last executing test programs: 9m28.761160942s ago: executing program 3 (id=778): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x6, @remote}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0xe) r3 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 9m28.575239972s ago: executing program 3 (id=780): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000101401002cbd7000fedbdf2508004b000001000008"], 0x30}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) open(0x0, 0x80080, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lsm_set_self_attr(0x65, 0x0, 0x47, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 9m27.662408547s ago: executing program 3 (id=789): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x480001, 0x0) writev(r0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff041, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000080)=0xaeb) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000140)=0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001000000ff0300ac1414bbaaaaaaaaaa36ac"], 0x0) unshare(0x20040000) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000001500)=ANY=[@ANYRES64=r7], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) 9m27.21802035s ago: executing program 3 (id=792): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x68}}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000340)) ptrace$poke(0x21, r1, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x840) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000001240), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000380)={0x4, 0x5, 0x9}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="4f501b9bf980272aeb3385fa9485a151642748675c61d0894aa1ee65e37910ad1d00b6395f33dc0b5049940291e0f4567f22eca3eafe35e92c5780beedbd6782801534d54d6990026263cb71ced4df8b56d0b4aa8991d416397ce8170fcf176100283300a127b603aaf3c8f7934b4214036e2423d0ca1e5af582d71819b89b16d48b7f54efddb6029864c66e1258f048f3f28bf44206d47a1c5783bf093abe399d2a9b454befcb6d83fe14"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xe8, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r4}, 0x10) 9m26.609062843s ago: executing program 3 (id=796): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, 0x0, 0x100) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4) vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000880)="9f3846581b1b5159fa75b369536aed7fc089b18592fd1bd099864f1ed35c7046e78c84f4cf0e59594f6dac655efbe84343ff8c186af752f7691c612987b6c089fc2ac412de8edab1f67d0300a1acf9ef331f2b436ff4322adcde8648bcd1e193eb1cb83b0ff2de12d2", 0x69}, {&(0x7f0000000300)='b', 0x1}], 0x3, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) 9m26.287974155s ago: executing program 3 (id=798): r0 = io_uring_setup(0x3e76, &(0x7f0000000000)={0x0, 0x100e, 0x2, 0x1, 0x10000009}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) io_setup(0x7f, &(0x7f00000009c0)=0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000b40)=[&(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000a00)="61ca5f4608fe92ac1c61cd9b4ea2008e86acfafcfd5a570ec6853505101ee21626f778f74f9892c92cc70fc119e03a6b55a340232e9408b72e9a16475e71b0a88c9358c589826800b647d78cd525ab1ebbe9e27306010680fecebb2db3ac287d4f2140310ca8f2a1c421a2204fea364cb66fb378f1365fe7bf2ef34fe361872f273e403a6722c55014b824c6672c35f7a280f13d44fcd1fc8fed5b331f18ff7c3cc2e3041d54210fa009c1be", 0xac, 0x8, 0x0, 0x3, r3}]) add_key$keyring(&(0x7f0000000480), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = request_key(&(0x7f00000005c0)='.dead\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000240)='sc\xa0\x014X\xec\x8a\xdb+ch\x00', 0x0) keyctl$get_keyring_id(0x0, r4, 0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r5, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706", 0x200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000c00)={0x0, 0xfeff, &(0x7f0000000700)={&(0x7f0000000b80)={0x3c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x42}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c40)=ANY=[@ANYBLOB="a4000000b2888a1949d171c8f2677369a0f3bcf81bf03172c6658e8ca9dd250c2bba652193d9a1fdc89993459aedee44687f4c9a4baa3f75d87fb87c8c6d29b37ebcd783513a0bc78fa95f65d9cf8fd7b740", @ANYRES16=r8, @ANYBLOB="04002dbd7000fddbdf254c0000000c00a60005000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a60006000000000000000c00a70003000000000000000e00a80066697273746e616d650000000c00a7000600000000000000080001007063690011000200303030303a30303a31302e300000000008000300030000000c00a600df00000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x8085}, 0x4000804) sendfile(r5, r6, 0x0, 0xe065) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781c2"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m26.287505695s ago: executing program 32 (id=798): r0 = io_uring_setup(0x3e76, &(0x7f0000000000)={0x0, 0x100e, 0x2, 0x1, 0x10000009}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) io_setup(0x7f, &(0x7f00000009c0)=0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000b40)=[&(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000a00)="61ca5f4608fe92ac1c61cd9b4ea2008e86acfafcfd5a570ec6853505101ee21626f778f74f9892c92cc70fc119e03a6b55a340232e9408b72e9a16475e71b0a88c9358c589826800b647d78cd525ab1ebbe9e27306010680fecebb2db3ac287d4f2140310ca8f2a1c421a2204fea364cb66fb378f1365fe7bf2ef34fe361872f273e403a6722c55014b824c6672c35f7a280f13d44fcd1fc8fed5b331f18ff7c3cc2e3041d54210fa009c1be", 0xac, 0x8, 0x0, 0x3, r3}]) add_key$keyring(&(0x7f0000000480), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = request_key(&(0x7f00000005c0)='.dead\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000240)='sc\xa0\x014X\xec\x8a\xdb+ch\x00', 0x0) keyctl$get_keyring_id(0x0, r4, 0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r5, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706", 0x200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000c00)={0x0, 0xfeff, &(0x7f0000000700)={&(0x7f0000000b80)={0x3c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x42}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c40)=ANY=[@ANYBLOB="a4000000b2888a1949d171c8f2677369a0f3bcf81bf03172c6658e8ca9dd250c2bba652193d9a1fdc89993459aedee44687f4c9a4baa3f75d87fb87c8c6d29b37ebcd783513a0bc78fa95f65d9cf8fd7b740", @ANYRES16=r8, @ANYBLOB="04002dbd7000fddbdf254c0000000c00a60005000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a60006000000000000000c00a70003000000000000000e00a80066697273746e616d650000000c00a7000600000000000000080001007063690011000200303030303a30303a31302e300000000008000300030000000c00a600df00000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x8085}, 0x4000804) sendfile(r5, r6, 0x0, 0xe065) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781c2"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.280053117s ago: executing program 0 (id=4821): getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800faffffff00000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000951105d099ad8c8b5fdb62766cce3b2ffbec82d8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000400000000000800050008000020"], 0x24}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xb0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0xfffffffffffffffe, 0x29) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) nanosleep(0x0, 0x0) 3.74674513s ago: executing program 0 (id=4829): getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) epoll_create1(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800faffffff00000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000951105d099ad8c8b5fdb62766cce3b2ffbec82d8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000008000400000000000800050008000020"], 0x24}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xb0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff7f000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000300000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) nanosleep(0x0, 0x0) finit_module(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff2}) 3.62787604s ago: executing program 1 (id=4832): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x288, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x34, r7, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r5, r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.152452313s ago: executing program 0 (id=4834): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 3.036424494s ago: executing program 