last executing test programs: 5m37.705101265s ago: executing program 1 (id=1770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000011c0)={[{@bsdgroups}, {@orlov}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@resuid}]}, 0x1, 0x5fd, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff11}, 0x94) futex(&(0x7f0000000300), 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x5, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="259374c96e", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_create\x00', r1}, 0x18) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2200018, &(0x7f00000000c0), 0xff, 0x53d, &(0x7f0000000c00)="$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") statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000000500)) 5m36.539771745s ago: executing program 1 (id=1776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000011c0)={[{@bsdgroups}, {@orlov}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@resuid}]}, 0x1, 0x5fd, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff11}, 0x94) r2 = msgget$private(0x0, 0x0) futex(&(0x7f0000000300), 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x5, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="259374c96e", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_create\x00', r1}, 0x18) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") msgrcv(r2, 0x0, 0x0, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2200018, &(0x7f00000000c0), 0xff, 0x53d, &(0x7f0000000c00)="$eJzs3dFvG3cdAPDvOXGbtumSAQ8waWOwoXaC2s3CtoiHMSQET5MQ472ExI2iOnEVO1sTTZD+BUgIARJP8MILEn8AEqrEC48IaRI8gzQEQtCBBA+wQ2efm845N07m2Knz+UiX+/3ufPf9/nK+8935p3MAZ9azEfFaRLyfpukLETGXTy/lQ+x1hux1791/eyUbkkjTN/6eRJJP664ryceX8sVmIuLrX434VnIwbnNn99ZyvV7byuvV1sbtanNn99r6xvJaba22ubi48PLSK0svLV0fSjsvR8SrX/7zD777s6+8+qvPvfWnG3+9+u0srdl8/sPtOKLpR83sNL18fqZnga1jBjuNsvaUu5ULgy1z9wTzAQCgv+wc/yMR8emIeCHmYurRp7MAAADAYyj94mz8N4lIi507wlQAAADglCq1+8AmpUreF2A2SqVKpdOH92NxsVRvNFufvdnY3lzt9JWdj3Lp5nq9dj3vKzwf5SSrL7TL+/UXe+qLEfFkRHx/7kK7Xllp1FfHffMDAAAAzohLPdf//5rrXP8DAAAAE2Z+3AkAAAAAJ871PwAAAEw+1/8AAAAw0b72+uvZkHZ//3r1zZ3tW403r63WmrcqG9srlZXG1u3KWqOx1n5m38Zh66s3Grc/H5vbd6qtWrNVbe7s3thobG+2bqzHzEgaBAAAABzw5Cfv/SGJiL0vXGgPmXPjTgoYiekHpSQfF+z9f3yiM353REkBIzE1wGvePV883XkCPN6meyf02deByVMedwLA2CWHzO/beee3+fhTg0Y6cMYBAACMyJVPFH//f/j3AnulEaQHnCA7MZxdUx+8IZfOjTEXYLTaO/+gHXmcLMBEKQ/UAxCYZB/6+/9DpemREgIAAIZutj0kpUp+e282SqVKJeJy+2cBysnN9XrtekQ8ERG/nyufz+oL7SWTQ68ZAAAAAAAAAAAAAAAAAAAAAAAAAICONE0iBQAAACZaROkvya87z/K/Mvf8bO/9gXPJf9o/CXwuIt768Rs/vLPcam0tZNP/8WB660f59BfHcQcDAAAA6NW9Tm+P/z3ubAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYNO/df3ulOwzw8gvDivu3L0XEfFH86Zhpj2eiHBEX/5nE9EPLJRExNYT4e3cj4uNF8ZMsrQchi+IP459wSPyYz/8LRfEvDSE+nGX3suPPa0X7XymebY+L97/piA/Uj6v/8S8eHP+m+uz/lweM8dQ7v6j2jX834qnp4uNPN37SJ/5zA8b/5jd2d/vNS38ScaX7+dM+4j0cYb9UbW3crjZ3dq+tbyyv1dZqm4uLCy8vvbL00tL16s31ei3/Wxjje0//8v1Htf9i4edfkmfTv/3PF6yv6DPpf+/cuf/RbmXvYPyrzxXE/81P81ccjF/K43wmL2fzr3TLe53yw575+e+eeVT7V/fbXz7K9r/ab6W9DuwoTw/61gEATkBzZ/fWcr1e25rYQnaVfgrSOEYh2z6nII3jFB6Tt9Z3hrrCNE3TrOEFs+4NuCmTGHJLS8X57Bf6bqZxH5kAAIBh2z/pH3cmAAAAAAAAAAAAAAAAAAAAcHaN4ilrvTH3H4GcDOMR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/H/AAAA//9WvM+Y") statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000000500)) 5m35.046741452s ago: executing program 1 (id=1783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000011c0)={[{@bsdgroups}, {@orlov}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@resuid}]}, 0x1, 0x5fd, &(0x7f0000000600)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff11}, 0x94) r2 = msgget$private(0x0, 0x0) futex(&(0x7f0000000300), 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x5, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="259374c96e", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_create\x00', r1}, 0x18) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") msgrcv(r2, 0x0, 0x0, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2200018, &(0x7f00000000c0), 0xff, 0x53d, &(0x7f0000000c00)="$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") statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000000500)) 5m33.99097688s ago: executing program 1 (id=1791): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = creat(0x0, 0xd931d3864d39ddd8) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9102000}, 0xc, &(0x7f0000000140)={&(0x7f0000001900)=@deltaction={0x1e4, 0x31, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20040000}, 0x200040c0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000060000000c"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0xee01) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m33.704845445s ago: executing program 1 (id=1793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000011c0)={[{@bsdgroups}, {@orlov}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@resuid}]}, 0x1, 0x5fd, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = msgget$private(0x0, 0x0) futex(&(0x7f0000000300), 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x5, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="259374c96e", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_create\x00', r1}, 0x18) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") msgrcv(r2, 0x0, 0x0, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2200018, &(0x7f00000000c0), 0xff, 0x53d, &(0x7f0000000c00)="$eJzs3dFvG3cdAPDvOXGbtumSAQ8waWOwoXaC2s3CtoiHMSQET5MQ472ExI2iOnEVO1sTTZD+BUgIARJP8MILEn8AEqrEC48IaRI8gzQEQtCBBA+wQ2efm845N07m2Knz+UiX+/3ufPf9/nK+8935p3MAZ9azEfFaRLyfpukLETGXTy/lQ+x1hux1791/eyUbkkjTN/6eRJJP664ryceX8sVmIuLrX434VnIwbnNn99ZyvV7byuvV1sbtanNn99r6xvJaba22ubi48PLSK0svLV0fSjsvR8SrX/7zD777s6+8+qvPvfWnG3+9+u0srdl8/sPtOKLpR83sNL18fqZnga1jBjuNsvaUu5ULgy1z9wTzAQCgv+wc/yMR8emIeCHmYurRp7MAAADAYyj94mz8N4lIi507wlQAAADglCq1+8AmpUreF2A2SqVKpdOH92NxsVRvNFufvdnY3lzt9JWdj3Lp5nq9dj3vKzwf5SSrL7TL+/UXe+qLEfFkRHx/7kK7Xllp1FfHffMDAAAAzohLPdf//5rrXP8DAAAAE2Z+3AkAAAAAJ871PwAAAEw+1/8AAAAw0b72+uvZkHZ//3r1zZ3tW403r63WmrcqG9srlZXG1u3KWqOx1n5m38Zh66s3Grc/H5vbd6qtWrNVbe7s3thobG+2bqzHzEgaBAAAABzw5Cfv/SGJiL0vXGgPmXPjTgoYiekHpSQfF+z9f3yiM353REkBIzE1wGvePV883XkCPN6meyf02deByVMedwLA2CWHzO/beee3+fhTg0Y6cMYBAACMyJVPFH//f/j3AnulEaQHnCA7MZxdUx+8IZfOjTEXYLTaO/+gHXmcLMBEKQ/UAxCYZB/6+/9DpemREgIAAIZutj0kpUp+e282SqVKJeJy+2cBysnN9XrtekQ8ERG/nyufz+oL7SWTQ68ZAAAAAAAAAAAAAAAAAAAAAAAAAICONE0iBQAAACZaROkvya87z/K/Mvf8bO/9gXPJf9o/CXwuIt768Rs/vLPcam0tZNP/8WB660f59BfHcQcDAAAA6NW9Tm+P/z3ubAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYNO/df3ulOwzw8gvDivu3L0XEfFH86Zhpj2eiHBEX/5nE9EPLJRExNYT4e3cj4uNF8ZMsrQchi+IP459wSPyYz/8LRfEvDSE+nGX3suPPa0X7XymebY+L97/piA/Uj6v/8S8eHP+m+uz/lweM8dQ7v6j2jX834qnp4uNPN37SJ/5zA8b/5jd2d/vNS38ScaX7+dM+4j0cYb9UbW3crjZ3dq+tbyyv1dZqm4uLCy8vvbL00tL16s31ei3/Wxjje0//8v1Htf9i4edfkmfTv/3PF6yv6DPpf+/cuf/RbmXvYPyrzxXE/81P81ccjF/K43wmL2fzr3TLe53yw575+e+eeVT7V/fbXz7K9r/ab6W9DuwoTw/61gEATkBzZ/fWcr1e25rYQnaVfgrSOEYh2z6nII3jFB6Tt9Z3hrrCNE3TrOEFs+4NuCmTGHJLS8X57Bf6bqZxH5kAAIBh2z/pH3cmAAAAAAAAAAAAAAAAAAAAcHaN4ilrvTH3H4GcDOMR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/H/AAAA//9WvM+Y") statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000000500)) 5m33.177268745s ago: executing program 1 (id=1799): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x200000c4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x268, 0x33a, 0x130, 0x268, 0x268, 0x460, 0x460, 0x268, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x130, 0xd8000000, {0x9402}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x1}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) gettid() r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) process_vm_writev(r3, &(0x7f0000000000), 0x1, &(0x7f0000121000)=[{&(0x7f0000000540)=""/237, 0xffffffad}], 0x23a, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 5m33.121607306s ago: executing program 32 (id=1799): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x200000c4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x268, 0x33a, 0x130, 0x268, 0x268, 0x460, 0x460, 0x268, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x130, 0xd8000000, {0x9402}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x1}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) gettid() r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) process_vm_writev(r3, &(0x7f0000000000), 0x1, &(0x7f0000121000)=[{&(0x7f0000000540)=""/237, 0xffffffad}], 0x23a, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 4m55.971446177s ago: executing program 3 (id=2075): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_io_uring_setup(0x1244, 0x0, &(0x7f0000000400), &(0x7f0000010200)) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030038000b12d25a80648c2594f90224fc600d0c034002000000053582c10a153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xc}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="002918d910d46be7099c66b02010b1f0b7c3dc1dabe625969fb0adc922385af53d57a1d35dd71c90d9dd649b53142dd3d4108b4c7db82e8475d5bb6fa2fa626cd92c7326ce1ba2f33b0aef2b2164e01d910058000084696959ea7f5a607a6572d2640cf9312a07000000260e3651a0cbfd2c080990fb4c76e9e613a759863734a70d0600ec77e8ba76aacbb21e4b903aa4873a9951f269a9c0f87805a1a0cbdf6b8644a1de05a8d9dd9687d67c8af7f68cb59e60d1fbefb49b93d6b72cce4162edc4468a13987d94d428df36915621aeff6dc1358a7331fa69e05c417c0196322e1e6b8dc29c496c76d02dfc2d7b48616fb3f01b221f4f8f484a00090964922de8909a1f9f7ef655a12a68a56cb341a8fba4cd81cedec9cb518d13d2a2564427b63b037494748a24daa21fe1256df68d000b2778bf0437cc642cd83c5a1b34eeffdf93ecbd85bb340eeef68dd60101769c74f94d217264c171feea0305bfc87c36247d90b129a9973f00000001d99b195d2f75653a0193672783c6dbca5d1445110621d8095064f0a034f492cf5aa4767a772d6f4967722546bfd83d3202f76c20a9d7f40f9e7818d77129df7fd072804e0227ecaa03dddd303a318d6f7763ce011543587e6a306780ca2f37db7e8a5b64a5059ac91ff2110e40ea13d70e1504653ba9eebcf61b427797fb3fd79d2bb9aaa13c9729fe323c4ac222991981381e004684fb200b17d2f6ede181067662ad8a31f45b613869ca8fc5b1dbe62407a1f6dcb86a4c430210e9bcfca9b83283b87316c4d17f388e0bab0500000092a82e12f8e5348f11e7739033e9081bfc598746cf032fa55d0300470000000019ac65f89ca7d96da3ca2db52f8ec80462fddf42dbbca24b720000000000000000000000000000005214e7febdbc00"], 0x1, 0x120b, &(0x7f0000002300)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x0, 0x0, @dev, @local, {[@routing={0x0, 0x0, 0x0, 0x5}]}}}}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x2, 0x6, 0x381, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 4m55.703932332s ago: executing program 3 (id=2079): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = creat(0x0, 0xd931d3864d39ddd8) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9102000}, 0xc, &(0x7f0000000140)={&(0x7f0000001900)=@deltaction={0x1e4, 0x31, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20040000}, 0x200040c0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000060000000c"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0xee01) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000001d00)=@newtaction={0x264, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x250, 0x1, [@m_connmark={0xa4, 0x2, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xbf, 0x4, 0x8, 0x8}, 0x239}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1aa8, 0x10000000, 0x5, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x7fff, 0x10000000, 0x9}, 0x101}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x40, 0x1, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "683de9123e6f15bbaa12a4be0647d1bf"}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x168, 0x1f, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x200, 0x100, 0x8, 0xfffffffd, 0x8c}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x40, 0x10000000, 0x6, 0x6}}]}, {0xcd, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb7760d000000000000a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60db22abf921cc47b833cd69db77b46a64070e56b0898e03db2f62205644d79e5c20dffffe4d7ff62d611514b1db7d6db252535783ba6a7d952e11214a2402ef5ffd7327d50d240c70b400e75d30ee343aff31d9e290e9d69ae58f51637100a216bebd84776e38a175aa5533bc8483d6e5553ced157fe6dcf0005e7a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x264}}, 0x0) r7 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r7, 0x2, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 4m55.281743279s ago: executing program 3 (id=2083): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b1", 0x7c}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4m54.343360446s ago: executing program 3 (id=2089): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = creat(0x0, 0xd931d3864d39ddd8) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9102000}, 0xc, &(0x7f0000000140)={&(0x7f0000001900)=@deltaction={0x1e4, 0x31, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20040000}, 0x200040c0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000060000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0xee01) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000001d00)=@newtaction={0x264, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x250, 0x1, [@m_connmark={0xa4, 0x2, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xbf, 0x4, 0x8, 0x8}, 0x239}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1aa8, 0x10000000, 0x5, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x7fff, 0x10000000, 0x9}, 0x101}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x40, 0x1, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "683de9123e6f15bbaa12a4be0647d1bf"}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x168, 0x1f, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x200, 0x100, 0x8, 0xfffffffd, 0x8c}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x40, 0x10000000, 0x6, 0x6}}]}, {0xcd, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb7760d000000000000a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60db22abf921cc47b833cd69db77b46a64070e56b0898e03db2f62205644d79e5c20dffffe4d7ff62d611514b1db7d6db252535783ba6a7d952e11214a2402ef5ffd7327d50d240c70b400e75d30ee343aff31d9e290e9d69ae58f51637100a216bebd84776e38a175aa5533bc8483d6e5553ced157fe6dcf0005e7a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x264}}, 0x0) r6 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r6, 0x2, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 4m53.829852304s ago: executing program 3 (id=2094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r6) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c8}}, 0x0) 4m53.401944913s ago: executing program 3 (id=2096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r7) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) 4m53.345303153s ago: executing program 33 (id=2096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r7) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 7.511918156s ago: executing program 6 (id=4857): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x15, 0x3}}, 0x20) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x4ae82, 0x12c) write$UHID_CREATE2(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x118) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r9 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x4800, 0xfffd, {"71863d5400"}, 0xfffffffffffffffd, 0x4, 0x9}}}, 0x90) 5.395957334s ago: executing program 0 (id=4867): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000400)="f4", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r3, r3}, &(0x7f0000000480)=""/234, 0xea, &(0x7f00000001c0)={&(0x7f0000000080)={'sha256-generic\x00'}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.872177473s ago: executing program 2 (id=4870): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 4.848865073s ago: executing program 2 (id=4871): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2a, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'ipvlan0\x00', {0x2, 0x0, @private}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) 4.537925929s ago: executing program 5 (id=4874): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0xffffffff}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) socket$inet_udp(0x2, 0x2, 0x0) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0xffffffff}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.064235735s ago: executing program 2 (id=4881): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 3.063710055s ago: executing program 2 (id=4882): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x200000, 0x0, 0x800000, 0x2a9}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0, 0x9d14fd9bbd71d4f0}, 0x20) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x80010, 0xffffffffffffffff, 0x8000000) socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) readv(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=") r4 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f000030e000/0x1000)=nil, 0x1000, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x37, 0x1, 0xfd, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r5, 0x2285, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) syz_io_uring_setup(0x62f3, &(0x7f0000000140)={0x0, 0x99f2, 0x400, 0x0, 0x1c2}, &(0x7f00000000c0), &(0x7f00000001c0)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r6 = memfd_secret(0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r6, 0x2e, 0x4608, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) 2.967810237s ago: executing program 5 (id=4883): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = creat(0x0, 0xd931d3864d39ddd8) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9102000}, 0xc, &(0x7f0000000140)={&(0x7f0000001900)=@deltaction={0x1ac, 0x31, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20040000}, 0x200040c0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000060000000c"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0xee01) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000001d00)=@newtaction={0x248, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x234, 0x1, [@m_connmark={0xa4, 0x2, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xbf, 0x4, 0x8, 0x8}, 0x239}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1aa8, 0x10000000, 0x5, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x7fff, 0x10000000, 0x9}, 0x101}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x40, 0x1, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "683de9123e6f15bbaa12a4be0647d1bf"}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x14c, 0x1f, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x200, 0x100, 0x8, 0xfffffffd, 0x8c}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x40, 0x10000000, 0x6, 0x6}}]}, {0xb4, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb7760d000000000000a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60db22abf921cc47b833cd69db77b46a64070e56b0898e03db2f62205644d79e5c20dffffe4d7ff62d611514b1db7d6db252535783ba6a7d952e11214a2402ef5ffd7327d50d240c70b400e75d30ee343aff31d9e290e9d69ae58f51637100a216bebd"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x248}}, 0x0) r7 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r7, 0x2, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 2.776041321s ago: executing program 5 (id=4884): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x7d, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf94e9898e3717a49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) select(0x0, 0x0, &(0x7f0000000340), &(0x7f0000001900), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f0000000c40)='./file0\x00', 0x28000a0, &(0x7f00000004c0)={[{@discard}, {@bh}, {@noblock_validity}], [{@obj_type={'obj_type', 0x3d, '-\an\xd5!