0x7ffc0000 [ 583.717228][T17055] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 583.804097][T13343] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 583.820948][T17060] loop2: detected capacity change from 0 to 512 [ 583.837420][T17061] loop1: detected capacity change from 0 to 8192 [ 583.978334][T17064] random: crng reseeded on system resumption [ 584.044329][T17074] bridge0: port 3(gretap0) entered blocking state [ 584.050863][T17074] bridge0: port 3(gretap0) entered disabled state [ 584.061620][T17074] gretap0: entered allmulticast mode [ 584.067739][T17074] gretap0: entered promiscuous mode [ 584.088523][T17074] bridge0: port 3(gretap0) entered blocking state [ 584.095084][T17074] bridge0: port 3(gretap0) entered forwarding state [ 584.133726][T17071] gretap0: left allmulticast mode [ 584.138828][T17071] gretap0: left promiscuous mode [ 584.144198][T17071] bridge0: port 3(gretap0) entered disabled state [ 584.364122][T17083] netlink: 'syz.1.4292': attribute type 4 has an invalid length. [ 584.547172][T17078] loop4: detected capacity change from 0 to 128 [ 584.569662][T17088] kernel read not supported for file /policy (pid: 17088 comm: syz.1.4295) [ 585.618342][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 585.653534][T17105] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 585.910469][T17112] loop3: detected capacity change from 0 to 512 [ 586.046115][T17112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.058708][T17112] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.146770][T17123] loop2: detected capacity change from 0 to 512 [ 586.253947][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.452318][T17125] loop1: detected capacity change from 0 to 128 [ 586.486135][T17125] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 586.509249][T17130] tipc: Enabling of bearer rejected, already enabled [ 586.523842][T17123] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4303: Failed to acquire dquot type 1 [ 586.537011][T17123] EXT4-fs (loop2): 1 truncate cleaned up [ 586.543051][T17123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.555882][T17123] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.591002][T17130] IPVS: persistence engine module ip_vs_pe_& not found [ 586.607432][T17137] loop1: detected capacity change from 0 to 128 [ 586.714360][T17139] loop3: detected capacity change from 0 to 128 [ 586.730229][T17139] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 586.820093][T17137] bio_check_eod: 37461 callbacks suppressed [ 586.820177][T17137] syz.1.4307: attempt to access beyond end of device [ 586.820177][T17137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 586.842014][T17137] syz.1.4307: attempt to access beyond end of device [ 586.842014][T17137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 586.842745][T12578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.864579][T17137] syz.1.4307: attempt to access beyond end of device [ 586.864579][T17137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 586.873618][T17141] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 586.891040][T17137] syz.1.4307: attempt to access beyond end of device [ 586.891040][T17137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 586.923351][T17137] syz.1.4307: attempt to access beyond end of device [ 586.923351][T17137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 586.953397][T17137] syz.1.4307: attempt to access beyond end of device [ 586.953397][T17137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 586.977018][T17137] syz.1.4307: attempt to access beyond end of device [ 586.977018][T17137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 587.012034][T17137] syz.1.4307: attempt to access beyond end of device [ 587.012034][T17137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 587.044283][T17137] syz.1.4307: attempt to access beyond end of device [ 587.044283][T17137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 587.079317][T17137] syz.1.4307: attempt to access beyond end of device [ 587.079317][T17137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 587.639547][T17160] loop2: detected capacity change from 0 to 128 [ 587.865658][T17164] loop1: detected capacity change from 0 to 512 [ 588.144693][T17166] netlink: 'syz.0.4317': attribute type 1 has an invalid length. [ 588.152545][T17166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4317'. [ 588.238582][T17164] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 588.266054][T17164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.317284][T17164] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.411790][T17164] netlink: 'syz.1.4316': attribute type 1 has an invalid length. [ 588.419661][T17164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4316'. [ 588.479656][T17179] random: crng reseeded on system resumption [ 588.489143][T12761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.504044][T17181] rdma_rxe: rxe_newlink: failed to add lo [ 588.577237][T17183] netlink: 'syz.0.4324': attribute type 4 has an invalid length. [ 588.597628][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 588.597643][ T29] audit: type=1326 audit(1741367735.267:10371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.0.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 588.597678][ T29] audit: type=1326 audit(1741367735.267:10372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.0.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 588.604179][ T29] audit: type=1326 audit(1741367735.267:10373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.0.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 588.604219][ T29] audit: type=1326 audit(1741367735.267:10374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.0.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 588.604329][ T29] audit: type=1326 audit(1741367735.267:10375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.0.