1 (id=4836): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUuzYjmfymGFIMjAJZCDzIJYfDLFnBoZZzcwiMExgNjOQurbippYtY8lpbLJw2l0WXZSWFkoX3fcv6KZZNRRK1y3dli5KSpu60AcFFV1JiR+So6aO1Pj+fqDo3HNv9J0j8R1fnXuvbgCpdbr2TyZiOCLei4jD9cWtG5yuP23cvT5Te2SiWr34WSbZrrbc3LT5/w5FxHpEDETEf/4R8WRmZ9zy6tr8dLFYWG4s5ysLS/ny6tq5KwvTc4W5wuLY5PmpqcnRifGpPevrzeefvnnhzX/1v/HVc3duv/D2W7VmDTfWbe7HXqp3vS+Obqo7EBF/fRTBeiDX6M9grxvCQ6l9fr+IiDNJ/h+OXPJpAmlQrVar31UPtlu9XgX2rWyyD5zJjkREvZzNjozU9+F/GUPZYqlc+ePl0sribH1f+Uj0ZS9fKRZGG98VjkRfprY8lpTvL49vW56ISPaBX8wNJssjM6XibHeHOmCbQ9vy/8tcPf+BlPCVH9JL/kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rtlv/9XWwH0FX/vnCh9qg2r3+fvbq6Ml+6em62UJ4fWViZGZkpLS+NzJVKc8k1OwsPer1iqbQ09qdYuZavFMqVfHl17dJCaWWxcim5rv9Soa8rvQI6cfTUrQ8yEbH+58HkEZv+5MtV2N+q1Uz0+hpkoDdyvR6AgJ4x9Q/p9QO+47f9kTDg8dbiJ3q3GGhd/bdYehStAboh2+sGAD1z9oTjf5BW5v8hvcz/Q3rZxwcecv4/zP/D48v8P6TXcJv7f/1s0727RiPi5xHxfq7vYPNeX8B+kP0k09j/P3v4t8Pb1/Znvk4OEfRHxDOvXnz52nSlsjxWq/98sFlfeaVRP96L9gOdauZpM48BgPTauHt9pvnoZtxP/14/CWFn/AONucmB5Bjl0EZmy7kKmT06d2H9RkQcbxU/07jfef3Ix9BGbkf8Y43nTP0lkvYeSO6b3p34JzbF/82m+CeTLb79ke8M7H+3auPPaKv8yyY5Hffyb+v4M7xH5060H/+y98a/XJvx71SHMZ567dmP28a/EXGyZfxmvIEk1vb4tbad7TD+nf//91ft1lVfr79Oq/hNtVK+srCUL6+unUt+R26usDg2eX5qanJ0Ynwqn8xR55sz1Tv95fi7t3fr/1Cb+PX+ftiy/7W633fY/29+/c7/Tu8S/3dnWn/+x5Ln1u//YET8ocP4X4x/9ES7dbX4s236n90lfq1uosP45Zf+6dphAPgJKa+uzU8Xi4VlBQUFhXuFB40c690ZoIBH5n7S97olAAAAAAAAAAAAQKe6cTpxr/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAffB8AAP//WQzY+g==") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x288, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x34, r8, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r5, r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.855364325s ago: executing program 5 (id=4837): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) truncate(&(0x7f0000000080)='./file1\x00', 0xc00) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x288, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x34, r8, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r5, r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.621643346s ago: executing program 5 (id=4839): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x288, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x34, r7, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r4, r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.080750909s ago: executing program 4 (id=4843): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x288, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x34, r7, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r4, r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.82379606s ago: executing program 4 (id=4844): getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800faffffff00000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000951105d099ad8c8b5fdb62766cce3b2ffbec82d8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000400000000000800050008000020"], 0x24}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xb0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0xfffffffffffffffe, 0x29) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) nanosleep(0x0, 0x0) 1.670809861s ago: executing program 2 (id=4845): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x288, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x34, r7, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r4, r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.647636561s ago: executing program 1 (id=4846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0, 0x2ab, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) memfd_secret(0x0) ioprio_set$pid(0x0, 0x0, 0x2004) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xf, "ff00f7000000000000000000af88008300"}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r1, 0xffffffffffffffff, 0x0) 1.425909382s ago: executing program 0 (id=4847): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x6, 0x6) unshare(0x22020600) r1 = dup2(0xffffffffffffffff, r0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = io_uring_setup(0x1955, &(0x7f0000000240)={0x0, 0x5e99, 0x0, 0x1, 0x80002ae, 0x0, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$usbmon(&(0x7f0000000080), 0xdca6, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="73797374656d5f753a00006a6563745f723a61706d5f62696f735f743a73302073797374656d5f753a73797374656d5f723a6b65726e656c5f743a733020133030303030303030303007003030303030303000"], 0x53) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='inode_foreign_history\x00'}, 0x18) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) io_uring_enter(r2, 0x1d55, 0x7b7f, 0x8, &(0x7f0000000000)={[0x200]}, 0x8) 1.388538333s ago: executing program 2 (id=4848): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0, 0x2ab, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x47}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) memfd_secret(0x0) ioprio_set$pid(0x0, 0x0, 0x2004) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.events\x00', 0x275a, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xf, "ff00f7000000000000000000af88008300"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0xe501, 0x3, 0x338, 0x1a0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x2a0, 0x230, 0x230, 0x2a0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a0, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4, [], @ipv6=@private2, [], @ipv6=@dev, [], @ipv6=@empty}}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r3 = syz_open_pts(r1, 0x141601) lseek(r2, 0x7, 0x0) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 1.367072503s ago: executing program 5 (id=4849): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x288, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x34, r7, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0xb2) dup2(0xffffffffffffffff, r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.239926503s ago: executing program 1 (id=4850): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUuzYjmfymGFIMjAJZCDzIJYfDLFnBoZZzcwiMExgNjOQurbippYtY8lpbLJw2l0WXZSWFkoX3fcv6KZZNRRK1y3dli5KSpu60AcFFV1JiR+So6aO1Pj+fqDo3HNv9J0j8R1fnXuvbgCpdbr2TyZiOCLei4jD9cWtG5yuP23cvT5Te2SiWr34WSbZrrbc3LT5/w5FxHpEDETEf/4R8WRmZ9zy6tr8dLFYWG4s5ysLS/ny6tq5KwvTc4W5wuLY5PmpqcnRifGpPevrzeefvnnhzX/1v/HVc3duv/D2W7VmDTfWbe7HXqp3vS+Obqo7EBF/fRTBeiDX6M9grxvCQ6l9fr+IiDNJ/h+OXPJpAmlQrVar31UPtlu9XgX2rWyyD5zJjkREvZzNjozU9+F/GUPZYqlc+ePl0sribH1f+Uj0ZS9fKRZGG98VjkRfprY8lpTvL49vW56ISPaBX8wNJssjM6XibHeHOmCbQ9vy/8tcPf+BlPCVH9JL/kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rtlv/9XWwH0FX/vnCh9qg2r3+fvbq6Ml+6em62UJ4fWViZGZkpLS+NzJVKc8k1OwsPer1iqbQ09qdYuZavFMqVfHl17dJCaWWxcim5rv9Soa8rvQI6cfTUrQ8yEbH+58HkEZv+5MtV2N+q1Uz0+hpkoDdyvR6AgJ4x9Q/p9QO+47f9kTDg8dbiJ3q3GGhd/bdYehStAboh2+sGAD1z9oTjf5BW5v8hvcz/Q3rZxwcecv4/zP/D48v8P6TXcJv7f/1s0727RiPi5xHxfq7vYPNeX8B+kP0k09j/P3v4t8Pb1/Znvk4OEfRHxDOvXnz52nSlsjxWq/98sFlfeaVRP96L9gOdauZpM48BgPTauHt9pvnoZtxP/14/CWFn/AONucmB5Bjl0EZmy7kKmT06d2H9RkQcbxU/07jfef3Ix9BGbkf8Y43nTP0lkvYeSO6b3p34JzbF/82m+CeTLb79ke8M7H+3auPPaKv8yyY5Hffyb+v4M7xH5060H/+y98a/XJvx71SHMZ567dmP28a/EXGyZfxmvIEk1vb4tbad7TD+nf//91ft1lVfr79Oq/hNtVK+srCUL6+unUt+R26usDg2eX5qanJ0Ynwqn8xR55sz1Tv95fi7t3fr/1Cb+PX+ftiy/7W633fY/29+/c7/Tu8S/3dnWn/+x5Ln1u//YET8ocP4X4x/9ES7dbX4s236n90lfq1uosP45Zf+6dphAPgJKa+uzU8Xi4VlBQUFhXuFB40c690ZoIBH5n7S97olAAAAAAAAAAAAQKe6cTpxr/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAffB8AAP//WQzY+g==") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x288, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x34, r7, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r4, r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.121490104s ago: executing program 0 (id=4851): getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) epoll_create1(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800faffffff00000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000951105d099ad8c8b5fdb62766cce3b2ffbec82d8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000008000400000000000800050008000020"], 0x24}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xb0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0xfffffffffffffffe, 0x29) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff7f000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) nanosleep(0x0, 0x0) finit_module(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff2}) 