-bb\xb9\x9cn\x03R\xd8sI\xc7\xdbN\x82\x12\xd6\xc88|\x04\x1c\xeb\xc7\xe0\x03\xd6\xb7d\x87\x8a\xc0}\x9f4\xa9\xaa\x99\xc8\x97d\xbfv\x8d\x84\v\x10h\x97\xebt\xccS\xd1\xa1\xddla6\xef\xae\xd7\xf3/:\x80O\nw\xb5?|q88\x01\xc1\xd7\xcb\x11\x81\xab\x89{\xe4\x81\x03x&\xa7*\xa6@\xb81\x94-\x875\x85\xcd\xb5\xb5^\x86\x1f\xbb/C\xcfKY\x8d\xd7\xba\xb9\a\xb5\xf1\xb9#w]Z\x1e\x8e%\xcb/\xa4\x87\x0f\xe6Gf5\xabV\xed\x9b\xde8\x03r\x8c'}}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") socket$inet(0x2, 0x4, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000240)='kfree\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88401) r7 = fcntl$dupfd(r6, 0x406, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) tkill(r4, 0x13) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0x3a73, [0x19a, 0x1ff], 0xf7b5}, 0x10) 2.748591441s ago: executing program 2 (id=4885): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x15, 0x3}}, 0x20) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x4ae82, 0x12c) write$UHID_CREATE2(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x118) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x4800, 0xfffd, {"71863d5400"}, 0xfffffffffffffffd, 0x4, 0x9}}}, 0x90) 2.545594345s ago: executing program 4 (id=4886): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0xffffffff}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) socket$inet_udp(0x2, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) unshare(0x60480) r7 = io_uring_setup(0x556d, &(0x7f0000000180)={0x0, 0x8d48, 0x400, 0x1, 0x2b2}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_getres(0x5, 0x0) r8 = eventfd(0x3) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000040)=r8, 0x1) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, 0xffffffffffffffff) sendfile(r6, r6, 0x0, 0x24002deb) 2.195392261s ago: executing program 4 (id=4889): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x9, 0xa, 0x1, 0x61f695c8}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x8, @vifc_lcl_ifindex, @private=0xa010101}, 0x10) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x595}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000480)='2', 0x1, 0x8080c64) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000003fe2a"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendfile(r5, r5, 0x0, 0x800000009) 1.723621739s ago: executing program 5 (id=4890): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x15, 0x3}}, 0x20) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x4ae82, 0x12c) write$UHID_CREATE2(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x118) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x4800, 0xfffd, {"71863d5400"}, 0xfffffffffffffffd, 0x4, 0x9}}}, 0x90) 1.581111221s ago: executing program 6 (id=4891): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff11}, 0x94) r2 = msgget$private(0x0, 0x0) futex(&(0x7f0000000300), 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") msgrcv(r2, 0x0, 0x0, 0x3, 0x0) statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000000500)) 1.537774883s ago: executing program 0 (id=4892): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = io_uring_setup(0x6ddd, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0, 0x9d14fd9bbd71d4f0}, 0x20) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x80010, 0xffffffffffffffff, 0x8000000) socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) readv(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r4 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f000030e000/0x1000)=nil, 0x1000, 0x10) 1.313354936s ago: executing program 4 (id=4893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.205349869s ago: executing program 4 (id=4894): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000cc0)='rpc_xdr_alignment\x00', 0xffffffffffffffff, 0x0, 0xae5}, 0x18) 1.10268351s ago: executing program 0 (id=4895): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0x5}, {0x1, 0xffe0}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 904.850614ms ago: executing program 4 (id=4896): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 785.263636ms ago: executing program 4 (id=4897): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x15, 0x3}}, 0x20) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x4ae82, 0x12c) write$UHID_CREATE2(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x118) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r8 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x4800, 0xfffd, {"71863d5400"}, 0xfffffffffffffffd, 0x4, 0x9}}}, 0x90) 621.887479ms ago: executing program 6 (id=4898): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000400)="f4", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r3, r3}, &(0x7f0000000480)=""/234, 0xea, &(0x7f00000001c0)={&(0x7f0000000080)={'sha256-generic\x00'}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 200.873486ms ago: executing program 0 (id=4899): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0}, 0x94) r5 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000001200)="0ad9e089c0ba8eec92c347ad919d31852a91f1d8c532e3c19a714d9680a44d854a86d817db5617910c3cd358859d40ab0e67c6fad7eae1c5a6ec7add2a30fe17d67d6641050bb6938a503c84e58b07554bcb49c6c1c2893844a47d6da964fe62666a6a2edfe4ac7603139953af25a9d6b5dd72348cf7fa4d834c22d3112e1adb0b1c367b8df1acbb293673bf14c9ab0ca448f456caa14774f068c8a6605a214e97abfb6f861cf99f50f4aca578e4cb06a1ed1d06ad657aea78fc4c5b87f5c2a8a7afb4e51bd083a61753ad038694277ac458f139c87f01df815d4139ad4af679ad39c6710fed739bf17e94acf1625a0c56c619bb9b6a1afeb65b7afb0c27ac72c07946dcd8755d8d793f3edef9ca93bdd679ff18efd264c61a78c4e51e9ebb995494b0a5cd75688ba4daf9600abdf0bad49a88b45d5dc673a29d5d6f28a895aca502d7e35e2cc631abd29361845636a79841928efa27754b449f28c6da4742357a389fc901bf971c5f4d32709e22dfc7f05dca8c411acf0b2f96247cb7a235e5dd5e5ee002da68af954b9ce350bbc44f365294c3e05d979a0290b6eaf450220d3e6892b962baefb82697b69b0735d66bd441cd81e5c69d30aace75d8189bc0d259b95afa8c096379bb6734ef808a5f1133f449ffc4308ef5afe4bd79bf29bbcfd49598f0a686ceba083a980d6af83a3345bf80ca3a10b392a85b7dc3a3a7c46966573b0745b66af8eaa3a36af7020124a663f9aaad0a852766651236fdc9104d8f12e05143744a95638e1810b02ce79194147156064c0fb0d82d24928e36fd488842c41378ef3e8723fa1899e44588e5c346e6b016661b57d39fb674567a94408178cb52498814070e8c4dba630bcc6dc76b1065fbe580328eade3b314eba7294ec975a6e358acdc4703eea91af74e434da45936cbe49f0e9c1028c7144ed29acc9c9499ce96f021ea3e149c75fca66ed9872e547cecf2345da404600005973dd53e70ac66923ca144442225fec17176b0cceee6f18757e7c5dd3b451d9a666a2e6a70d7f170ecb82b22a3d1426b355f18c9ec6291edfbbe23d0e1f9688c46d1de412f06e734af04865501f6a76eae6557835ee96cbfa0e3f437ff2a60b9aba8d45b49147a31b19c7a136898ca2444d5a5814ca9d04453ccf2a5c8c55ba7a594ca5a85804479e8012e6cda15f4e943530ea2fe5f7e93eef4e29df625c190b7495f0a22bf2574f49597117eaf3eea386bba8191ba25ad4f2f80d2726b591fa521017711dddb6371240d880eee7004a67cc3d67dd203aacc4e79a5721752afa4f3452488b76291164be12f72ad1e4af66bdc5f2b8ec144e135c11305efe3b83120a679503013130952818f14a382e0cc879aa0cbb2c6359d6c3768c0d9c833a74fd50fadf0c05936ed3262c18c01e1e99cbdc22d5034880bee48e20d9822657974c8aa824f1d80a62156d96ce82e3ef71b13abc314cd84655ad3fc2e19916841081eb27deaf2cf385c4a29277fb5bfcbdf9c1d5a0d4409266080388c27c186f4196b3e71f22f9fff5c078bb333bd95daeb544a25c091f70c915cac307dbdb853a9ab4aa94315e98cd9978508ed28c2b55ead58b4d0c9ab9c5afaa9487b794f37c77d9ad2d42f7043b3be98e3239740b03a3572ce1729eb134952311a9c256e4d2fbf87eaf6c24131ef49913e565cda9568392cd59e1e7ee9e9ea97a4c928b28b77e3a8b17417d64cefc20ecd68fbb025f88cb6de4c16934697006543298f2a091b510f46ae0a7311e46f2612dad11676f4f32e4578d56068d2fd5b29d6dbd47cb639515cfbe625aaf62d5d7e8294c8d352fcf7fefe3b0fb503c55a3a6deec57bcd59845829a70a26aa9ef5212cda02dff1d50c996f7249b7fd3a856f441a1b2af9490df44c7e30c152832309cf93f7e50de257a103e02a5d222ce8851bbf0467b82d83510cf540fc93e65ea3d8eb6c1eaa2c0a331503b6cc811196b069a7d36b89b9f66c2f017b47166e624213a0bd25dd49ca44a219833c3658865e3eca3dd47a95bbf3129112ec42b62c470f8568c25cd1bee7688ab135148d3fb7ffe71424f4725cecfa13121480fb6847e3b3601d45f87463d7226705ccc235792688a1d127709d94baaf87b853200e53b32d35a7cdf1cfe24a58d7c18a8ae23d648a7609bc187ce5a809ebab4a0270094821d13f591564e01d40c85b6c09324c623bc5e97acc4d27121244623693dafebc4dbb4d166e24361f5e44775e125ecfe95f8252b50082fd5ac9a836e95ffc11702604b8e8bc765d29d58a1e093490bb2b350c6caeb765a7be84864cb3fc99d1b35ab71f7a64f0981e915a9bcf8f157734412d753c5caaf426e53b1316aa3816652972b208a71404b13827dbc74efb8a039994d6901bbabc744119df43c10cb91cd4a42928c5bb7c840a9da349efe7a905c7d8116da77a02fd51168acd99962ddfc29c72d14c272cb6a5af6d0e2a43e3c032ea289be0cb499247651ac365a558116738db07993eb5bea5c3d10a843aab78217b646655dbc6a58c8ac70b1cc838993f1fdf43e9ed1b0426f2d596e2a63931faac492301c7d8f8f38cb71d7ad79b481260be7531aa993ea658dc629bd6038de757d69f26b5d341927029e6842539a000d67645e345fbd2ba317b344489d3ed44a3baf1391872444e7f804c67b3124ff4095e68a5b664e2ce398a110e3706bf79d58579febc193f29b80439c4b1415237201e4b49f61966709c394d9c197c3081536cfb159c6082e2fa7a5eeb58ca1dfb7fa1b8e8bdbd9d9f9f3c0b2b472879213b5d56ac16c771c506308aa792bf9571e6833e77db9005b31d979b634a00d5b22d262cc8b8562e31edc6db716c56837d57c87165246d6315839b734ac4e4224f3bb271c28d5146d092068836cc4a31e0e3d835253c445056c19e544bd3c820ad641351a0d6e82e163b73d0fe2989ec9218f24198659efa5ff9587a52f3fd23e9e4872e13c66549c65eabfc71ee8a31c28e25c86e08ff2b1854fbb3c9c18ac3170a938ec2c9ed04be667c7ea44dd2f4be83fcd0551935b20ca9eb8a7eb3154e15dd832bb5cdc87726306f1eeb0cf3537bc7ecf39e35db7883a0161798949ba1d489d51fce4650e30fa686994aae89a3343a3b287272c5350c0004aeeea7840029672d591d8f7b4223eb5338a5fdfb823141b6c246443559cb60d5c09f1fc600c2e722e0e96c017540c73441d479af29486535cd41cc698e560db515d6fb70ef1853e8e42c2299af7cf4c75d7f04e0b8c77864772c3e125be474dcf56fe0d11109f2517fb0273a9566e08f38eb79b38abc20365f79cd8d8edd83499e14e2e9bcd7bab4d20ce1f7e56079bdbe1fab05645bc5eb216cc8850a0d976930371c67acac27f57aa435ae8bb6df5f187c025bcae2f64d7d7cddcd14f794fc5e25de7fcca107a7fe972e12293ec4c7666119fb27aed353b5d54f0c6ecf03930bf5ef9adbaa516612a871766ee8ac879b3cd1349b784acfb965c9190b158bdbcb231d9bce46ee2b7540e4b614b58d4d6b6201f7780988cfd30f8271497baefd626fabbc7458b6bab57e60835e11cf9a9a71e171fd21e1326cd603d371127a14d15b51a9317cb4614a69a24f4b89d06ba16da1196b6eba0bd0a1eabf384fb800f3a4a77e01f324cf118ef4afd76114fe84882e7543f88d31c95b402cedb3fd7cf282eb4e65b8e34dfefbbe7ba45fba0b6b6667149f2c1af77a440d69fcec088204cd54a00e36aeafbd0f569d131fa0fd814d488f845d1ab7e885044d5434aaec4422092ef648ee53640ce44f6b65fb87afca11e593493f6335297123973e1a5a5e3ce50c3601677b3b98d2cd7bff04f97f205c6acf19d51ba89c8fc2e360505cc6944ca60bd9918353cdd87191098019f5115a5242be818f7696c2bea117cb1e774f0d568db385a1d8f9987aeacde96f63fe383c44a958ea5ad807fe27e7322e0d824586f60100b326e6e31898135f80e4f4de6bb8dcd3bc2ed85b4c8d7f5a48f1a242d39c14295f1d2ce323a3f1a5f09f29af42a9e61655c34d7b3837d59da34f2f382b1a6d1b365cb66db5e83f506c311497caedb08eca825e52cb31b936b67c5a7fbafc84593d902ac10230596b0c63bc94cd058663edc119f3ca79098f81ce93573be1040d42f17eece5dc8c1f239fcfdf2a6456c2bbe0f3e968990979de716ba2cc9a6656205b1b8aeae0555ec55fc398aaf7586e2f0045a66937ac3720612bcc845f4abd0ac934536e21fcdc52b8907743f488566e5067c56d6ef02e5e98c2b361f94156b0a19fd486850778e51a9ffee0aa4289d5ad46c99b0df6c2d8093fa989a35652c960c8c1b485c2230463a8fa9056b066c9cc32fb6ef464367c1bb33acc972e1db773438de999f8e15b3f6aabcba36f24acd166a79220066151ad148265fd5f6576d9215f4bd3d2477e154d501a5d86441e09cec8e7cab99aa11663914b2c371a3119cee72237d226d8cfe8c93ac6cd2543fcc87a7a0323fe128b65b0b99c1614579d987a08c8fe91bef7128be46caa5f4d6edf31e962cf0f0b720487c277626e91b79f6f8ec75415e545d88042f9b45dd065698586d7e9d86293b464a7e1a5072b3e56e3b989d7a9b86ea9bb51e17a02a690ce82a8a3cce82074c2bf6d8be2dbba7a35b730d26a78dd28aaa747aa38a58bda12c36bc5a062d72200ab35e212bec46e7f14459b11ef42f866a979a37972fb66f08ba514d61fea99b04f066ae733b997a5a38d77747d2b8e75057d8b19bd934d36012f00651759ab4cc1387f2911fca56ae0925f0a75c450e550c60f5549c04fe1208732060154015bd4471b5e396b05ece761fa29397f95f4ce4a28fff44909751b74a2911a187a12bb664ef02c426fe0ec1e6ba8149d3c3aa85a9fb36cd8a518d1b2dd66a1e1ed2f3da65288e1bc03db951a29b23b411f09cf7472062df1f0096ba047fe0a9140c4937cc652f1edfb276bb6df42f53c1e28816a2d4493c94532215dc21959784cc6e49c56efbcf4247cb35e35c2f087ef53ec24c44e9dbcae649d513a4c48e949cb7741ad015901a764fda4c12366c19bbaaaa38d5041be0a14e94bf1d232506dc5ea08c461843b2fb95eaca1f028d87b10f3438ec05684215c12127da6d216ee42d7febee1c95e3322bc8737784a32f9a92d6c7a09febe436e05ed8822e27e03f96ef41d621faa891095a54a560a64fdfceb2af78228069d015bdbc531a55532cfc1667845b6678c975eb46d84ed5a8325dd5ed6729cfea917730d24ccfac1b2be9fa5b9052946fa0464a48424e4b72e3e4a9a2d96a6ea8bccc35fd4c35452a4b155fbac8d3747bfd82ca2726ed6d97a09ff5949ec95eeb676a16ed9de5581a1cfe11d81429c3062bf3ae95b54d7508ad7aa5147b53c2ad45666152d44cd628c7716648633df545b1df365a550318ec2c90d70f60ad2be6a2cead48d9985f97500628b49957c8015eecd73239b8aa0fa2817cc83c6071409b161017889119d9a3a7e7f256a7bd1b9d98de57cf584fac095898237646da471f68d8227994f6c32a5de0f7e38ce6c3e57b3a0ff7864dae5ad73126d8f5d859a14b5aa7b6940a3144c0256112a3cbfac418fd24f425d34cb374d4c7f35d9049d8dc75f1a84dd98a7445e5d87e76f41688aaad2179a914aa60385affb02c579271a8b96aa8579e612028566f96701acd7732dbd880d42ea4673fb7dfba0d641bdda4dce348d8651eb35704d4a762f05cea2940c17ee7b92bb4a2981d1ee1b41483372174ffd35c480c77efdd92872", 0xffe}, {&(0x7f00000005c0)="708fc86985ed6c5ceb896ab424d05ec6be3a63afe171525546d3c3e7f8cde5d5e2ca1683d5a422f76a8fd0dc5ec1b3364b908c7c14d767dec56dbb3fba2c90bd1096c4691001f0875e42cdc2272936562ac831c5dfcec637d73683906514086e9a4ea58d5beb27dc48", 0x69}, {&(0x7f0000000700)="f7d98027a3a57231c9d19fd0b53773f1cb8d3ff9c1569ba442bbb4088f911667ae5e1cbf530c7921584b76a3360b2e49940c265a14fed764b6d742d5b1d96786a6b2af6e7833f5f919954315f7a2111bad4f8abdc0d5ecb5ea76e2fd2c7ce8216d9eae324ef2ef2e6375ba07d973c3b10862d91c8fba5221e80976c99446bfe675d81d41afb9d911af2e505bf0e386fb341546acd8f73c34b46402ca62ab938013fe0cc9c844521cbb299ec1589816a2fbe4a98a6931a83a895b7b51af90c059", 0xc0}, {&(0x7f00000007c0)="8744bca86c0482b40314ecd26c0cc069ed20a7e50c009eae2cc90ca8f86a8f82f7d33edb92cb9d7807ebe5758c36ad17834729bcd0186253a297d3a8ce40554ecf41f342", 0x44}, {&(0x7f0000002200)="eb89689101dd410dc74e9bc640fdd2c3fab69c38fe7b06d53fa1fb39e0ac41ddf53387b4fc91396837aaa4d002fd1c19e1ff256d709bed0503b4dc3c9827d1e87c20e52f1235f2e40a630e77ac59d4fe42b72765326ea1476340673c3f2d59ffc2e4533ea725e11ae03d059e354c622fad075459a99cb5a6efa07baa3e30ba904ed5261c2e2f28dd63c714c7536a5b5531d60aebe54c745b2fd243827db51ac66688305b12952cea713a8750529507029c9a3f5339ece4b9bef6589dbf2f8b7491eb9ffa06ef5ea450d9", 0xca}, {&(0x7f0000002300)}, {&(0x7f0000004440)}, {&(0x7f00000023c0)="9fa5403d63bd238c4fd04f021e2b21bcb52f43e8adb19a15dad558dc27de5f4e74b55bf240e4655a4aef4feebb3c2966cca29fa0e103be75788b616c0099894abfc87ebd090b1920680f3fd7346fb51a8361b352cb264bcc03cd221ab66855b7a0edceb19f3899a3b5da4c3b3a85ede7b2685bafe2ba6411f26e923a23258a589188cd6fa3c65683b02c20cebeff994b5870cd5ca796adbc86a6337423eed3c1c49435c9a7d9df3f46c81b9ae24cc13e5e74f698abffc82da1637529c22a802415cac18e3c085a2d583cf787aca970086d2ae70a85fb63e85395e789", 0xdc}], 0x8, &(0x7f0000002800)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r3, r6, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, r6]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x160, 0x24048055}}], 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000240)=r4}, 0x20) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r3, 0x0, 0x3ffff) sendfile(r8, r3, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=4900): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49df, 0x0, 0x0, 0x35, 0x10, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r4, 0x3, 0xffffffffffffffff, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) get_robust_list(0x0, &(0x7f0000000880)=0x0, &(0x7f00000008c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) kernel console output (not intermixed with test programs): 7][T19779] Alternate GPT is invalid, using primary GPT. [ 590.092258][T19779] loop4: p1 p2 p3 [ 590.092652][T19786] loop5: detected capacity change from 0 to 512 [ 590.247099][T19791] loop6: detected capacity change from 0 to 128 [ 590.271930][T19794] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.4416'. [ 590.390501][T19798] loop2: detected capacity change from 0 to 512 [ 590.399413][T19794] loop0: detected capacity change from 0 to 8192 [ 590.493527][T19810] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.4420'. [ 590.507272][T19812] loop6: detected capacity change from 0 to 128 [ 590.608470][T19814] loop2: detected capacity change from 0 to 1024 [ 590.626773][T19814] EXT4-fs: Ignoring removed orlov option [ 590.641129][T19810] loop0: detected capacity change from 0 to 8192 [ 590.658378][T19814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.875347][T19825] loop4: detected capacity change from 0 to 512 [ 