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 588.604359][ T29] audit: type=1326 audit(1741367735.267:10376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.0.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 588.604464][ T29] audit: type=1326 audit(1741367735.267:10377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.0.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 588.604490][ T29] audit: type=1326 audit(1741367735.267:10378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.0.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 588.604547][ T29] audit: type=1326 audit(1741367735.267:10379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.0.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 588.604580][ T29] audit: type=1326 audit(1741367735.267:10380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17182 comm="syz.0.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070610d169 code=0x7ffc0000 [ 588.865161][T17189] loop1: detected capacity change from 0 to 128 [ 588.880373][T17189] FAT-fs (loop1): IO charset koi8-u not found [ 589.030730][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4329'. [ 589.116888][T17200] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 589.174775][T17200] loop4: detected capacity change from 0 to 512 [ 589.249883][T17191] loop2: detected capacity change from 0 to 128 [ 589.706894][T17212] loop3: detected capacity change from 0 to 512 [ 589.951304][T17212] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4331: Failed to acquire dquot type 1 [ 589.963886][T17212] EXT4-fs (loop3): 1 truncate cleaned up [ 589.970075][T17212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.982750][T17212] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.298713][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.310989][T17222] netlink: 'syz.2.4334': attribute type 4 has an invalid length. [ 590.332733][T17224] loop3: detected capacity change from 0 to 512 [ 590.339361][T17224] EXT4-fs: Ignoring removed orlov option [ 590.347892][T17224] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.4335: casefold flag without casefold feature [ 590.365112][T17208] loop1: detected capacity change from 0 to 128 [ 590.374415][T17224] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.4335: couldn't read orphan inode 15 (err -117) [ 590.408242][T17208] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 590.449450][T17224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.493820][T17208] ext4 filesystem being mounted at /256/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 590.545896][T17230] netlink: 'syz.2.4336': attribute type 4 has an invalid length. [ 590.907232][T12761] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 590.954164][T17234] netlink: 'syz.2.4338': attribute type 4 has an invalid length. [ 591.174787][T17241] random: crng reseeded on system resumption [ 591.258832][T13343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.291837][T17247] rdma_rxe: rxe_newlink: failed to add lo [ 591.389687][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4346'. [ 591.399248][T17255] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 591.462144][T17257] loop3: detected capacity change from 0 to 8192 [ 591.492353][T17262] loop2: detected capacity change from 0 to 128 [ 591.515162][T17262] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 591.544202][T17262] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 591.591524][T17262] EXT4-fs (loop2): shut down requested (0) [ 591.611132][T12578] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 591.630973][T17257] ================================================================== [ 591.639163][T17257] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 591.647712][T17257] [ 591.650061][T17257] write to 0xffff88811595c1f8 of 8 bytes by task 17249 on cpu 1: [ 591.657892][T17257] sync_mapping_buffers+0x159/0x7c0 [ 591.663128][T17257] fat_file_fsync+0xa7/0x100 [ 591.667766][T17257] vfs_fsync_range+0x116/0x130 [ 591.672567][T17257] generic_file_write_iter+0x1c3/0x310 [ 591.678058][T17257] do_iter_readv_writev+0x403/0x4b0 [ 591.683295][T17257] vfs_writev+0x2d9/0x880 [ 591.687646][T17257] __se_sys_pwritev2+0x100/0x1c0 [ 591.692627][T17257] __x64_sys_pwritev2+0x78/0x90 [ 591.697514][T17257] x64_sys_call+0x2afe/0x2dc0 [ 591.702229][T17257] do_syscall_64+0xc9/0x1c0 [ 591.706768][T17257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.713213][T17257] [ 591.715552][T17257] read to 0xffff88811595c1f8 of 8 bytes by task 17257 on cpu 0: [ 591.723197][T17257] mark_buffer_dirty_inode+0x96/0x1c0 [ 591.728606][T17257] fat_mirror_bhs+0x242/0x330 [ 591.733321][T17257] fat_ent_write+0xcc/0xe0 [ 591.737769][T17257] fat_chain_add+0x15f/0x400 [ 591.742387][T17257] fat_get_block+0x46b/0x5e0 [ 591.747020][T17257] __block_write_begin_int+0x417/0xfa0 [ 591.752533][T17257] cont_write_begin+0x546/0x860 [ 591.757446][T17257] fat_write_begin+0x51/0xe0 [ 591.762076][T17257] cont_write_begin+0x18b/0x860 [ 591.766970][T17257] fat_write_begin+0x51/0xe0 [ 591.771589][T17257] generic_cont_expand_simple+0xaa/0x150 [ 591.777269][T17257] fat_cont_expand+0x3a/0x160 [ 591.782171][T17257] fat_setattr+0x2aa/0x840 [ 591.786643][T17257] notify_change+0x85c/0x8e0 [ 591.786681][T17257] do_ftruncate+0x332/0x440 [ 591.786713][T17257] __x64_sys_ftruncate+0x67/0xc0 [ 591.786745][T17257] x64_sys_call+0x9d9/0x2dc0 [ 591.786776][T17257] do_syscall_64+0xc9/0x1c0 [ 591.786812][T17257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.786842][T17257] [ 591.786847][T17257] value changed: 0xffff888115911408 -> 0x0000000000000000 [ 591.786861][T17257] [ 591.786866][T17257] Reported by Kernel Concurrency Sanitizer on: [ 591.786895][T17257] CPU: 0 UID: 0 PID: 17257 Comm: syz.3.4343 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 591.786922][T17257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 591.786936][T17257] ==================================================================