1.092409074s ago: executing program 2 (id=4852): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 935.964885ms ago: executing program 4 (id=4853): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) io_setup(0x1, &(0x7f0000000040)) 863.813095ms ago: executing program 2 (id=4854): getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) epoll_create1(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800faffffff00000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000951105d099ad8c8b5fdb62766cce3b2ffbec82d8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000008000400000000000800050008000020"], 0x24}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xb0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff7f000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) nanosleep(0x0, 0x0) finit_module(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff2}) 743.561146ms ago: executing program 1 (id=4855): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x288, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x34, r8, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r5, r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 687.710406ms ago: executing program 5 (id=4856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0, 0x2ab, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioprio_set$pid(0x0, 0x0, 0x2004) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xf, "ff00f7000000000000000000af88008300"}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r1, 0xffffffffffffffff, 0x0) 666.939936ms ago: executing program 4 (id=4857): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@jqfmt_vfsv1}]}, 0x1, 0x79c, &(0x7f0000001700)="$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") r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x23}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705320625930e6c1e3e2a51a92fd796bc34d7cf6e0236805ba2b9963d16563e4603a4c6a7ef0000000000000059998b5000"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) 565.478477ms ago: executing program 4 (id=4858): getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800faffffff00000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000951105d099ad8c8b5fdb62766cce3b2ffbec82d8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000008000400000000000800050008000020"], 0x24}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xb0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff7f000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) nanosleep(0x0, 0x0) finit_module(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff2}) 517.777807ms ago: executing program 0 (id=4859): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x208080, &(0x7f00000000c0), 0x1, 0x598, &(0x7f0000000800)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x80}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0xfffffffffffffffd, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f00000000c0)=0x7e6, 0x9) recvmsg(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/17, 0x11}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x82}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 364.846128ms ago: executing program 5 (id=4860): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2ab, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x47}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) memfd_secret(0x0) ioprio_set$pid(0x0, 0x0, 0x2004) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.events\x00', 0x275a, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xf, "ff00f7000000000000000000af88008300"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0xe501, 0x3, 0x338, 0x1a0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x2a0, 0x230, 0x230, 0x2a0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a0, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4, [], @ipv6=@private2, [], @ipv6=@dev, [], @ipv6=@empty}}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r3 = syz_open_pts(r1, 0x141601) lseek(r2, 0x7, 0x0) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 314.914638ms ago: executing program 1 (id=4861): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x288, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x34, r7, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r4, r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 228.165518ms ago: executing program 2 (id=4862): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioprio_set$pid(0x0, 0x0, 0x2004) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x0, 0x0, 0xf, "ff00f7000000000000000000af88008300"}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 48.34157ms ago: executing program 5 (id=4863): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x288, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x34, r7, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0xb2) dup2(r4, r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5.55891ms ago: executing program 4 (id=4864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000002410c0000000013"], 0x34}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x7, 0x34581cd9, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}}, 0x4040) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0xa72, &(0x7f0000000280)={0x0, 0x4054, 0x1a0, 0x3, 0x360}, &(0x7f0000000380), &(0x7f00000003c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b89213ae3fcf200000005000000020000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x1}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0xf00}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1d, 0x2, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x4}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_collapse_huge_page_isolate\x00', r10, 0x0, 0x4000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 2 (id=4865): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) readahead(0xffffffffffffffff, 0x6, 0x6) unshare(0x22020600) r1 = dup2(0xffffffffffffffff, r0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = io_uring_setup(0x1955, &(0x7f0000000240)={0x0, 0x5e99, 0x0, 0x1, 0x80002ae, 0x0, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$usbmon(&(0x7f0000000080), 0xdca6, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="73797374656d5f753a00006a6563745f723a61706d5f62696f735f743a73302073797374656d5f753a73797374656d5f723a6b65726e656c5f743a733020133030303030303030303007003030303030303000"], 0x53) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='inode_foreign_history\x00'}, 0x18) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) io_uring_enter(r2, 0x1d55, 0x7b7f, 0x8, &(0x7f0000000000)={[0x200]}, 0x8) kernel console output (not intermixed with test programs): [ 568.543503][T22421] loop5: detected capacity change from 0 to 2048 [ 568.554354][ T29] audit: type=1326 audit(1732664816.397:87154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22415 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 568.577995][ T29] audit: type=1326 audit(1732664816.427:87155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22415 comm="syz.5.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 568.589876][T22403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4259'. [ 568.610457][T22403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4259'. [ 568.658237][T22421] Alternate GPT is invalid, using primary GPT. [ 568.664637][T22421] loop5: p2 p3 p7 [ 568.697061][ T3020] Alternate GPT is invalid, using primary GPT. [ 568.703413][ T3020] loop5: p2 p3 p7 [ 568.755549][T22410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4261'. [ 568.764594][T22410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4261'. [ 568.774467][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.956111][T22432] loop2: detected capacity change from 0 to 2048 [ 569.017799][T22432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.189341][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.269227][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4265'. [ 569.429563][T22447] loop1: detected capacity change from 0 to 2048 [ 569.485145][T22447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.630838][T22455] loop5: detected capacity change from 0 to 2048 [ 569.657409][T22455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.725282][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.927152][T22467] loop2: detected capacity change