591.102724][T15267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.122447][T19833] loop4: detected capacity change from 0 to 512 [ 591.132948][T19833] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 591.246013][T19833] EXT4-fs (loop4): 1 truncate cleaned up [ 591.274218][T19833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.323854][T19836] loop5: detected capacity change from 0 to 128 [ 591.369554][T19840] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 591.399299][T19842] bio_check_eod: 125 callbacks suppressed [ 591.399316][T19842] syz.5.4426: attempt to access beyond end of device [ 591.399316][T19842] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 591.401191][T19840] lo speed is unknown, defaulting to 1000 [ 591.405720][T19842] syz.5.4426: attempt to access beyond end of device [ 591.405720][T19842] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 591.440446][T19843] loop6: detected capacity change from 0 to 128 [ 591.448909][T19842] syz.5.4426: attempt to access beyond end of device [ 591.448909][T19842] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 591.463801][T19842] syz.5.4426: attempt to access beyond end of device [ 591.463801][T19842] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 591.507310][T19842] syz.5.4426: attempt to access beyond end of device [ 591.507310][T19842] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 591.522612][T19842] syz.5.4426: attempt to access beyond end of device [ 591.522612][T19842] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 591.536478][T19842] syz.5.4426: attempt to access beyond end of device [ 591.536478][T19842] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 591.550346][T19842] syz.5.4426: attempt to access beyond end of device [ 591.550346][T19842] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 591.564059][T19842] syz.5.4426: attempt to access beyond end of device [ 591.564059][T19842] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 591.579136][T19842] syz.5.4426: attempt to access beyond end of device [ 591.579136][T19842] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 591.610171][T19836] hub 2-0:1.0: USB hub found [ 591.615061][T19836] hub 2-0:1.0: 8 ports detected [ 591.675372][T19849] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 591.773172][T19849] lo speed is unknown, defaulting to 1000 [ 591.945522][T15384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.023791][T19860] loop4: detected capacity change from 0 to 128 [ 592.181944][T19854] loop2: detected capacity change from 0 to 256 [ 592.224180][T19854] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 592.254992][T19854] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 592.254992][T19854] program syz.2.4431 not setting count and/or reply_len properly [ 592.331555][T19862] loop6: detected capacity change from 0 to 128 [ 592.398513][T19866] loop2: detected capacity change from 0 to 128 [ 592.405094][T19864] loop0: detected capacity change from 0 to 8192 [ 592.425608][T19864] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 592.506826][T19866] hub 2-0:1.0: USB hub found [ 592.511597][T19866] hub 2-0:1.0: 8 ports detected [ 592.539538][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4434'. [ 592.566741][T19874] loop6: detected capacity change from 0 to 128 [ 592.781950][T19885] loop0: detected capacity change from 0 to 512 [ 592.790089][T19885] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 592.802640][T19885] EXT4-fs (loop0): 1 truncate cleaned up [ 592.809944][T19885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.835338][T19883] loop2: detected capacity change from 0 to 128 [ 593.046048][T19883] hub 2-0:1.0: USB hub found [ 593.052273][T19883] hub 2-0:1.0: 8 ports detected [ 593.216808][T15027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.250955][T19894] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.4443'. [ 593.303534][T19897] lo speed is unknown, defaulting to 1000 [ 593.329163][T19895] loop2: detected capacity change from 0 to 128 [ 593.335756][T19894] loop4: detected capacity change from 0 to 8192 [ 593.360203][T19895] hub 2-0:1.0: USB hub found [ 593.388842][T19895] hub 2-0:1.0: 8 ports detected [ 593.430260][T19901] loop6: detected capacity change from 0 to 128 [ 593.544120][T19905] loop4: detected capacity change from 0 to 128 [ 593.555621][T19907] loop5: detected capacity change from 0 to 512 [ 593.610423][T19901] hub 2-0:1.0: USB hub found [ 593.618582][T19905] /dev/loop4: Can't open blockdev [ 593.627115][T19901] hub 2-0:1.0: 8 ports detected [ 593.732441][T19920] loop5: detected capacity change from 0 to 512 [ 593.825243][T19927] loop5: detected capacity change from 0 to 1024 [ 593.835562][T19927] EXT4-fs: Ignoring removed orlov option [ 593.853209][ T29] kauditd_printk_skb: 826 callbacks suppressed [ 593.853382][ T29] audit: type=1326 audit(1751755317.547:72590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19917 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 593.889157][T19927] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 593.898672][T19927] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 593.909666][T19918] lo speed is unknown, defaulting to 1000 [ 593.940274][ T29] audit: type=1326 audit(1751755317.597:72591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19917 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 593.964036][ T29] audit: type=1326 audit(1751755317.597:72592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19917 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 593.987722][ T29] audit: type=1326 audit(1751755317.597:72593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19917 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 594.011460][ T29] audit: type=1326 audit(1751755317.597:72594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19917 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 594.035574][ T29] audit: type=1326 audit(1751755317.597:72595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19917 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 594.059369][ T29] audit: type=1326 audit(1751755317.597:72596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19917 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 594.083034][ T29] audit: type=1326 audit(1751755317.597:72597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19917 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 594.106831][ T29] audit: type=1326 audit(1751755317.597:72598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19917 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 594.130564][ T29] audit: type=1326 audit(1751755317.597:72599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19917 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 594.163923][T19927] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 594.190453][T19927] System zones: 0-1, 3-12 [ 594.200293][T19923] lo speed is unknown, defaulting to 1000 [ 594.220452][T19927] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.4453: lblock 1 mapped to illegal pblock 1 (length 1) [ 594.269535][T19927] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4453: Failed to acquire dquot type 0 [ 594.284818][T19927] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.4453: Freeing blocks not in datazone - block = 0, count = 4096 [ 594.313470][T19927] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.4453: Invalid inode bitmap blk 0 in block_group 0 [ 594.326822][ T2724] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 594.351379][T19927] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 594.369160][ T2724] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 594.377147][T19927] EXT4-fs (loop5): 1 orphan inode deleted [ 594.434007][T19927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.484701][T19927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.549714][T19927] loop5: detected capacity change from 0 to 2048 [ 594.599438][T19927] Alternate GPT is invalid, using primary GPT. [ 594.605775][T19927] loop5: p1 p2 p3 [ 594.743762][T19947] loop4: detected capacity change from 0 to 128 [ 594.811775][T19949] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4457'. [ 594.981130][T19956] loop0: detected capacity change from 0 to 1024 [ 595.006886][T19956] EXT4-fs: Ignoring removed orlov option [ 595.024849][T19956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 595.040210][T19956] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 595.057483][T19956] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 595.076218][T19956] System zones: 0-1, 3-12 [ 595.099487][T19956] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.4460: lblock 1 mapped to illegal pblock 1 (length 1) [ 595.113671][T19956] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4460: Failed to acquire dquot type 0 [ 595.125497][T19956] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.4460: Freeing blocks not in datazone - block = 0, count = 4096 [ 595.139455][T19959] loop2: detected capacity change from 0 to 128 [ 595.142461][T19956] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4460: Invalid inode bitmap blk 0 in block_group 0 [ 595.159395][ T31] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 595.174019][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 595.189026][T19956] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 595.198481][T19956] EXT4-fs (loop0): 1 orphan inode deleted [ 595.204651][T19956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.220659][T19956] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.270344][T19962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4458'. [ 595.288635][T19965] loop2: detected capacity change from 0 to 128 [ 595.309436][T19956] loop0: detected capacity change from 0 to 2048 [ 595.336047][T19965] Cannot find add_set index 0 as target [ 595.375881][T19956] Alternate GPT is invalid, using primary GPT. [ 595.382304][T19956] loop0: p1 p2 p3 [ 595.392553][ T2997] Alternate GPT is invalid, using primary GPT. [ 595.399014][ T2997] loop0: p1 p2 p3 [ 595.420400][T19968] loop2: detected capacity change from 0 to 128 [ 595.678593][ T9303] udevd[9303]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 595.688844][ T3594] udevd[3594]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 595.719935][T19976] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.4464'. [ 595.739417][T19974] lo speed is unknown, defaulting to 1000 [ 595.827758][T19980] loop0: detected capacity change from 0 to 128 [ 595.855406][T19973] loop2: detected capacity change from 0 to 8192 [ 595.961037][T19985] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 595.984914][T19985] lo speed is unknown, defaulting to 1000 [ 596.031350][T19988] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.4470'. [ 596.131753][T19988] loop5: detected capacity change from 0 to 8192 [ 596.153648][T19990] loop0: detected capacity change from 0 to 8192 [ 596.173374][T19990] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 596.277365][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4469'. [ 596.325433][T19998] tipc: Enabling of bearer rejected, failed to enable media [ 596.334587][T19998] syzkaller0: entered promiscuous mode [ 596.340154][T19998] syzkaller0: entered allmulticast mode [ 596.433745][T20004] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 596.471305][T20004] lo speed is unknown, defaulting to 1000 [ 596.478893][T20006] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 596.554583][T20003] lo speed is unknown, defaulting to 1000 [ 596.669652][T20006] lo speed is unknown, defaulting to 1000 [ 596.727366][T20012] lo speed is unknown, defaulting to 1000 [ 596.775392][T20001] loop4: detected capacity change from 0 to 256 [ 596.898260][T20001] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 596.913470][T20018] loop5: detected capacity change from 0 to 1024 [ 596.921914][T20018] EXT4-fs: Ignoring removed orlov option [ 596.930157][T20001] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 596.930157][T20001] program syz.4.4473 not setting count and/or reply_len properly [ 596.987013][T20018] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 597.005301][T20018] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 597.049536][T20018] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 597.066482][T20018] System zones: 0-1, 3-12 [ 597.085952][T20022] loop0: detected capacity change from 0 to 512 [ 597.093872][T20018] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.4477: lblock 1 mapped to illegal pblock 1 (length 1) [ 597.124794][T20022] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 597.146755][T20024] loop2: detected capacity change from 0 to 512 [ 597.153781][T20024] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 597.185848][T20022] EXT4-fs (loop0): 1 truncate cleaned up [ 597.193065][T20018] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4477: Failed to acquire dquot type 0 [ 597.197842][T20027] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.4480'. [ 597.242621][T20022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.256540][T20027] loop6: detected capacity change from 0 to 8192 [ 597.272460][T20029] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 597.280445][T20024] EXT4-fs (loop2): 1 truncate cleaned up [ 597.285594][T20018] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.4477: Freeing blocks not in datazone - block = 0, count = 4096 [ 597.287140][T20024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.351423][T20029] lo speed is unknown, defaulting to 1000 [ 597.379193][T15027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.388740][T20018] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.4477: Invalid inode bitmap blk 0 in block_group 0 [ 597.405607][T20018] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 597.414337][T16449] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 597.440935][T20018] EXT4-fs (loop5): 1 orphan inode deleted [ 597.447655][T16449] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 0 [ 597.468816][T20018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.504367][T20038] loop0: detected capacity change from 0 to 1024 [ 597.518016][T20018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.536489][T20038] EXT4-fs: Ignoring removed orlov option [ 597.550178][T20038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 597.559092][T20040] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 597.569311][T20038] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 597.587440][T20018] loop5: detected capacity change from 0 to 2048 [ 597.599621][T20038] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 597.607900][T20038] System zones: 0-1, 3-12 [ 597.619334][T20038] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.4482: lblock 1 mapped to illegal pblock 1 (length 1) [ 597.637244][T20040] lo speed is unknown, defaulting to 1000 [ 597.651626][T20038] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4482: Failed to acquire dquot type 0 [ 597.663493][ T9303] Alternate GPT is invalid, using primary GPT. [ 597.670008][ T9303] loop5: p1 p2 p3 [ 597.674242][T20038] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.4482: Freeing blocks not in datazone - block = 0, count = 4096 [ 597.689087][T20038] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4482: Invalid inode bitmap blk 0 in block_group 0 [ 597.702264][T20038] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 597.716472][ T31] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 597.729858][T20038] EXT4-fs (loop0): 1 orphan inode deleted [ 597.741919][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 597.754566][T20038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.774626][T20018] Alternate GPT is invalid, using primary GPT. [ 597.776774][T20038] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.781090][T20018] loop5: p1 p2 p3 [ 597.849016][T20038] loop0: detected capacity change from 0 to 2048 [ 597.896127][ T3594] udevd[3594]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 597.898564][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 597.907388][T20038] Alternate GPT is invalid, using primary GPT. [ 597.918342][ T9304] udevd[9304]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 597.921923][T20038] loop0: p1 p2 p3 [ 597.939892][ T9304] udevd[9304]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 597.941044][ T3594] udevd[3594]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 597.952189][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 597.984304][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 597.988953][ T9304] udevd[9304]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 598.014604][T15267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.108589][T20051] loop2: detected capacity change from 0 to 128 [ 598.125654][T20050] lo speed is unknown, defaulting to 1000 [ 598.263837][T20051] bio_check_eod: 220 callbacks suppressed [ 598.263851][T20051] syz.2.4484: attempt to access beyond end of device [ 598.263851][T20051] loop2: rw=2049, sector=145, nr_sectors = 96 limit=128 [ 598.371577][T20059] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 598.383171][T20057] loop0: detected capacity change from 0 to 512 [ 598.441802][T20059] lo speed is unknown, defaulting to 1000 [ 598.666687][T20070] loop5: detected capacity change from 0 to 128 [ 598.912121][ T2724] kworker/u8:7: attempt to access beyond end of device [ 598.912121][ T2724] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 599.195381][ T29] kauditd_printk_skb: 647 callbacks suppressed [ 599.195398][ T29] audit: type=1326 audit(1751755322.887:73235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20075 comm="syz.2.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185c16e929 code=0x7ffc0000 [ 599.263216][ T29] audit: type=1326 audit(1751755322.937:73236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20075 comm="syz.2.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f185c16e929 code=0x7ffc0000 [ 599.286934][ T29] audit: type=1326 audit(1751755322.937:73237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20075 comm="syz.2.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185c16e929 code=0x7ffc0000 [ 599.310716][ T29] audit: type=1326 audit(1751755322.937:73238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20075 comm="syz.2.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f185c16e929 code=0x7ffc0000 [ 599.334432][ T29] audit: type=1326 audit(1751755322.937:73239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20075 comm="syz.2.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185c16e929 code=0x7ffc0000 [ 599.400725][T20082] tipc: Enabling of bearer rejected, failed to enable media [ 599.418605][T20076] loop2: detected capacity change from 0 to 256 [ 599.461221][T20076] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 599.486653][T20085] syzkaller0: entered promiscuous mode [ 599.492234][T20085] syzkaller0: entered allmulticast mode [ 599.520126][ T29] audit: type=1326 audit(1751755323.057:73240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20075 comm="syz.2.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185c16e929 code=0x7ffc0000 [ 599.520184][T20076] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 599.520184][T20076] program syz.2.4491 not setting count and/or reply_len properly [ 599.543930][ T29] audit: type=1326 audit(1751755323.207:73241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20075 comm="syz.2.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f185c16e929 code=0x7ffc0000 [ 599.584641][ T29] audit: type=1326 audit(1751755323.207:73242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20075 comm="syz.2.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185c16e929 code=0x7ffc0000 [ 599.608485][ T29] audit: type=1326 audit(1751755323.207:73243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20075 comm="syz.2.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185c16e929 code=0x7ffc0000 [ 599.632340][ T29] audit: type=1326 audit(1751755323.207:73244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20075 comm="syz.2.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f185c16e929 code=0x7ffc0000 [ 599.718750][T20087] loop5: detected capacity change from 0 to 8192 [ 599.768138][T20087] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 599.809312][T20091] loop4: detected capacity change from 0 to 512 [ 599.856363][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4495'. [ 599.908128][T20098] loop0: detected capacity change from 0 to 512 [ 599.932814][T20095] loop2: detected capacity change from 0 to 512 [ 599.980001][T20102] loop4: detected capacity change from 0 to 128 [ 600.039817][T20110] loop5: detected capacity change from 0 to 128 [ 600.137397][T20102] syz.4.4499: attempt to access beyond end of device [ 600.137397][T20102] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 600.152186][T20117] syz.5.4500: attempt to access beyond end of device [ 600.152186][T20117] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 600.166612][T20117] syz.5.4500: attempt to access beyond end of device [ 600.166612][T20117] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 600.189482][T20117] syz.5.4500: attempt to access beyond end of device [ 600.189482][T20117] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 600.196469][T20102] syz.4.4499: attempt to access beyond end of device [ 600.196469][T20102] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 600.213302][T20117] syz.5.4500: attempt to access beyond end of device [ 600.213302][T20117] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 600.248535][T20114] hub 2-0:1.0: USB hub found [ 600.253355][T20114] hub 2-0:1.0: 8 ports detected [ 600.260134][T20102] syz.4.4499: attempt to access beyond end of device [ 600.260134][T20102] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 600.278366][T20117] syz.5.4500: attempt to access beyond end of device [ 600.278366][T20117] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 600.332942][T20121] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 600.361003][T20121] lo speed is unknown, defaulting to 1000 [ 600.371987][T20119] loop6: detected capacity change from 0 to 8192 [ 600.419671][T20119] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 600.462682][T20113] loop0: detected capacity change from 0 to 256 [ 600.470203][T20128] loop4: detected capacity change from 0 to 128 [ 600.515716][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4503'. [ 600.561615][T20113] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 600.585637][T20113] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 600.585637][T20113] program syz.0.4501 not setting count and/or reply_len properly [ 600.711344][T20134] loop0: detected capacity change from 0 to 256 [ 600.739605][T20135] loop6: detected capacity change from 0 to 128 [ 600.794221][T20134] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 600.827826][T20134] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 600.827826][T20134] program syz.0.4507 not setting count and/or reply_len properly [ 601.021046][T20143] loop5: detected capacity change from 0 to 128 [ 601.079423][T20144] loop2: detected capacity change from 0 to 128 [ 601.329170][T20148] loop4: detected capacity change from 0 to 512 [ 601.442687][T20154] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 601.469253][T20154] lo speed is unknown, defaulting to 1000 [ 601.582209][T20157] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 601.609104][T20157] lo speed is unknown, defaulting to 1000 [ 601.874769][T20166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4516'. [ 601.941306][T20164] loop5: detected capacity change from 0 to 8192 [ 601.974652][T20164] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 601.987400][T20163] loop4: detected capacity change from 0 to 8192 [ 601.998092][T20170] loop0: detected capacity change from 0 to 256 [ 602.013416][T20163] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 602.027305][T20170] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 602.040377][T20170] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 602.040377][T20170] program syz.0.4518 not setting count and/or reply_len properly [ 602.060344][T20174] loop6: detected capacity change from 0 to 128 [ 602.101891][T20177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4515'. [ 602.142697][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4514'. [ 602.176968][T20180] loop0: detected capacity change from 0 to 512 [ 602.282003][T20168] loop2: detected capacity change from 0 to 256 [ 602.290913][T20186] loop4: detected capacity change from 0 to 512 [ 602.315548][T20168] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 602.315914][T20185] loop0: detected capacity change from 0 to 128 [ 602.350761][T20168] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 602.350761][T20168] program syz.2.4517 not setting count and/or reply_len properly [ 602.459936][T20185] hub 2-0:1.0: USB hub found [ 602.467361][T20195] loop4: detected capacity change from 0 to 512 [ 602.469587][T20185] hub 2-0:1.0: 8 ports detected [ 602.536668][T20194] loop5: detected capacity change from 0 to 8192 [ 602.549477][T20194] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 602.603009][T20200] lo speed is unknown, defaulting to 1000 [ 602.618109][T20205] loop0: detected capacity change from 0 to 128 [ 602.649726][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4523'. [ 602.819980][T20215] loop5: detected capacity change from 0 to 512 [ 602.871887][T20219] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 602.930903][T20219] lo speed is unknown, defaulting to 1000 [ 602.952177][T20221] loop5: detected capacity change from 0 to 128 [ 603.078349][T20221] hub 2-0:1.0: USB hub found [ 603.084255][T20221] hub 2-0:1.0: 8 ports detected [ 603.211511][T20228] loop5: detected capacity change from 0 to 2048 [ 603.280016][T20231] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 603.289656][T20228] Alternate GPT is invalid, using primary GPT. [ 603.296108][T20228] loop5: p1 p2 p3 [ 603.309244][T20231] lo speed is unknown, defaulting to 1000 [ 603.335323][ T2997] Alternate GPT is invalid, using primary GPT. [ 603.341796][ T2997] loop5: p1 p2 p3 [ 603.822838][T20240] loop0: detected capacity change from 0 to 1024 [ 603.837023][T20240] EXT4-fs: Ignoring removed orlov option [ 603.850766][T20240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 603.868619][T20240] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 603.897716][T20240] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 603.915229][T20240] System zones: 0-1, 3-12 [ 603.928360][T20240] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.4537: lblock 1 mapped to illegal pblock 1 (length 1) [ 603.944132][T20240] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4537: Failed to acquire dquot type 0 [ 603.957381][T20240] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.4537: Freeing blocks not in datazone - block = 0, count = 4096 [ 603.971567][T20240] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4537: Invalid inode bitmap blk 0 in block_group 0 [ 603.984400][T20236] loop4: detected capacity change from 0 to 256 [ 603.985902][T20240] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 604.014062][ T12] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 604.049802][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 604.062130][T20236] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 604.076810][T20240] EXT4-fs (loop0): 1 orphan inode deleted [ 604.082918][T20240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.097024][T20236] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 604.097024][T20236] program syz.4.4536 not setting count and/or reply_len properly [ 604.150044][T20240] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.159459][T20248] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 604.183743][T20248] lo speed is unknown, defaulting to 1000 [ 604.205731][ T29] kauditd_printk_skb: 684 callbacks suppressed [ 604.205747][ T29] audit: type=1326 audit(1751755327.887:73926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e024ad290 code=0x7ffc0000 [ 604.235709][ T29] audit: type=1326 audit(1751755327.887:73927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e024ae52b code=0x7ffc0000 [ 604.256628][T20246] loop5: detected capacity change from 0 to 8192 [ 604.259301][ T29] audit: type=1326 audit(1751755327.887:73928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6e024ad58a code=0x7ffc0000 [ 604.289053][ T29] audit: type=1326 audit(1751755327.887:73929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 604.312668][ T29] audit: type=1326 audit(1751755327.897:73930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 604.336307][ T29] audit: type=1326 audit(1751755327.897:73931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 604.359918][ T29] audit: type=1326 audit(1751755327.897:73932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 604.376880][T20246] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 604.383532][ T29] audit: type=1326 audit(1751755327.897:73933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 604.417728][ T29] audit: type=1326 audit(1751755327.897:73934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 604.441438][ T29] audit: type=1326 audit(1751755327.897:73935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.0.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 604.469282][T20240] loop0: detected capacity change from 0 to 2048 [ 604.513295][ T3594] Alternate GPT is invalid, using primary GPT. [ 604.519711][ T3594] loop0: p1 p2 p3 [ 604.547124][T20253] loop4: detected capacity change from 0 to 512 [ 604.567475][T20240] Alternate GPT is invalid, using primary GPT. [ 604.573806][T20240] loop0: p1 p2 p3 [ 604.597256][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4538'. [ 604.713350][ T9304] udevd[9304]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 604.728119][ T3594] udevd[3594]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 604.739720][ T9303] udevd[9303]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 604.788462][ T9303] udevd[9303]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 604.793279][T20262] loop6: detected capacity change from 0 to 2048 [ 604.801327][ T9304] udevd[9304]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 604.825200][ T3594] udevd[3594]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 604.826722][T20264] loop0: detected capacity change from 0 to 512 [ 604.843821][ T3299] Alternate GPT is invalid, using primary GPT. [ 604.850150][ T3299] loop6: p1 p2 p3 [ 604.874864][T20266] loop2: detected capacity change from 0 to 512 [ 604.921301][T20262] Alternate GPT is invalid, using primary GPT. [ 604.927702][T20262] loop6: p1 p2 p3 [ 604.938741][T20266] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 604.969287][T20266] EXT4-fs (loop2): 1 truncate cleaned up [ 604.999751][T20266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.017150][T20271] loop5: detected capacity change from 0 to 512 [ 605.084109][T20275] loop0: detected capacity change from 0 to 8192 [ 605.095077][T20275] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 605.168114][T20283] loop5: detected capacity change from 0 to 512 [ 605.191069][T20285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4546'. [ 605.261586][T20289] loop5: detected capacity change from 0 to 512 [ 605.395267][T20297] loop5: detected capacity change from 0 to 256 [ 605.409016][T20296] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 605.420121][T20296] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 605.420121][T20296] program syz.5.4550 not setting count and/or reply_len properly [ 605.465049][T20300] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 605.709998][ T3382] IPVS: starting estimator thread 0... [ 605.760063][T15267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.806449][T20303] IPVS: using max 2352 ests per chain, 117600 per kthread [ 605.831557][T20305] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 605.834133][T20307] loop6: detected capacity change from 0 to 1024 [ 605.845991][T20307] EXT4-fs: Ignoring removed orlov option [ 605.870512][T20305] lo speed is unknown, defaulting to 1000 [ 605.875339][T20307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 605.895298][T20307] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 605.909818][T20309] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 605.929650][T20307] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 605.939473][T20307] System zones: 0-1, 3-12 [ 605.954332][T20307] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #3: block 1: comm syz.6.4553: lblock 1 mapped to illegal pblock 1 (length 1) [ 605.981620][T20313] loop4: detected capacity change from 0 to 512 [ 605.988233][T20307] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4553: Failed to acquire dquot type 0 [ 606.004398][T20307] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.4553: Freeing blocks not in datazone - block = 0, count = 4096 [ 606.016398][T20309] lo speed is unknown, defaulting to 1000 [ 606.042801][T20307] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.4553: Invalid inode bitmap blk 0 in block_group 0 [ 606.075667][T16449] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 606.097315][T20307] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 606.103239][T16449] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 0 [ 606.120509][T20307] EXT4-fs (loop6): 1 orphan inode deleted [ 606.135293][T20307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.211643][T20324] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 606.222001][T20307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.317070][T20307] loop6: detected capacity change from 0 to 2048 [ 606.325644][T20324] lo speed is unknown, defaulting to 1000 [ 606.379284][T20307] Alternate GPT is invalid, using primary GPT. [ 606.385691][T20307] loop6: p1 p2 p3 [ 606.562741][T20332] syzkaller0: entered promiscuous mode [ 606.568348][T20332] syzkaller0: entered allmulticast mode [ 606.771478][T20341] loop6: detected capacity change from 0 to 512 [ 606.796237][T20341] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 606.826837][T20345] loop2: detected capacity change from 0 to 512 [ 606.861889][T20341] EXT4-fs (loop6): 1 truncate cleaned up [ 606.870040][T20341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.884354][T20343] lo speed is unknown, defaulting to 1000 [ 606.895020][T20347] loop5: detected capacity change from 0 to 512 [ 606.948176][T20353] loop2: detected capacity change from 0 to 2048 [ 606.978679][ T9303] Alternate GPT is invalid, using primary GPT. [ 606.985056][ T9303] loop2: p1 p2 p3 [ 607.011022][T20353] Alternate GPT is invalid, using primary GPT. [ 607.017401][T20353] loop2: p1 p2 p3 [ 607.162084][T20360] loop4: detected capacity change from 0 to 8192 [ 607.169799][T20360] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 607.265713][T20364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4566'. [ 607.428032][T20369] loop4: detected capacity change from 0 to 128 [ 607.499652][T20371] bio_check_eod: 207 callbacks suppressed [ 607.499725][T20371] syz.4.4568: attempt to access beyond end of device [ 607.499725][T20371] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 607.520769][T20371] syz.4.4568: attempt to access beyond end of device [ 607.520769][T20371] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 607.534814][T20371] syz.4.4568: attempt to access beyond end of device [ 607.534814][T20371] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 607.550267][T20371] syz.4.4568: attempt to access beyond end of device [ 607.550267][T20371] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 607.588222][T20371] syz.4.4568: attempt to access beyond end of device [ 607.588222][T20371] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 607.606443][T20371] syz.4.4568: attempt to access beyond end of device [ 607.606443][T20371] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 607.620896][T20371] syz.4.4568: attempt to