from 0 to 2048 [ 569.963260][T22467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.184035][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.399836][T22478] loop1: detected capacity change from 0 to 2048 [ 570.441305][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.479228][T22478] Alternate GPT is invalid, using primary GPT. [ 570.485558][T22478] loop1: p2 p3 p7 [ 570.663239][T22482] loop5: detected capacity change from 0 to 2048 [ 570.753418][T22482] Alternate GPT is invalid, using primary GPT. [ 570.759834][T22482] loop5: p2 p3 p7 [ 570.808722][ T3020] Alternate GPT is invalid, using primary GPT. [ 570.815113][ T3020] loop5: p2 p3 p7 [ 570.839112][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.973607][T22490] loop2: detected capacity change from 0 to 2048 [ 571.039532][T22490] Alternate GPT is invalid, using primary GPT. [ 571.045927][T22490] loop2: p2 p3 p7 [ 571.316635][T22505] loop1: detected capacity change from 0 to 2048 [ 571.334830][T22505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.584060][T22512] loop5: detected capacity change from 0 to 2048 [ 571.627819][T22512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.815755][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 571.823838][T13919] udevd[13919]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 571.827633][T11746] udevd[11746]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 572.016883][T22526] loop2: detected capacity change from 0 to 2048 [ 572.044650][T22526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.210200][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.433720][T22539] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 572.562270][T22397] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 572.613842][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.913969][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.928859][T22540] __nla_validate_parse: 32 callbacks suppressed [ 572.928876][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4292'. [ 572.944252][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4292'. [ 572.954282][T22551] loop5: detected capacity change from 0 to 2048 [ 572.976914][T22551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.148946][T22561] loop2: detected capacity change from 0 to 2048 [ 573.187654][T22561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.403348][T22570] loop1: detected capacity change from 0 to 2048 [ 573.438525][T22570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.467429][T22561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4298'. [ 573.476337][T22561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4298'. [ 573.521589][T22551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4296'. [ 573.530622][T22551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4296'. [ 573.722593][T22560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4297'. [ 573.731506][T22560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4297'. [ 573.863132][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.948027][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.034467][T22570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4299'. [ 574.043453][T22570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4299'. [ 574.080051][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 574.080144][ T29] audit: type=1326 audit(1732664822.087:87647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.0.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 574.130976][T22586] loop5: detected capacity change from 0 to 2048 [ 574.175874][ T29] audit: type=1326 audit(1732664822.127:87648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.0.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 574.199457][ T29] audit: type=1326 audit(1732664822.127:87649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.0.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 574.223080][ T29] audit: type=1326 audit(1732664822.127:87650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.0.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 574.246797][ T29] audit: type=1326 audit(1732664822.127:87651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.0.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 574.270300][ T29] audit: type=1326 audit(1732664822.137:87652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22591 comm="syz.0.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff411eb0a05 code=0x7ffc0000 [ 574.293932][ T29] audit: type=1326 audit(1732664822.137:87653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.0.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 574.296122][T22596] loop2: detected capacity change from 0 to 2048 [ 574.317543][ T29] audit: type=1326 audit(1732664822.147:87654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.0.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 574.317576][ T29] audit: type=1326 audit(1732664822.147:87655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.0.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 574.371153][ T29] audit: type=1326 audit(1732664822.147:87656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.0.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 574.429111][T22586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.470959][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.492565][T22596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.670261][T22605] loop1: detected capacity change from 0 to 2048 [ 574.714525][T22605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.844486][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.076796][T22619] loop5: detected capacity change from 0 to 2048 [ 575.116896][T22619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.298786][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.384252][T22626] loop2: detected capacity change from 0 to 512 [ 575.390933][T22626] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 575.460278][T22626] loop2: detected capacity change from 0 to 8192 [ 575.540356][T22626] loop2: p1 p2 < > p3 p4 < p5 > [ 575.546841][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.556555][T22626] loop2: p1 size 108986237 extends beyond EOD, truncated [ 575.583058][T22626] loop2: p3 size 131072 extends beyond EOD, truncated [ 575.612949][T22626] loop2: p5 size 108986237 extends beyond EOD, truncated [ 575.760775][T22634] loop1: detected capacity change from 0 to 2048 [ 575.804085][T22634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.889303][T22641] loop2: detected capacity change from 0 to 2048 [ 576.000558][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.011121][T22641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.230988][T22649] loop5: detected capacity change from 0 to 2048 [ 576.287570][T22649] Alternate GPT is invalid, using primary GPT. [ 576.293977][T22649] loop5: p2 p3 p7 [ 576.531220][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.653497][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.717393][T22661] loop1: detected capacity change from 0 to 2048 [ 576.746145][T22661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.833804][T22668] loop2: detected capacity change from 0 to 2048 [ 576.876667][T22668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.187374][T22679] loop5: detected capacity change from 0 to 2048 [ 577.239618][T22679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.535876][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.673847][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.788928][T22691] loop1: detected capacity change from 0 to 2048 [ 577.841786][T22691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.914714][T22697] loop2: detected capacity change from 0 to 2048 [ 577.981638][T22697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.063890][T22701] __nla_validate_parse: 28 callbacks suppressed [ 578.063906][T22701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'. [ 578.079066][T22701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'. [ 578.122572][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.371048][T22691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4323'. [ 578.380039][T22691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4323'. [ 578.404115][T22712] loop5: detected capacity change from 0 to 2048 [ 