access beyond end of device [ 607.620896][T20371] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 607.634768][T20371] syz.4.4568: attempt to access beyond end of device [ 607.634768][T20371] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 607.649275][T20371] syz.4.4568: attempt to access beyond end of device [ 607.649275][T20371] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 607.687932][T20371] syz.4.4568: attempt to access beyond end of device [ 607.687932][T20371] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 607.746548][T11491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.865272][T20374] loop4: detected capacity change from 0 to 128 [ 607.967931][T20377] syzkaller0: entered promiscuous mode [ 607.973470][T20377] syzkaller0: entered allmulticast mode [ 608.028748][T20381] loop2: detected capacity change from 0 to 128 [ 608.059125][T20383] loop6: detected capacity change from 0 to 128 [ 608.082461][T20384] loop4: detected capacity change from 0 to 256 [ 608.095438][T20386] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4573'. [ 608.111042][T20386] loop5: detected capacity change from 0 to 512 [ 608.118387][T20384] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 608.142557][T20384] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 608.142557][T20384] program syz.4.4574 not setting count and/or reply_len properly [ 608.180585][T20386] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 608.219024][T20386] EXT4-fs (loop5): mount failed [ 608.294314][T20397] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.4577'. [ 608.344361][T20397] loop4: detected capacity change from 0 to 8192 [ 608.419788][T20400] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 608.445310][T20400] lo speed is unknown, defaulting to 1000 [ 608.514913][T20392] loop0: detected capacity change from 0 to 256 [ 608.526442][T20392] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 608.539226][T20392] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 608.539226][T20392] program syz.0.4576 not setting count and/or reply_len properly [ 608.621667][T20404] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 608.641186][T20404] lo speed is unknown, defaulting to 1000 [ 608.782639][T20413] loop4: detected capacity change from 0 to 1024 [ 608.790984][T20413] EXT4-fs: Ignoring removed orlov option [ 608.801165][T20413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.897712][T20421] loop2: detected capacity change from 0 to 128 [ 609.041528][T20423] syzkaller0: entered promiscuous mode [ 609.047095][T20423] syzkaller0: entered allmulticast mode [ 609.142593][T20427] loop0: detected capacity change from 0 to 2048 [ 609.165274][T15384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.219597][T20427] Alternate GPT is invalid, using primary GPT. [ 609.225942][T20427] loop0: p1 p2 p3 [ 609.244615][T20433] loop5: detected capacity change from 0 to 128 [ 609.312473][ T29] kauditd_printk_skb: 1366 callbacks suppressed [ 609.312490][ T29] audit: type=1326 audit(1751755333.007:75298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20418 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 609.347821][T20419] loop6: detected capacity change from 0 to 256 [ 609.367367][T20419] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 609.386671][ T29] audit: type=1326 audit(1751755333.037:75299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20418 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 609.410412][ T29] audit: type=1326 audit(1751755333.037:75300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20418 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 609.434147][ T29] audit: type=1326 audit(1751755333.037:75301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20418 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 609.447706][T20419] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 609.447706][T20419] program syz.6.4583 not setting count and/or reply_len properly [ 609.457961][ T29] audit: type=1326 audit(1751755333.037:75302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20418 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 609.498337][ T29] audit: type=1326 audit(1751755333.037:75303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20418 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 609.522037][ T29] audit: type=1326 audit(1751755333.037:75304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20418 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 609.545750][ T29] audit: type=1326 audit(1751755333.037:75305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20418 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 609.569274][ T29] audit: type=1326 audit(1751755333.037:75306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20418 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 609.569750][T20432] loop4: detected capacity change from 0 to 256 [ 609.592978][ T29] audit: type=1326 audit(1751755333.037:75307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20418 comm="syz.6.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 609.641860][T20432] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 609.659299][T20432] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 609.659299][T20432] program syz.4.4586 not setting count and/or reply_len properly [ 609.752248][T20438] loop6: detected capacity change from 0 to 512 [ 609.849848][T20441] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 609.873175][T20441] lo speed is unknown, defaulting to 1000 [ 609.965639][T20444] lo speed is unknown, defaulting to 1000 [ 610.061929][T20450] loop5: detected capacity change from 0 to 1024 [ 610.070063][T20451] loop4: detected capacity change from 0 to 128 [ 610.088411][T20450] EXT4-fs: Ignoring removed orlov option [ 610.107069][T20450] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 610.127268][T20450] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 610.154849][T20450] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 610.185612][T20450] System zones: 0-1, 3-12 [ 610.191981][T20450] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.4593: lblock 1 mapped to illegal pblock 1 (length 1) [ 610.206250][T20450] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4593: Failed to acquire dquot type 0 [ 610.223178][T20450] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.4593: Freeing blocks not in datazone - block = 0, count = 4096 [ 610.254333][T20450] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.4593: Invalid inode bitmap blk 0 in block_group 0 [ 610.281349][ T5259] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 610.296147][T20450] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 610.301154][ T5259] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 610.306125][T20450] EXT4-fs (loop5): 1 orphan inode deleted [ 610.353068][T20450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.379327][T20455] loop0: detected capacity change from 0 to 8192 [ 610.390326][T20450] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.402218][T20455] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 610.503154][T20450] loop5: detected capacity change from 0 to 2048 [ 610.516757][T20458] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4595'. [ 610.529299][T20458] loop6: detected capacity change from 0 to 512 [ 610.538255][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4594'. [ 610.575290][ T3594] Alternate GPT is invalid, using primary GPT. [ 610.581747][ T3594] loop5: p1 p2 p3 [ 610.611750][T20450] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) [ 610.621868][T20458] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 610.655553][T20458] EXT4-fs (loop6): mount failed [ 610.744124][T20463] loop2: detected capacity change from 0 to 8192 [ 610.763535][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 610.775648][ T9304] udevd[9304]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 610.779082][ T3594] udevd[3594]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 610.803231][T20463] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 610.827829][T20468] loop0: detected capacity change from 0 to 8192 [ 610.842008][T20468] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 610.891121][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4596'. [ 610.944186][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4598'. [ 610.981468][T20477] loop4: detected capacity change from 0 to 128 [ 611.029769][T20473] loop5: detected capacity change from 0 to 8192 [ 611.042090][T20473] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 611.174504][T20483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4600'. [ 611.344888][T20482] loop0: detected capacity change from 0 to 256 [ 611.394660][T20490] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 611.402772][T20482] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 611.444352][T20482] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 611.444352][T20482] program syz.0.4602 not setting count and/or reply_len properly [ 611.453130][T20490] lo speed is unknown, defaulting to 1000 [ 611.486712][T20492] loop2: detected capacity change from 0 to 1024 [ 611.499543][T20492] EXT4-fs: Ignoring removed orlov option [ 611.515696][T20492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.819128][T15267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.834026][T20500] lo speed is unknown, defaulting to 1000 [ 611.908985][T20508] loop2: detected capacity change from 0 to 128 [ 612.061971][T20511] loop6: detected capacity change from 0 to 8192 [ 612.073259][T20511] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 612.112308][T20514] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 612.157613][T20517] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 612.181452][T20517] lo speed is unknown, defaulting to 1000 [ 612.189721][T20519] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 612.212029][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4611'. [ 612.243946][T20519] lo speed is unknown, defaulting to 1000 [ 612.332378][T20514] lo speed is unknown, defaulting to 1000 [ 612.489483][T20530] loop5: detected capacity change from 0 to 512 [ 612.576607][T20535] loop5: detected capacity change from 0 to 512 [ 612.681860][T20542] loop0: detected capacity change from 0 to 1024 [ 612.690435][T20542] EXT4-fs: Ignoring removed orlov option [ 612.734786][T20542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.811583][T20551] loop5: detected capacity change from 0 to 128 [ 612.818111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.827969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.840537][T20549] loop2: detected capacity change from 0 to 128 [ 612.867822][T20552] loop4: detected capacity change from 0 to 128 [ 612.944375][T20555] bio_check_eod: 99 callbacks suppressed [ 612.944395][T20555] syz.2.4621: attempt to access beyond end of device [ 612.944395][T20555] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 612.964327][T20557] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 613.011049][T20557] lo speed is unknown, defaulting to 1000 [ 613.049265][T20555] syz.2.4621: attempt to access beyond end of device [ 613.049265][T20555] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 613.099262][T20555] syz.2.4621: attempt to access beyond end of device [ 613.099262][T20555] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 613.115890][T15027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.125476][T20555] syz.2.4621: attempt to access beyond end of device [ 613.125476][T20555] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 613.143114][T20555] syz.2.4621: attempt to access beyond end of device [ 613.143114][T20555] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 613.172152][T20549] hub 2-0:1.0: USB hub found [ 613.197070][T20549] hub 2-0:1.0: 8 ports detected [ 613.202425][T20562] loop0: detected capacity change from 0 to 128 [ 613.209845][T20555] syz.2.4621: attempt to access beyond end of device [ 613.209845][T20555] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 613.248849][T20555] syz.2.4621: attempt to access beyond end of device [ 613.248849][T20555] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 613.262612][T20555] syz.2.4621: attempt to access beyond end of device [ 613.262612][T20555] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 613.277001][T20555] syz.2.4621: attempt to access beyond end of device [ 613.277001][T20555] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 613.290769][T20555] syz.2.4621: attempt to access beyond end of device [ 613.290769][T20555] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 613.434133][T20565] loop0: detected capacity change from 0 to 8192 [ 613.442950][T20565] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 613.552166][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4625'. [ 613.677597][T20574] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 613.714879][T20574] lo speed is unknown, defaulting to 1000 [ 613.785472][T20581] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 613.821041][T20584] loop4: detected capacity change from 0 to 128 [ 613.847263][T20583] loop0: detected capacity change from 0 to 128 [ 613.852235][T20581] lo speed is unknown, defaulting to 1000 [ 613.956535][T20583] hub 2-0:1.0: USB hub found [ 613.961344][T20583] hub 2-0:1.0: 8 ports detected [ 614.064704][T20591] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 614.124079][T20591] lo speed is unknown, defaulting to 1000 [ 614.149198][T20593] loop5: detected capacity change from 0 to 1024 [ 614.164114][T20593] EXT4-fs: Ignoring removed orlov option [ 614.194362][T20593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.303215][T20598] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 614.345469][ T29] kauditd_printk_skb: 707 callbacks suppressed [ 614.345484][ T29] audit: type=1326 audit(1751755338.037:76011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.0.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 614.387162][ T29] audit: type=1326 audit(1751755338.047:76012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20588 comm="syz.0.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 614.433061][ T29] audit: type=1326 audit(1751755338.127:76013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20597 comm="syz.6.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 614.456842][ T29] audit: type=1326 audit(1751755338.127:76014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20597 comm="syz.6.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 614.481437][ T29] audit: type=1326 audit(1751755338.177:76015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20597 comm="syz.6.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 614.494724][T20598] lo speed is unknown, defaulting to 1000 [ 614.505235][ T29] audit: type=1326 audit(1751755338.177:76016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20597 comm="syz.6.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 614.534557][ T29] audit: type=1326 audit(1751755338.177:76017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20597 comm="syz.6.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 614.566809][ T29] audit: type=1326 audit(1751755338.257:76018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20597 comm="syz.6.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 614.590514][ T29] audit: type=1326 audit(1751755338.257:76019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20597 comm="syz.6.