578.431751][T22712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.504600][T22684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4322'. [ 578.513550][T22684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4322'. [ 578.568118][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4324'. [ 578.577051][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4324'. [ 578.648385][T22711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4327'. [ 578.657313][T22711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4327'. [ 578.856791][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.866824][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.066341][T22727] loop2: detected capacity change from 0 to 2048 [ 579.082072][T22728] loop1: detected capacity change from 0 to 2048 [ 579.093634][T22727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.137631][T22728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.341441][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.540034][T22742] loop5: detected capacity change from 0 to 2048 [ 579.582834][T22742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.992838][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.132972][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.209995][T22757] loop2: detected capacity change from 0 to 2048 [ 580.268888][T22757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.355599][T22763] loop1: detected capacity change from 0 to 2048 [ 580.403581][T22763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.460588][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.808649][T22776] loop5: detected capacity change from 0 to 2048 [ 580.843601][T22776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.862405][T22397] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 580.922554][T22397] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 581.013379][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.099263][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.230938][T22787] loop2: detected capacity change from 0 to 2048 [ 581.325683][T22787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.356485][T22794] loop1: detected capacity change from 0 to 2048 [ 581.405173][T22794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.641361][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.887338][T22807] loop5: detected capacity change from 0 to 2048 [ 581.925807][T22807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.116398][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.263361][T22814] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 582.293246][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 582.293258][ T29] audit: type=1326 audit(1732664830.307:87865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22812 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 582.350782][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.380097][ T29] audit: type=1326 audit(1732664830.337:87866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22812 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 582.403820][ T29] audit: type=1326 audit(1732664830.337:87867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22812 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 582.427452][ T29] audit: type=1326 audit(1732664830.337:87868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22812 comm="syz.2.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 582.675582][T22825] loop1: detected capacity change from 0 to 2048 [ 582.705263][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.983841][T22836] loop5: detected capacity change from 0 to 2048 [ 583.101351][T22841] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 583.132800][ T29] audit: type=1326 audit(1732664831.147:87869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22839 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 583.198140][ T29] audit: type=1326 audit(1732664831.177:87870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22839 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 583.221791][ T29] audit: type=1326 audit(1732664831.177:87871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22839 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 583.245483][ T29] audit: type=1326 audit(1732664831.177:87872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22839 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 583.392013][T22836] __nla_validate_parse: 33 callbacks suppressed [ 583.392044][T22836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4347'. [ 583.407235][T22836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4347'. [ 583.639696][T22849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4350'. [ 583.648779][T22849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4350'. [ 583.688837][T22854] loop1: detected capacity change from 0 to 2048 [ 583.925652][T22865] loop5: detected capacity change from 0 to 2048 [ 584.035735][T22851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4351'. [ 584.044743][T22851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4351'. [ 584.066353][T22872] loop2: detected capacity change from 0 to 2048 [ 584.098278][T22862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4352'. [ 584.107211][T22862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4352'. [ 584.289715][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4354'. [ 584.298676][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4354'. [ 584.769622][T22890] loop1: detected capacity change from 0 to 2048 [ 585.019397][T22901] loop5: detected capacity change from 0 to 2048 [ 585.109997][T22905] loop2: detected capacity change from 0 to 2048 [ 585.234912][T22910] netlink: 'syz.0.4362': attribute type 10 has an invalid length. [ 585.271004][ T29] audit: type=1326 audit(1732664833.277:87873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22909 comm="syz.0.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 585.294720][ T29] audit: type=1326 audit(1732664833.277:87874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22909 comm="syz.0.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 585.668253][T22916] loop1: detected capacity change from 0 to 2048 [ 585.883329][T22926] loop1: detected capacity change from 0 to 2048 [ 586.028763][T22935] loop5: detected capacity change from 0 to 2048 [ 586.315919][T22945] loop2: detected capacity change from 0 to 2048 [ 587.004995][T22964] loop1: detected capacity change from 0 to 2048 [ 587.144727][T22971] loop5: detected capacity change from 0 to 2048 [ 588.336753][T23001] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 588.400719][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 588.400747][ T29] audit: type=1326 audit(1732664836.407:87877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23000 comm="syz.1.4383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x0 [ 588.614644][T23005] __nla_validate_parse: 25 callbacks suppressed [ 588.614659][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4384'. [ 588.629832][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4384'. [ 588.666627][ T29] audit: type=1326 audit(1732664836.467:87878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22995 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 588.690334][ T29] audit: type=1326 audit(1732664836.467:87879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22995 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 588.714056][ T29] audit: type=1326 audit(1732664836.467:87880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22995 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 588.737715][ T29] audit: type=1326 audit(1732664836.467:87881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22995 comm="syz.5.4382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 589.209680][T23023] loop5: detected capacity change from 0 to 2048 [ 589.302416][T23030] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 589.329812][ T29] audit: type=1326 audit(1732664837.337:87882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23025 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 589.353677][ T29] audit: type=1326 audit(1732664837.337:87883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23025 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 589.377333][ T29] audit: type=1326 