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 614.614140][ T29] audit: type=1326 audit(1751755338.257:76020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20597 comm="syz.6.4635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 614.719316][T20600] loop2: detected capacity change from 0 to 128 [ 614.788937][T10078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.870371][T20609] syzkaller0: entered promiscuous mode [ 614.875968][T20609] syzkaller0: entered allmulticast mode [ 614.942693][T20611] loop0: detected capacity change from 0 to 512 [ 614.977996][T20613] loop6: detected capacity change from 0 to 512 [ 615.088267][T20623] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 615.130762][T20623] lo speed is unknown, defaulting to 1000 [ 615.160619][T20629] loop6: detected capacity change from 0 to 128 [ 615.195153][T20624] lo speed is unknown, defaulting to 1000 [ 615.253825][T20604] loop4: detected capacity change from 0 to 256 [ 615.329363][T20604] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 615.354613][T20604] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 615.354613][T20604] program syz.4.4637 not setting count and/or reply_len properly [ 615.449298][T20620] loop2: detected capacity change from 0 to 256 [ 615.600837][T20620] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 615.661282][T20620] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 615.661282][T20620] program syz.2.4644 not setting count and/or reply_len properly [ 615.704646][T20637] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 615.753209][T20637] lo speed is unknown, defaulting to 1000 [ 615.792928][T20640] loop5: detected capacity change from 0 to 128 [ 615.840615][T20643] loop2: detected capacity change from 0 to 1024 [ 615.848744][T20643] EXT4-fs: Ignoring removed orlov option [ 615.864496][T20643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.037525][T20648] loop6: detected capacity change from 0 to 8192 [ 616.059513][T20648] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 616.147864][T15267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.254143][T20652] lo speed is unknown, defaulting to 1000 [ 616.273149][T20656] syzkaller0: entered promiscuous mode [ 616.278779][T20656] syzkaller0: entered allmulticast mode [ 616.286117][T20658] loop6: detected capacity change from 0 to 128 [ 616.428723][T20665] lo speed is unknown, defaulting to 1000 [ 616.472850][T20667] loop4: detected capacity change from 0 to 8192 [ 616.482671][T20667] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 616.564235][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4657'. [ 616.592653][T20672] loop2: detected capacity change from 0 to 8192 [ 616.623040][T20672] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 616.777285][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4658'. [ 616.789992][T20686] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 616.813806][T20684] loop0: detected capacity change from 0 to 128 [ 616.845931][T20686] lo speed is unknown, defaulting to 1000 [ 616.927515][T20684] hub 2-0:1.0: USB hub found [ 616.940828][T20684] hub 2-0:1.0: 8 ports detected [ 616.948155][T20691] loop2: detected capacity change from 0 to 2048 [ 616.978760][ T3594] Alternate GPT is invalid, using primary GPT. [ 616.985065][ T3594] loop2: p1 p2 p3 [ 616.997826][T20675] loop5: detected capacity change from 0 to 256 [ 617.022675][T20691] Alternate GPT is invalid, using primary GPT. [ 617.029229][T20691] loop2: p1 p2 p3 [ 617.054851][T20694] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 617.079265][T20675] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 617.124251][T20675] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 617.124251][T20675] program syz.5.4659 not setting count and/or reply_len properly [ 617.132609][T20694] lo speed is unknown, defaulting to 1000 [ 617.154420][T20698] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 617.304934][T20698] lo speed is unknown, defaulting to 1000 [ 617.396225][T20706] syzkaller0: entered promiscuous mode [ 617.401900][T20706] syzkaller0: entered allmulticast mode [ 617.429932][T20707] lo speed is unknown, defaulting to 1000 [ 617.800196][T20716] lo speed is unknown, defaulting to 1000 [ 617.864045][T20723] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4673'. [ 617.895076][T20718] loop6: detected capacity change from 0 to 8192 [ 617.910876][T20718] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 617.939728][T20724] loop0: detected capacity change from 0 to 512 [ 617.958246][T20713] loop4: detected capacity change from 0 to 256 [ 617.979157][T20724] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 617.998378][T20713] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 618.011812][T20721] loop2: detected capacity change from 0 to 8192 [ 618.012832][T20713] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 618.012832][T20713] program syz.4.4669 not setting count and/or reply_len properly [ 618.046478][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4671'. [ 618.048690][T20724] EXT4-fs (loop0): mount failed [ 618.071682][T20721] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 618.194269][T20733] loop4: detected capacity change from 0 to 512 [ 618.204069][T20733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 618.215953][T20734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4672'. [ 618.295430][T20733] EXT4-fs (loop4): 1 truncate cleaned up [ 618.307016][T20733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.335497][T20736] loop6: detected capacity change from 0 to 8192 [ 618.347056][T20736] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 618.360355][T20739] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 618.402735][T20739] lo speed is unknown, defaulting to 1000 [ 618.437242][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4675'. [ 618.667483][T20751] loop6: detected capacity change from 0 to 512 [ 618.681104][T20747] loop2: detected capacity change from 0 to 256 [ 618.736743][T20747] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 618.846516][T20747] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 618.846516][T20747] program syz.2.4678 not setting count and/or reply_len properly [ 618.877061][T20755] lo speed is unknown, defaulting to 1000 [ 618.929383][T20761] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 618.986547][T20761] lo speed is unknown, defaulting to 1000 [ 619.039314][T15384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.098818][T20764] loop5: detected capacity change from 0 to 2048 [ 619.114192][T20767] loop2: detected capacity change from 0 to 8192 [ 619.134793][T20767] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 619.153164][T20769] loop4: detected capacity change from 0 to 128 [ 619.188853][T20764] Alternate GPT is invalid, using primary GPT. [ 619.195189][T20764] loop5: p1 p2 p3 [ 619.241584][T20774] bio_check_eod: 188 callbacks suppressed [ 619.241601][T20774] syz.4.4684: attempt to access beyond end of device [ 619.241601][T20774] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 619.272955][T20776] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 619.280060][T20774] syz.4.4684: attempt to access beyond end of device [ 619.280060][T20774] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 619.306502][T20774] syz.4.4684: attempt to access beyond end of device [ 619.306502][T20774] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 619.330776][T20778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4683'. [ 619.346600][T20774] syz.4.4684: attempt to access beyond end of device [ 619.346600][T20774] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 619.358634][ T29] kauditd_printk_skb: 765 callbacks suppressed [ 619.358652][ T29] audit: type=1326 audit(1751755343.047:76785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20760 comm="syz.6.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 619.376403][T20774] syz.4.4684: attempt to access beyond end of device [ 619.376403][T20774] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 619.415877][T20776] lo speed is unknown, defaulting to 1000 [ 619.430445][ T29] audit: type=1326 audit(1751755343.087:76786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20760 comm="syz.6.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 619.454217][ T29] audit: type=1326 audit(1751755343.127:76787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 619.454522][T20774] syz.4.4684: attempt to access beyond end of device [ 619.454522][T20774] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 619.477919][ T29] audit: type=1326 audit(1751755343.127:76788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 619.522015][ T29] audit: type=1326 audit(1751755343.207:76789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 619.526468][T20774] syz.4.4684: attempt to access beyond end of device [ 619.526468][T20774] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 619.545770][ T29] audit: type=1326 audit(1751755343.207:76790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 619.582828][ T29] audit: type=1326 audit(1751755343.207:76791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 619.593017][T20774] syz.4.4684: attempt to access beyond end of device [ 619.593017][T20774] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 619.606494][ T29] audit: type=1326 audit(1751755343.207:76792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 619.627723][T20774] syz.4.4684: attempt to access beyond end of device [ 619.627723][T20774] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 619.643499][ T29] audit: type=1326 audit(1751755343.207:76793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 619.643538][ T29] audit: type=1326 audit(1751755343.207:76794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.0.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 619.680778][T20774] syz.4.4684: attempt to access beyond end of device [ 619.680778][T20774] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 619.920690][T20790] loop4: detected capacity change from 0 to 512 [ 620.022501][T20795] loop2: detected capacity change from 0 to 128 [ 620.024479][T20797] loop0: detected capacity change from 0 to 1024 [ 620.038187][T20799] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 620.047518][T20797] EXT4-fs: Ignoring removed orlov option [ 620.055973][T20793] loop6: detected capacity change from 0 to 8192 [ 620.065327][T20793] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 620.078081][T20797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.146804][T20799] lo speed is unknown, defaulting to 1000 [ 620.157103][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4692'. [ 620.212871][T20795] Cannot find add_set index 0 as target [ 620.310758][T20810] lo speed is unknown, defaulting to 1000 [ 620.391988][T15027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.419444][T20819] loop0: detected capacity change from 0 to 512 [ 620.427327][T20820] loop6: detected capacity change from 0 to 128 [ 620.578208][T20826] loop0: detected capacity change from 0 to 1024 [ 620.585419][T20826] EXT4-fs: Ignoring removed orlov option [ 620.603167][T20826] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 620.611757][T20828] loop4: detected capacity change from 0 to 2048 [ 620.618589][T20826] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 620.633466][T20826] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 620.642340][T20826] System zones: 0-1, 3-12 [ 620.652032][T20826] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.4699: lblock 1 mapped to illegal pblock 1 (length 1) [ 620.668254][T20826] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4699: Failed to acquire dquot type 0 [ 620.674350][ T9303] Alternate GPT is invalid, using primary GPT. [ 620.685832][T20826] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.4699: Freeing blocks not in datazone - block = 0, count = 4096 [ 620.685880][ T9303] loop4: p1 p2 p3 [ 620.707798][T20826] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4699: Invalid inode bitmap blk 0 in block_group 0 [ 620.719258][T20828] Alternate GPT is invalid, using primary GPT. [ 620.726941][T20828] loop4: p1 p2 p3 [ 620.730609][T20826] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 620.740874][ T2724] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 620.742464][T20826] EXT4-fs (loop0): 1 orphan inode deleted [ 620.763801][ T2724] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 620.787729][T20835] loop2: detected capacity change from 0 to 128 [ 620.788583][T20826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.833199][T20838] loop5: detected capacity change from 0 to 512 [ 620.843464][T20826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.945418][T20826] loop0: detected capacity change from 0 to 2048 [ 620.962072][T20843] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 620.973545][ T9303] Alternate GPT is invalid, using primary GPT. [ 620.979992][ T9303] loop0: p1 p2 p3 [ 620.993793][T20843] lo speed is unknown, defaulting to 1000 [ 621.001836][T20826] Alternate GPT is invalid, using primary GPT. [ 621.008252][T20826] loop0: p1 p2 p3 [ 621.450151][T20852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4707'. [ 621.536648][T20856] lo speed is unknown, defaulting to 1000 [ 621.554424][T20854] loop4: detected capacity change from 0 to 8192 [ 621.578128][T20854] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 621.673384][T20850] loop0: detected capacity change from 0 to 256 [ 621.701615][T20862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4708'. [ 621.745104][T20861] loop2: detected capacity change from 0 to 8192 [ 621.768205][T20861] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 621.778951][T20850] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 621.785000][T20850] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 621.785000][T20850] program syz.0.4706 not setting count and/or reply_len properly [ 621.872947][T20867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4711'. [ 621.890143][T20867] loop4: detected capacity change from 0 to 512 [ 621.943015][T20867] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 621.975937][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4710'. [ 621.977145][T20867] EXT4-fs (loop4): mount failed [ 622.010244][T20876] loop5: detected capacity change from 0 to 128 [ 622.041994][T20879] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 622.101308][T20879] lo speed is unknown, defaulting to 1000 [ 622.139499][T20884] loop2: detected capacity change from 0 to 1024 [ 622.154970][T20884] EXT4-fs: Ignoring removed orlov option [ 622.168911][T20884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 622.185618][T20884] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 622.207055][T20884] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 622.219848][T20884] System zones: 0-1, 3-12 [ 622.225327][T20884] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.4716: lblock 1 mapped to illegal pblock 1 (length 1) [ 622.240178][T20884] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4716: Failed to acquire dquot type 0 [ 622.252108][T20884] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.4716: Freeing blocks not in datazone - block = 0, count = 4096 [ 622.266421][T20884] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4716: Invalid inode bitmap blk 0 in block_group 0 [ 622.279752][T20884] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 622.289167][T20884] EXT4-fs (loop2): 1 orphan inode deleted [ 622.291899][ T5259] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 622.295986][T20884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.322241][ T5259] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 622.334607][T20884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.368546][T20884] loop2: detected capacity change from 0 to 2048 [ 622.387987][ T3594] Alternate GPT is invalid, using primary GPT. [ 622.394298][ T3594] loop2: p1 p2 p3 [ 622.407849][T20884] Alternate GPT is invalid, using primary GPT. [ 622.414157][T20884] loop2: p1 p2 p3 [ 622.490473][ T9303] udevd[9303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 622.490733][ T9304] udevd[9304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 622.505332][ T3594] udevd[3594]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 622.572433][T20889] loop0: detected capacity change from 0 to 512 [ 622.725084][T20894] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 622.745213][T20894] lo speed is unknown, defaulting to 1000 [ 622.862263][T20897] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 622.929211][T20897] lo speed is unknown, defaulting to 1000 [ 623.253085][T20901] loop5: detected capacity change from 0 to 256 [ 623.289354][T20901] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 623.335024][T20901] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 623.335024][T20901] program syz.5.4721 not setting count and/or reply_len properly [ 623.483954][T20911] lo speed is unknown, defaulting to 1000 [ 623.527963][T20917] loop5: detected capacity change from 0 to 512 [ 623.557626][T20919] loop0: detected capacity change from 0 to 128 [ 623.635166][T20924] loop2: detected capacity change from 0 to 512 [ 623.693506][T20930] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4729'. [ 623.712373][T20930] loop5: detected capacity change from 0 to 512 [ 623.743087][T20930] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 623.763985][T20937] loop2: detected capacity change from 0 to 2048 [ 623.770809][T20930] EXT4-fs (loop5): mount failed [ 623.778850][T20913] loop4: detected capacity change from 0 to 256 [ 623.810890][T20913] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 623.847507][ T3594] Alternate GPT is invalid, using primary GPT. [ 623.853888][ T3594] loop2: p1 p2 p3 [ 623.877450][T20937] Alternate GPT is invalid, using primary GPT. [ 623.883854][T20937] loop2: p1 p2 p3 [ 623.888284][T20913] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 623.888284][T20913] program syz.4.4725 not setting count and/or reply_len properly [ 623.949838][T20941] loop6: detected capacity change from 0 to 128 [ 624.026298][T20943] loop4: detected capacity change from 0 to 512 [ 624.086928][T20948] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 624.107626][T20948] lo speed is unknown, defaulting to 1000 [ 624.364734][ T29] kauditd_printk_skb: 1135 callbacks suppressed [ 624.364753][ T29] audit: type=1326 audit(1751755348.057:77922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.5.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33253f58e7 code=0x7ffc0000 [ 624.394723][ T29] audit: type=1326 audit(1751755348.057:77923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.5.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f332539ab19 code=0x7ffc0000 [ 624.418329][ T29] audit: type=1326 audit(1751755348.057:77924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.5.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f33253fe929 code=0x7ffc0000 [ 624.442328][T20955] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 624.448032][ T29] audit: type=1326 audit(1751755348.067:77925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.5.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33253f58e7 code=0x7ffc0000 [ 624.473485][ T29] audit: type=1326 audit(1751755348.067:77926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.5.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f332539ab19 code=0x7ffc0000 [ 624.487131][T20955] lo speed is unknown, defaulting to 1000 [ 624.497183][ T29] audit: type=1326 audit(1751755348.067:77927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.5.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f33253fe929 code=0x7ffc0000 [ 624.526583][ T29] audit: type=1326 audit(1751755348.077:77928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.5.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33253f58e7 code=0x7ffc0000 [ 624.550157][ T29] audit: type=1326 audit(1751755348.077:77929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.5.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f332539ab19 code=0x7ffc0000 [ 624.573854][ T29] audit: type=1326 audit(1751755348.077:77930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.5.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f33253fe929 code=0x7ffc0000 [ 624.597464][ T29] audit: type=1326 audit(1751755348.087:77931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20929 comm="syz.5.4729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33253f58e7 code=0x7ffc0000 [ 624.765866][T20962] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 624.847104][ T12] bio_check_eod: 40 callbacks suppressed [ 624.847120][ T12] kworker/u8:0: attempt to access beyond end of device [ 624.847120][ T12] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 624.889441][T20962] lo speed is unknown, defaulting to 1000 [ 624.994013][T20969] loop6: detected capacity change from 0 to 8192 [ 625.016727][T20969] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 625.179201][T20964] loop2: detected capacity change from 0 to 256 [ 625.194775][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4739'. [ 625.327924][T20975] loop0: detected capacity change from 0 to 512 [ 625.371045][T20964] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 625.411529][T20977] lo speed is unknown, defaulting to 1000 [ 625.458182][T20964] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 625.458182][T20964] program syz.2.4738 not setting count and/or reply_len properly [ 625.474444][T20985] loop5: detected capacity change from 0 to 128 [ 625.523710][T20987] loop6: detected capacity change from 0 to 512 [ 625.632943][T20990] loop0: detected capacity change from 0 to 8192 [ 625.654225][T20990] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 625.687714][T20996] loop6: detected capacity change from 0 to 128 [ 625.747307][T21002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4744'. [ 625.762684][T21001] loop2: detected capacity change from 0 to 128 [ 625.898352][T21001] syz.2.4747: attempt to access beyond end of device [ 625.898352][T21001] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 625.912599][T21001] syz.2.4747: attempt to access beyond end of device [ 625.912599][T21001] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 625.913783][T21005] loop0: detected capacity change from 0 to 2048 [ 625.928073][T21001] syz.2.4747: attempt to access beyond end of device [ 625.928073][T21001] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 625.947524][T21001] syz.2.4747: attempt to access beyond end of device [ 625.947524][T21001] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 625.950608][T21007] tipc: Enabled bearer , priority 0 [ 625.966726][T21001] syz.2.4747: attempt to access beyond end of device [ 625.966726][T21001] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 625.981607][T21007] syzkaller0: entered promiscuous mode [ 625.981678][T21001] syz.2.4747: attempt to access beyond end of device [ 625.981678][T21001] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 625.987204][T21007] syzkaller0: entered allmulticast mode [ 626.004309][T21003] hub 2-0:1.0: USB hub found [ 626.012887][T21003] hub 2-0:1.0: 8 ports detected [ 626.017473][ T3594] Alternate GPT is invalid, using primary GPT. [ 626.018282][T21001] syz.2.4747: attempt to access beyond end of device [ 626.018282][T21001] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 626.024060][ T3594] loop0: p1 p2 p3 [ 626.038655][T21001] syz.2.4747: attempt to access beyond end of device [ 626.038655][T21001] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 626.058212][T21006] tipc: Resetting bearer [ 626.060389][T21001] syz.2.4747: attempt to access beyond end of device [ 626.060389][T21001] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 626.073640][T21005] Alternate GPT is invalid, using primary GPT. [ 626.083695][T21005] loop0: p1 p2 p3 [ 626.090049][T21006] tipc: Disabling bearer [ 626.110393][ T2997] Alternate GPT is invalid, using primary GPT. [ 626.116824][ T2997] loop0: p1 p2 p3 [ 626.238285][T21010] loop4: detected capacity change from 0 to 8192 [ 626.254074][T21010] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 626.321454][T21014] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 626.343259][T21014] lo speed is unknown, defaulting to 1000 [ 626.380843][T21017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4751'. [ 626.537817][T21022] loop6: detected capacity change from 0 to 128 [ 626.555461][T21012] loop2: detected capacity change from 0 to 256 [ 626.572611][T21024] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 626.598862][T21012] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 626.637641][T21024] lo speed is unknown, defaulting to 1000 [ 626.645558][T21012] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 626.645558][T21012] program syz.2.4750 not setting count and/or reply_len properly [ 626.806030][T21028] loop0: detected capacity change from 0 to 512 [ 626.968730][T21039] loop2: detected capacity change from 0 to 128 [ 627.012835][T21038] lo speed is unknown, defaulting to 1000 [ 627.084641][T21041] lo speed is unknown, defaulting to 1000 [ 627.143518][T21045] lo speed is unknown, defaulting to 1000 [ 627.322026][T21051] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 627.395013][T21051] lo speed is unknown, defaulting to 1000 [ 627.466616][T21053] loop6: detected capacity change from 0 to 1024 [ 627.484676][T21053] EXT4-fs: Ignoring removed orlov option [ 627.525657][T21053] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.067686][T21070] loop2: detected capacity change from 0 to 128 [ 628.081040][T21065] loop4: detected capacity change from 0 to 8192 [ 628.091778][T21065] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 628.228630][T21073] loop0: detected capacity change from 0 to 8192 [ 628.251558][T21074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4764'. [ 628.282088][T21073] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 628.317071][T11491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.353079][T21077] loop5: detected capacity change from 0 to 8192 [ 628.373610][T21077] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 628.476898][T21084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4766'. [ 628.518680][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4767'. [ 628.521203][T21088] lo speed is unknown, defaulting to 1000 [ 628.543870][T21090] loop4: detected capacity change from 0 to 128 [ 628.673431][T21095] loop5: detected capacity change from 0 to 512 [ 628.697706][T21093] loop0: detected capacity change from 0 to 128 [ 628.764225][T21101] loop5: detected capacity change from 0 to 512 [ 628.824337][T21093] hub 2-0:1.0: USB hub found [ 628.859247][T21093] hub 2-0:1.0: 8 ports detected [ 628.955987][T21109] hub 6-0:1.0: USB hub found [ 628.961522][T21109] hub 6-0:1.0: 8 ports detected [ 629.005558][T21119] loop0: detected capacity change from 0 to 128 [ 629.247607][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4779'. [ 629.472498][T21146] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 629.495200][T21146] lo speed is unknown, defaulting to 1000 [ 629.543661][ T29] kauditd_printk_skb: 725 callbacks suppressed [ 629.543680][ T29] audit: type=1326 audit(1751755353.237:78657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.4.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 629.579616][ T29] audit: type=1326 audit(1751755353.237:78658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.4.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 629.603578][ T29] audit: type=1326 audit(1751755353.257:78659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.4.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 629.627276][ T29] audit: type=1326 audit(1751755353.257:78660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.4.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 629.650941][ T29] audit: type=1326 audit(1751755353.257:78661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.4.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 629.674628][ T29] audit: type=1326 audit(1751755353.257:78662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.4.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 629.698295][ T29] audit: type=1326 audit(1751755353.257:78663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.4.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 629.721911][ T29] audit: type=1326 audit(1751755353.257:78664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.4.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 629.745602][ T29] audit: type=1326 audit(1751755353.257:78665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.4.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 629.769183][ T29] audit: type=1326 audit(1751755353.257:78666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21145 comm="syz.4.4781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 629.935459][T21161] loop0: detected capacity change from 0 to 8192 [ 629.967136][T21164] loop2: detected capacity change from 0 to 512 [ 630.007533][T21161] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 630.061371][T21173] loop5: detected capacity change from 0 to 128 [ 630.123401][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4782'. [ 630.161288][T21179] lo speed is unknown, defaulting to 1000 [ 630.319764][T21171] loop4: detected capacity change from 0 to 256 [ 630.332229][T21201] hub 6-0:1.0: USB hub found [ 630.352771][T21171] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 630.358271][T21201] hub 6-0:1.0: 8 ports detected [ 630.531928][T21226] hub 6-0:1.0: USB hub found [ 630.537530][T21226] hub 6-0:1.0: 8 ports detected [ 630.559500][T21227] lo speed is unknown, defaulting to 1000 [ 630.618755][T21241] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 630.666982][T21241] lo speed is unknown, defaulting to 1000 [ 630.890457][T21267] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 630.930581][T21267] lo speed is unknown, defaulting to 1000 [ 631.114650][T21279] loop2: detected capacity change from 0 to 512 [ 631.204181][T21291] loop2: detected capacity change from 0 to 512 [ 631.214022][T21292] loop4: detected capacity change from 0 to 512 [ 631.387525][T21309] lo speed is unknown, defaulting to 1000 [ 631.394667][T21312] loop5: detected capacity change from 0 to 512 [ 631.415489][T21318] loop4: detected capacity change from 0 to 128 [ 631.547902][T21325] loop5: detected capacity change from 0 to 8192 [ 631.559571][T21325] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 631.644256][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4800'. [ 631.732515][T21336] loop2: detected capacity change from 0 to 512 [ 631.792677][T21339] loop5: detected capacity change from 0 to 2048 [ 631.827357][T21339] Alternate GPT is invalid, using primary GPT. [ 631.833666][T21339] loop5: p1 p2 p3 [ 631.870225][T21344] loop2: detected capacity change from 0 to 128 [ 632.088071][T21346] loop0: detected capacity change from 0 to 512 [ 632.156079][T21353] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 632.175678][T21353] lo speed is unknown, defaulting to 1000 [ 632.570354][T21362] loop4: detected capacity change from 0 to 128 [ 632.631152][T21366] hub 6-0:1.0: USB hub found [ 632.637558][T21366] hub 6-0:1.0: 8 ports detected [ 632.762337][T21370] lo speed is unknown, defaulting to 1000 [ 632.792923][T21375] loop6: detected capacity change from 0 to 8192 [ 632.805132][T21375] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 632.931468][T21396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4813'. [ 633.107293][T21412] hub 6-0:1.0: USB hub found [ 633.113363][T21414] loop6: detected capacity change from 0 to 128 [ 633.119947][T21412] hub 6-0:1.0: 8 ports detected [ 633.154788][T21381] loop4: detected capacity change from 0 to 256 [ 633.178529][T21381] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 633.203346][T21381] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 633.203346][T21381] program syz.4.4814 not setting count and/or reply_len properly [ 633.498859][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4817'. [ 633.904512][T21515] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 633.924685][T21515] lo speed is unknown, defaulting to 1000 [ 634.277062][T21521] loop4: detected capacity change from 0 to 512 [ 634.314154][T21524] loop6: detected capacity change from 0 to 2048 [ 634.347411][ T3594] Alternate GPT is invalid, using primary GPT. [ 634.353840][ T3594] loop6: p1 p2 p3 [ 634.393647][T21524] Alternate GPT is invalid, using primary GPT. [ 634.400260][T21524] loop6: p1 p2 p3 [ 634.413797][T21528] loop4: detected capacity change from 0 to 8192 [ 634.430998][T21528] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 634.454424][T21532] loop5: detected capacity change from 0 to 128 [ 634.539913][T21536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4822'. [ 634.561734][T21534] loop0: detected capacity change from 0 to 8192 [ 634.569644][T21534] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 634.616345][ T29] kauditd_printk_skb: 578 callbacks suppressed [ 634.616365][ T29] audit: type=1326 audit(1751755358.307:79245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21531 comm="syz.5.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33253fe929 code=0x7ffc0000 [ 634.669959][ T29] audit: type=1326 audit(1751755358.317:79246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21531 comm="syz.5.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33253fe929 code=0x7ffc0000 [ 634.693664][ T29] audit: type=1326 audit(1751755358.327:79247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21531 comm="syz.5.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33253fe929 code=0x7ffc0000 [ 634.709247][T21538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4825'. [ 634.717240][ T29] audit: type=1326 audit(1751755358.327:79248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21531 comm="syz.5.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33253fe929 code=0x7ffc0000 [ 634.749795][ T29] audit: type=1326 audit(1751755358.327:79249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21531 comm="syz.5.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f33253fe929 code=0x7ffc0000 [ 634.773482][ T29] audit: type=1326 audit(1751755358.327:79250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21531 comm="syz.5.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33253fe929 code=0x7ffc0000 [ 634.797230][ T29] audit: type=1326 audit(1751755358.337:79251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21531 comm="syz.5.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33253fe929 code=0x7ffc0000 [ 634.820851][ T29] audit: type=1326 audit(1751755358.337:79252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21531 comm="syz.5.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33253fe929 code=0x7ffc0000 [ 634.844553][ T29] audit: type=1326 audit(1751755358.337:79253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21531 comm="syz.5.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33253fe929 code=0x7ffc0000 [ 634.868145][ T29] audit: type=1326 audit(1751755358.337:79254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21531 comm="syz.5.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33253fe929 code=0x7ffc0000 [ 634.919328][T21540] lo speed is unknown, defaulting to 1000 [ 634.954571][T21545] loop5: detected capacity change from 0 to 128 [ 634.999175][T21548] loop0: detected capacity change from 0 to 128 [ 635.046108][T21545] bio_check_eod: 164 callbacks suppressed [ 635.046122][T21545] syz.5.4827: attempt to access beyond end of device [ 635.046122][T21545] loop5: rw=2049, sector=145, nr_sectors = 96 limit=128 [ 635.323914][T21553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4829'. [ 635.559120][T21562] loop6: detected capacity change from 0 to 512 [ 635.659204][T21567] loop6: detected capacity change from 0 to 1024 [ 635.669039][T21567] EXT4-fs: Ignoring removed orlov option [ 635.688588][T21567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 635.707389][T21567] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 635.719592][T21567] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 635.728617][T21567] System zones: 0-1, 3-12 [ 635.734235][T21567] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #3: block 1: comm syz.6.4833: lblock 1 mapped to illegal pblock 1 (length 1) [ 635.752180][T21567] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4833: Failed to acquire dquot type 0 [ 635.764601][T21567] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.4833: Freeing blocks not in datazone - block = 0, count = 4096 [ 635.780116][T21567] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.4833: Invalid inode bitmap blk 0 in block_group 0 [ 635.793659][T21567] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 635.803211][T21567] EXT4-fs (loop6): 1 orphan inode deleted [ 635.809195][ T5259] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 635.825108][ T5259] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 635.838437][T21567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.852328][T21567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.871228][T14131] kworker/u8:11: attempt to access beyond end of device [ 635.871228][T14131] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 636.011427][T21575] hub 6-0:1.0: USB hub found [ 636.032593][T21575] hub 6-0:1.0: 8 ports detected [ 636.041587][T21567] loop6: detected capacity change from 0 to 2048 [ 636.092524][T21567] Alternate GPT is invalid, using primary GPT. [ 636.098943][T21567] loop6: p1 p2 p3 [ 636.717375][T21645] loop4: detected capacity change from 0 to 2048 [ 636.748771][ T3594] Alternate GPT is invalid, using primary GPT. [ 636.755073][ T3594] loop4: p1 p2 p3 [ 636.780724][T21645] Alternate GPT is invalid, using primary GPT. [ 636.787085][T21645] loop4: p1 p2 p3 [ 637.088616][T21683] loop2: detected capacity change from 0 to 512 [ 637.594461][T21729] loop4: detected capacity change from 0 to 128 [ 638.125703][T21733] lo speed is unknown, defaulting to 1000 [ 638.314121][T21733] chnl_net:caif_netlink_parms(): no params data found [ 638.419482][T21755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4847'. [ 638.522783][T21732] loop0: detected capacity change from 0 to 256 [ 638.590638][T21759] loop4: detected capacity change from 0 to 512 [ 638.746124][T21732] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 638.770854][T21732] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 638.770854][T21732] program syz.0.4845 