audit(1732664837.337:87884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23025 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 589.401052][ T29] audit: type=1326 audit(1732664837.337:87885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23025 comm="syz.1.4390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 589.577624][T23036] netlink: 'syz.4.4392': attribute type 10 has an invalid length. [ 589.624215][ T29] audit: type=1326 audit(1732664837.637:87886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23035 comm="syz.4.4392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 589.692614][T23029] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 589.803006][T23013] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4387'. [ 590.492603][T23065] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 591.116347][T23090] netlink: 'syz.1.4407': attribute type 10 has an invalid length. [ 591.424143][T23101] loop5: detected capacity change from 0 to 2048 [ 591.612860][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4406'. [ 591.621771][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4406'. [ 591.830170][T23117] loop1: detected capacity change from 0 to 8192 [ 592.331078][T23101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4408'. [ 592.340036][T23101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4408'. [ 592.662096][T23127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4416'. [ 593.533030][T23138] netlink: 'syz.1.4417': attribute type 10 has an invalid length. [ 593.685871][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 593.685898][ T29] audit: type=1326 audit(1732664841.697:87939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 593.732792][T23145] netlink: 'syz.0.4423': attribute type 10 has an invalid length. [ 593.874967][ T29] audit: type=1326 audit(1732664841.727:87940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 593.898765][ T29] audit: type=1326 audit(1732664841.737:87941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 593.922579][ T29] audit: type=1326 audit(1732664841.737:87942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 593.946158][ T29] audit: type=1326 audit(1732664841.747:87943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 593.969823][ T29] audit: type=1326 audit(1732664841.747:87944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 593.993474][ T29] audit: type=1326 audit(1732664841.747:87945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 594.017038][ T29] audit: type=1326 audit(1732664841.747:87946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 594.040614][ T29] audit: type=1326 audit(1732664841.747:87947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 594.064206][ T29] audit: type=1326 audit(1732664841.747:87948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.1.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 596.789243][T23183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4432'. [ 597.216835][T23160] loop2: detected capacity change from 0 to 8192 [ 597.281431][T23192] netlink: 'syz.4.4434': attribute type 10 has an invalid length. [ 599.444278][T23267] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 599.465117][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 599.465132][ T29] audit: type=1326 audit(1732664847.467:87985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23263 comm="syz.1.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 599.540569][ T29] audit: type=1326 audit(1732664847.477:87986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23263 comm="syz.1.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 599.564226][ T29] audit: type=1326 audit(1732664847.477:87987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23263 comm="syz.1.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 599.587903][ T29] audit: type=1326 audit(1732664847.477:87988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23263 comm="syz.1.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 599.712081][T23276] ALSA: seq fatal error: cannot create timer (-19) [ 600.321848][T23295] ALSA: seq fatal error: cannot create timer (-19) [ 600.555742][T23306] ALSA: seq fatal error: cannot create timer (-19) [ 600.616291][T23310] loop2: detected capacity change from 0 to 512 [ 600.645127][T23310] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4470: attempt to clear invalid blocks 1 len 1 [ 600.683503][T23310] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4470: bg 0: block 343: padding at end of block bitmap is not set [ 600.728628][T23310] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 600.760705][T23310] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4470: invalid indirect mapped block 1819239214 (level 0) [ 600.803967][T23310] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4470: invalid indirect mapped block 1819239214 (level 1) [ 600.818225][T23316] ALSA: seq fatal error: cannot create timer (-19) [ 600.850107][T23310] EXT4-fs (loop2): 1 truncate cleaned up [ 600.876050][T23310] EXT4-fs mount: 32 callbacks suppressed [ 600.876097][T23310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.973556][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.056317][T23324] ALSA: seq fatal error: cannot create timer (-19) [ 601.176649][T23331] loop5: detected capacity change from 0 to 512 [ 601.231048][T23331] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.4477: attempt to clear invalid blocks 1 len 1 [ 601.286619][T23331] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4477: bg 0: block 343: padding at end of block bitmap is not set [ 601.339231][T23336] ALSA: seq fatal error: cannot create timer (-19) [ 601.350305][T23331] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 601.396411][T23331] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4477: invalid indirect mapped block 1819239214 (level 0) [ 601.460706][T23331] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4477: invalid indirect mapped block 1819239214 (level 1) [ 601.495599][T23331] EXT4-fs (loop5): 1 truncate cleaned up [ 601.496741][T23345] loop1: detected capacity change from 0 to 4096 [ 601.501759][T23331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.507632][T23344] ALSA: seq fatal error: cannot create timer (-19) [ 601.572577][T23345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.621000][ T29] audit: type=1400 audit(1732664849.627:87989): avc: denied { create } for pid=23343 comm="syz.1.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 601.709353][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.728625][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.746754][ T29] audit: type=1400 audit(1732664849.667:87990): avc: denied { connect } for pid=23343 comm="syz.1.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 601.751260][T23351] ALSA: seq fatal error: cannot create timer (-19) [ 601.766475][ T29] audit: type=1400 audit(1732664849.667:87991): avc: denied { write } for pid=23343 comm="syz.1.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 601.792621][ T29] audit: type=1326 audit(1732664849.667:87992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23343 comm="syz.1.4480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 601.816227][ T29] audit: type=1326 audit(1732664849.677:87993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23343 comm="syz.1.4480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 601.839961][ T29] audit: type=1326 audit(1732664849.677:87994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23343 comm="syz.1.4480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 601.955335][T23356] ALSA: seq fatal error: cannot create timer (-19) [ 602.015206][T23360] ALSA: seq fatal error: cannot create timer (-19) [ 602.119642][T23366] loop5: detected capacity change from 0 to 4096 [ 602.148313][T23366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.262229][T23363] ALSA: seq fatal error: cannot create timer (-19) [ 602.422784][T23373] ALSA: seq fatal error: cannot create timer (-19) [ 602.651097][T23377] ALSA: seq fatal error: cannot create timer (-19) [ 602.731026][T23383] ALSA: seq fatal error: cannot create timer (-19) [ 603.083552][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.131675][T23399] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 603.191151][T23401] loop5: detected capacity change from 0 to 4096 [ 603.198203][T23398] loop2: detected capacity change from 0 to 8192 [ 603.208017][T23401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.038927][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.155786][T23413] ALSA: seq fatal error: cannot create timer (-19) [ 604.528615][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 604.528631][ T29] audit: type=1326 audit(1732664852.537:88108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23406 comm="syz.4.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 604.660802][ T29] audit: type=1326 audit(1732664852.567:88109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23406 comm="syz.4.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 604.684477][ T29] audit: type=1326 audit(1732664852.567:88110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23406 comm="syz.4.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 604.708177][ T29] audit: type=1326 audit(1732664852.577:88111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23406 comm="syz.4.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 604.731829][ T29] audit: type=1326 audit(1732664852.577:88112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23406 comm="syz.4.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 604.755458][ T29] audit: type=1326 audit(1732664852.577:88113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23406 comm="syz.4.4500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 604.844110][T23423] loop2: detected capacity change from 0 to 4096 [ 604.946085][T23423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.969777][ T29] audit: type=1326 audit(1732664852.977:88114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23422 comm="syz.2.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 604.993482][ T29] audit: type=1326 audit(1732664852.977:88115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23422 comm="syz.2.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 605.017044][ T29] audit: type=1326 audit(1732664852.977:88116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23422 comm="syz.2.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 605.040646][ T29] audit: type=1326 audit(1732664852.977:88117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23422 comm="syz.2.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 605.046367][T23430] loop1: detected capacity change from 0 to 512 [ 605.316407][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.343283][T23430] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.4507: attempt to clear invalid blocks 1 len 1 [ 605.426512][T23430] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4507: bg 0: block 343: padding at end of block bitmap is not set [ 605.492406][T23430] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 605.572021][T23430] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4507: invalid indirect mapped block 1819239214 (level 0) [ 605.617925][T23430] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4507: invalid indirect mapped block 1819239214 (level 1) [ 605.681186][T23430] EXT4-fs (loop1): 1 truncate cleaned up [ 605.694285][T23430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.953219][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.114309][T23454] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 606.115383][T23453] loop2: detected capacity change from 0 to 4096 [ 606.186310][T23453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.006814][T23459] loop1: detected capacity change from 0 to 4096 [ 607.068770][T23459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.202603][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.673014][T23466] ALSA: seq fatal error: cannot create timer (-19) [ 608.624259][T23483] loop2: detected capacity change from 0 to 512 [ 608.700678][T23483] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4520: attempt to clear invalid blocks 1 len 1 [ 608.726893][T23485] loop5: detected capacity change from 0 to 2048 [ 608.903580][T23485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.920493][T23483] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4520: bg 0: block 343: padding at end of block bitmap is not set [ 609.014208][T23483] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 609.055938][T23483] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4520: invalid indirect mapped block 1819239214 (level 0) [ 609.084485][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.112606][T23483] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4520: invalid indirect mapped block 1819239214 (level 1) [ 609.172077][T23483] EXT4-fs (loop2): 1 truncate cleaned up [ 609.276249][T23483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.310679][T23493] netlink: 'syz.0.4523': attribute type 10 has an invalid length. [ 609.322728][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.458257][T23498] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 609.550204][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.664511][T23500] bridge0: port 1(vlan3) entered blocking state [ 609.670832][T23500] bridge0: port 1(vlan3) entered disabled state [ 609.705381][T23500] vlan3: entered allmulticast mode [ 609.725981][T23500] vlan3: left allmulticast mode [ 609.933550][T23505] ALSA: seq fatal error: cannot create timer (-19) [ 609.981959][T23504] ALSA: seq fatal error: cannot create timer (-19) [ 610.248549][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4532'. [ 610.257564][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4532'. [ 610.333781][T23514] loop1: detected capacity change from 0 to 4096 [ 610.346216][T23521] loop2: detected capacity change from 0 to 2048 [ 610.389195][T23514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.416515][T23521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.437682][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 610.437769][ T29] audit: type=1326 audit(1732664858.447:88234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 610.467689][ T29] audit: type=1326 audit(1732664858.447:88235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 610.491312][ T29] audit: type=1326 audit(1732664858.447:88236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 610.514888][ T29] audit: type=1326 audit(1732664858.447:88237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 610.538615][ T29] audit: type=1326 audit(1732664858.447:88238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 610.562236][ T29] audit: type=1326 audit(1732664858.447:88239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 610.585804][ T29] audit: type=1326 audit(1732664858.447:88240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 610.609400][ T29] audit: type=1326 audit(1732664858.447:88241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.0.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 610.648343][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.677472][T23528] ALSA: seq fatal error: cannot create timer (-19) [ 610.719929][ T29] audit: type=1326 audit(1732664858.467:88242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.4.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 610.743669][ T29] audit: type=1326 audit(1732664858.467:88243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23516 comm="syz.4.