not setting count and/or reply_len properly [ 638.798147][T21733] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.805257][T21733] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.812509][T21733] bridge_slave_0: entered allmulticast mode [ 638.819231][T21733] bridge_slave_0: entered promiscuous mode [ 638.826419][T21733] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.833571][T21733] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.840891][T21733] bridge_slave_1: entered allmulticast mode [ 638.847438][T21733] bridge_slave_1: entered promiscuous mode [ 638.871697][T21733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.892517][T21733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.897951][T21762] loop4: detected capacity change from 0 to 8192 [ 638.922221][T21762] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 638.937657][T21733] team0: Port device team_slave_0 added [ 638.949144][T21733] team0: Port device team_slave_1 added [ 638.975698][T21766] loop0: detected capacity change from 0 to 512 [ 638.985149][T21733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.992411][T21733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.018434][T21733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.032535][T21733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.039605][T21733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.065616][T21733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.098637][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4849'. [ 639.148967][T21733] hsr_slave_0: entered promiscuous mode [ 639.155260][T21733] hsr_slave_1: entered promiscuous mode [ 639.161400][T21733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 639.169098][T21733] Cannot create hsr debugfs directory [ 639.174694][T21776] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 639.194839][T21774] loop2: detected capacity change from 0 to 512 [ 639.231835][T21776] lo speed is unknown, defaulting to 1000 [ 639.297404][T21733] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.323792][T21783] loop4: detected capacity change from 0 to 128 [ 639.368756][T21733] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.424857][T21733] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.504597][T21733] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.575199][T21791] hub 6-0:1.0: USB hub found [ 639.580639][T21791] hub 6-0:1.0: 8 ports detected [ 639.613672][T21733] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 639.661182][T21733] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 639.661200][T21794] loop4: detected capacity change from 0 to 8192 [ 639.680458][T21733] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 639.695883][T21733] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 639.719123][T21794] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 639.822736][T21733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.838424][T21733] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.854133][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4858'. [ 639.864839][ T2724] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.872018][ T2724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.881152][ T2724] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.888266][ T2724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.955085][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 639.955103][ T29] audit: type=1326 audit(1751755363.647:79661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21827 comm="syz.0.4859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e024ae929 code=0x0 [ 640.006747][T21833] loop0: detected capacity change from 0 to 128 [ 640.036569][T21733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.150411][T21850] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 640.242276][T21850] lo speed is unknown, defaulting to 1000 [ 640.264395][ T29] audit: type=1326 audit(1751755363.957:79662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.4.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 640.288231][ T29] audit: type=1326 audit(1751755363.957:79663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.4.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 640.311868][ T29] audit: type=1326 audit(1751755363.957:79664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.4.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 640.335575][ T29] audit: type=1326 audit(1751755363.957:79665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.4.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 640.359367][ T29] audit: type=1326 audit(1751755363.957:79666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.4.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 640.387792][ T29] audit: type=1326 audit(1751755363.957:79667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.4.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 640.403022][T21733] veth0_vlan: entered promiscuous mode [ 640.411349][ T29] audit: type=1326 audit(1751755363.957:79668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.4.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 640.440693][ T29] audit: type=1326 audit(1751755363.957:79669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.4.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 640.445117][T21733] veth1_vlan: entered promiscuous mode [ 640.464275][ T29] audit: type=1326 audit(1751755363.957:79670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.4.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04313ae929 code=0x7ffc0000 [ 640.541537][T21733] veth0_macvtap: entered promiscuous mode [ 640.581637][T21733] veth1_macvtap: entered promiscuous mode [ 640.601857][T21874] lo speed is unknown, defaulting to 1000 [ 640.604652][T21733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.637620][T21733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.662107][T21733] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.670978][T21733] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.679858][T21733] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.688624][T21733] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.857706][T21899] loop5: detected capacity change from 0 to 128 [ 640.864507][T21898] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 640.901317][T21884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4862'. [ 640.921229][T21898] lo speed is unknown, defaulting to 1000 [ 641.077741][T21910] loop4: detected capacity change from 0 to 8192 [ 641.116825][T21910] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 641.246842][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4865'. [ 641.473558][T21942] loop4: detected capacity change from 0 to 128 [ 641.708632][T21955] hub 6-0:1.0: USB hub found [ 641.721404][T21942] syz.4.4866: attempt to access beyond end of device [ 641.721404][T21942] loop4: rw=2049, sector=145, nr_sectors = 96 limit=128 [ 641.723569][T21955] hub 6-0:1.0: 8 ports detected [ 641.885258][T21976] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 641.910658][T21976] lo speed is unknown, defaulting to 1000 [ 642.284064][ T5259] kworker/u8:8: attempt to access beyond end of device [ 642.284064][ T5259] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 642.328056][T21995] loop4: detected capacity change from 0 to 512 [ 642.457420][T22002] loop4: detected capacity change from 0 to 128 [ 642.519564][T22004] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 642.541297][T22004] lo speed is unknown, defaulting to 1000 [ 642.586760][T22006] lo speed is unknown, defaulting to 1000 [ 642.879140][T22012] hub 6-0:1.0: USB hub found [ 642.894830][T22012] hub 6-0:1.0: 8 ports detected [ 642.990878][T22020] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 643.017663][T22020] lo speed is unknown, defaulting to 1000 [ 643.110250][T22031] loop2: detected capacity change from 0 to 2048 [ 643.148040][ T3594] Alternate GPT is invalid, using primary GPT. [ 643.154419][ T3594] loop2: p1 p2 p3 [ 643.164478][T22031] Alternate GPT is invalid, using primary GPT. [ 643.170840][T22031] loop2: p1 p2 p3 [ 643.185851][ T2997] Alternate GPT is invalid, using primary GPT. [ 643.192217][ T2997] loop2: p1 p2 p3 [ 643.326433][T22050] hub 6-0:1.0: USB hub found [ 643.335198][T22050] hub 6-0:1.0: 8 ports detected [ 643.407835][T22061] tipc: Started in network mode [ 643.412769][T22061] tipc: Node identity 4e5d335170a1, cluster identity 4711 [ 643.419999][T22061] tipc: Enabled bearer , priority 0 [ 643.427333][T22061] syzkaller0: entered promiscuous mode [ 643.432896][T22061] syzkaller0: entered allmulticast mode [ 643.447618][T22061] tipc: Resetting bearer [ 643.454952][T22059] tipc: Resetting bearer [ 643.464389][T22059] tipc: Disabling bearer [ 644.129658][T22156] loop5: detected capacity change from 0 to 8192 [ 644.142869][T22156] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 644.196302][T22153] loop2: detected capacity change from 0 to 256 [ 644.207347][T22153] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 644.219887][T22153] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 644.219887][T22153] program syz.2.4882 not setting count and/or reply_len properly [ 644.313693][T22160] pim6reg: entered allmulticast mode [ 644.321154][T22160] pim6reg: left allmulticast mode [ 644.340301][T22162] hub 6-0:1.0: USB hub found [ 644.344985][T22162] hub 6-0:1.0: 8 ports detected [ 644.423558][T22176] loop5: detected capacity change from 0 to 512 [ 644.531689][T22193] lo speed is unknown, defaulting to 1000 [ 644.699079][T22215] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 644.722560][T22215] lo speed is unknown, defaulting to 1000 [ 644.927750][T22234] loop4: detected capacity change from 0 to 128 [ 644.977537][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 644.977552][ T29] audit: type=1326 audit(1751755368.677:79930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22213 comm="syz.0.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 645.056189][T22202] loop6: detected capacity change from 0 to 256 [ 645.064908][ T29] audit: type=1326 audit(1751755368.717:79931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22213 comm="syz.0.4888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e024ae929 code=0x7ffc0000 [ 645.088701][ T29] audit: type=1326 audit(1751755368.727:79932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22201 comm="syz.6.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 645.112408][ T29] audit: type=1326 audit(1751755368.727:79933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22201 comm="syz.6.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 645.134815][T22202] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 645.136073][ T29] audit: type=1326 audit(1751755368.737:79934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22201 comm="syz.6.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 645.169025][T22202] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 645.169025][T22202] program syz.6.4887 not setting count and/or reply_len properly [ 645.169873][ T29] audit: type=1326 audit(1751755368.737:79935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22201 comm="syz.6.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 645.210178][ T29] audit: type=1326 audit(1751755368.737:79936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22201 comm="syz.6.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 645.233873][ T29] audit: type=1326 audit(1751755368.747:79937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22201 comm="syz.6.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 645.257609][ T29] audit: type=1326 audit(1751755368.747:79938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22201 comm="syz.6.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 645.281356][ T29] audit: type=1326 audit(1751755368.747:79939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22201 comm="syz.6.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be584e929 code=0x7ffc0000 [ 645.342433][T22250] hub 6-0:1.0: USB hub found [ 645.348595][T22250] hub 6-0:1.0: 8 ports detected [ 645.545778][T22262] loop6: detected capacity change from 0 to 2048 [ 645.599759][T22262] Alternate GPT is invalid, using primary GPT. [ 645.606171][T22262] loop6: p1 p2 p3 [ 645.757619][T22281] tipc: Enabled bearer , priority 0 [ 645.764888][T22281] syzkaller0: entered promiscuous mode [ 645.770442][T22281] syzkaller0: entered allmulticast mode [ 645.780264][T22281] tipc: Resetting bearer [ 645.787052][T22280] tipc: Resetting bearer [ 645.794412][T22280] tipc: Disabling bearer [ 645.804700][T22265] loop0: detected capacity change from 0 to 256 [ 645.859522][T22265] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 645.904480][T22290] loop4: detected capacity change from 0 to 128 [ 645.968793][T22303] syz.4.4894: attempt to access beyond end of device [ 645.968793][T22303] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 645.984475][T22303] syz.4.4894: attempt to access beyond end of device [ 645.984475][T22303] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 645.999771][T22303] syz.4.4894: attempt to access beyond end of device [ 645.999771][T22303] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 646.013903][T22303] syz.4.4894: attempt to access beyond end of device [ 646.013903][T22303] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 646.030722][T22303] syz.4.4894: attempt to access beyond end of device [ 646.030722][T22303] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 646.060406][T22303] syz.4.4894: attempt to access beyond end of device [ 646.060406][T22303] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 646.077712][T22290] hub 2-0:1.0: USB hub found [ 646.082433][T22290] hub 2-0:1.0: 8 ports detected [ 646.095239][T22303] syz.4.4894: attempt to access beyond end of device [ 646.095239][T22303] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 646.109776][T22303] syz.4.4894: attempt to access beyond end of device [ 646.109776][T22303] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 646.250574][T22316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4895'. [ 646.371488][T22318] hub 6-0:1.0: USB hub found [ 646.387370][T22318] hub 6-0:1.0: 8 ports detected [ 646.857826][T22338] loop0: detected capacity change from 0 to 1024 [ 646.864712][T22338] EXT4-fs: Ignoring removed orlov option [ 646.873215][T22338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.047100][T15027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.068957][T22343] ================================================================== [ 647.077101][T22343] BUG: KCSAN: data-race in bdev_statx / queue_limits_commit_update [ 647.085020][T22343] [ 647.087366][T22343] read to 0xffff8881009fc0b8 of 4 bytes by task 3594 on cpu 0: [ 647.094952][T22343] bdev_statx+0x295/0x2d0 [ 647.099299][T22343] vfs_getattr_nosec+0x1b6/0x1e0 [ 647.104245][T22343] __se_sys_newfstat+0x96/0x2e0 [ 647.109107][T22343] __x64_sys_newfstat+0x31/0x40 [ 647.114001][T22343] x64_sys_call+0x27e1/0x2fb0 [ 647.118690][T22343] do_syscall_64+0xd2/0x200 [ 647.123222][T22343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.129144][T22343] [ 647.131484][T22343] write to 0xffff8881009fc078 of 184 bytes by task 22343 on cpu 1: [ 647.139384][T22343] queue_limits_commit_update+0x4c/0x110 [ 647.145049][T22343] loop_configure+0x79c/0xa50 [ 647.149756][T22343] lo_ioctl+0x559/0x15d0 [ 647.154022][T22343] blkdev_ioctl+0x34f/0x440 [ 647.158558][T22343] __se_sys_ioctl+0xce/0x140 [ 647.163175][T22343] __x64_sys_ioctl+0x43/0x50 [ 647.167790][T22343] x64_sys_call+0x19a8/0x2fb0 [ 647.172482][T22343] do_syscall_64+0xd2/0x200 [ 647.177009][T22343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.183004][T22343] [ 647.185337][T22343] Reported by Kernel Concurrency Sanitizer on: [ 647.191596][T22343] CPU: 1 UID: 0 PID: 22343 Comm: syz.0.4900 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) [ 647.204109][T22343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 647.214175][T22343] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 647.259340][T22343] loop0: detected capacity change from 0 to 512 [ 647.339370][T22343] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 647.387083][T22343] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 647.387110][T22343] EXT4-fs: failed to create workqueue [ 647.402035][T22343] EXT4-fs (loop0): mount failed [ 647.668406][ T2724] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.738964][ T2724] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.789318][ T2724] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.839481][ T2724] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.905353][ T2724] bridge_slave_1: left allmulticast mode [ 647.911196][ T2724] bridge_slave_1: left promiscuous mode [ 647.916956][ T2724] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.924814][ T2724] bridge_slave_0: left allmulticast mode [ 647.930700][ T2724] bridge_slave_0: left promiscuous mode [ 647.936558][ T2724] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.038737][ T2724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.048689][ T2724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.058331][ T2724] bond0 (unregistering): Released all slaves [ 648.087446][ T2724] tipc: Left network mode [ 648.113384][ T2724] hsr_slave_0: left promiscuous mode [ 648.120932][ T2724] hsr_slave_1: left promiscuous mode [ 648.126924][ T2724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.134360][ T2724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.142139][ T2724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.149636][ T2724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.161211][ T2724] veth1_macvtap: left promiscuous mode [ 648.166836][ T2724] veth0_macvtap: left promiscuous mode [ 648.172393][ T2724] veth1_vlan: left promiscuous mode [ 648.177943][ T2724] veth0_vlan: left promiscuous mode [ 648.243427][ T2724] team0 (unregistering): Port device team_slave_1 removed [ 648.253059][ T2724] team0 (unregistering): Port device team_slave_0 removed