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 610.870726][T23534] loop5: detected capacity change from 0 to 512 [ 610.885734][T23531] loop2: detected capacity change from 0 to 4096 [ 610.923219][T23534] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.4536: attempt to clear invalid blocks 1 len 1 [ 610.937160][T23531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.052501][T23534] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4536: bg 0: block 343: padding at end of block bitmap is not set [ 611.102386][T23534] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 611.152605][T23534] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4536: invalid indirect mapped block 1819239214 (level 0) [ 611.212768][T23534] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4536: invalid indirect mapped block 1819239214 (level 1) [ 611.244650][T23534] EXT4-fs (loop5): 1 truncate cleaned up [ 611.256083][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.279971][T23534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.364415][T23542] netlink: 'syz.1.4537': attribute type 10 has an invalid length. [ 611.437254][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.555568][T23545] loop5: detected capacity change from 0 to 4096 [ 611.590662][T23545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.713517][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.754107][T23553] loop2: detected capacity change from 0 to 512 [ 611.787742][T23553] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4541: attempt to clear invalid blocks 1 len 1 [ 611.856971][T23553] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4541: bg 0: block 343: padding at end of block bitmap is not set [ 611.877147][T23553] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 611.895095][T23553] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4541: invalid indirect mapped block 1819239214 (level 0) [ 611.938097][T23553] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4541: invalid indirect mapped block 1819239214 (level 1) [ 611.994990][T23553] EXT4-fs (loop2): 1 truncate cleaned up [ 612.012465][T23559] ALSA: seq fatal error: cannot create timer (-19) [ 612.020170][T23561] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 612.034401][T23553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.151527][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.367673][T23566] loop2: detected capacity change from 0 to 4096 [ 613.206353][T23566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.642893][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.838565][T23577] ALSA: seq fatal error: cannot create timer (-19) [ 613.911619][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.958531][T23582] loop5: detected capacity change from 0 to 4096 [ 614.007548][T23582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.078554][T23587] loop1: detected capacity change from 0 to 2048 [ 614.109961][T23589] loop2: detected capacity change from 0 to 4096 [ 614.134042][T23587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.194861][T23589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.524551][T23587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4551'. [ 614.533484][T23587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4551'. [ 614.841058][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.857553][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.048418][T23608] netlink: 'syz.5.4554': attribute type 10 has an invalid length. [ 615.068877][T23606] loop1: detected capacity change from 0 to 2048 [ 615.226186][T23606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.303121][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.406245][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.961585][T23614] loop5: detected capacity change from 0 to 4096 [ 615.962309][T23620] ALSA: seq fatal error: cannot create timer (-19) [ 616.018071][T23618] loop2: detected capacity change from 0 to 4096 [ 616.037157][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 616.037172][ T29] audit: type=1326 audit(1732664864.007:88662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 616.067305][ T29] audit: type=1326 audit(1732664864.007:88663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 616.091045][ T29] audit: type=1326 audit(1732664864.007:88664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 616.114798][ T29] audit: type=1326 audit(1732664864.007:88665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 616.138443][ T29] audit: type=1326 audit(1732664864.007:88666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 616.162052][ T29] audit: type=1326 audit(1732664864.007:88667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 616.166378][T23630] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 616.185646][ T29] audit: type=1326 audit(1732664864.007:88668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 616.216602][ T29] audit: type=1326 audit(1732664864.007:88669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 616.240174][ T29] audit: type=1326 audit(1732664864.007:88670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 616.263844][ T29] audit: type=1326 audit(1732664864.007:88671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.4.4561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 616.303247][T23614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.332381][T23618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.458937][T23650] netlink: 'syz.1.4568': attribute type 10 has an invalid length. [ 617.636757][T23655] netlink: 'syz.0.4570': attribute type 10 has an invalid length. [ 617.670102][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.684618][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.690199][T23646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4566'. [ 617.702468][T23646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4566'. [ 617.768615][T23660] netlink: 'syz.5.4571': attribute type 10 has an invalid length. [ 617.821815][T23657] loop2: detected capacity change from 0 to 8192 [ 618.153824][T23665] loop1: detected capacity change from 0 to 4096 [ 618.173649][T23665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.431911][T23672] loop5: detected capacity change from 0 to 4096 [ 618.463712][T23672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.104497][T23684] ALSA: seq fatal error: cannot create timer (-19) [ 619.334497][T23692] loop2: detected capacity change from 0 to 2048 [ 619.344763][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.404999][T23692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.456969][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.541518][T23697] loop1: detected capacity change from 0 to 4096 [ 619.588047][T23697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.729866][T23704] netlink: 'syz.0.4587': attribute type 10 has an invalid length. [ 619.837394][T23706] loop5: detected capacity change from 0 to 4096 [ 619.878610][T23706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.064131][T23692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4583'. [ 620.073052][T23692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4583'. [ 620.353183][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.389587][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.407279][T23719] ALSA: seq fatal error: cannot create timer (-19) [ 620.467222][T23722] loop2: detected capacity change from 0 to 2048 [ 620.497708][T23722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.535873][T23724] loop1: detected capacity change from 0 to 4096 [ 620.575765][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.599025][T23724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.695441][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.712408][T23731] loop2: detected capacity change from 0 to 4096 [ 620.774979][T23731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.824838][T23734] ALSA: seq fatal error: cannot create timer (-19) [ 620.938791][T23738] loop5: detected capacity change from 0 to 4096 [ 621.013726][T23738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.053804][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 621.053818][ T29] audit: type=1326 audit(1732664869.067:89026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23730 comm="syz.2.4595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 621.149712][T23748] ALSA: seq fatal error: cannot create timer (-19) [ 621.150922][ T29] audit: type=1326 audit(1732664869.107:89027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23730 comm="syz.2.4595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb159be919 code=0x7ffc0000 [ 621.217602][T23752] netlink: 'syz.0.4601': attribute type 10 has an invalid length. [ 621.246171][T23752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4601'. [ 621.272010][ T29] audit: type=1326 audit(1732664869.187:89028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23737 comm="syz.5.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 621.295674][ T29] audit: type=1326 audit(1732664869.187:89029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23737 comm="syz.5.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 621.319429][ T29] audit: type=1326 audit(1732664869.187:89030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23737 comm="syz.5.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 621.343032][ T29] audit: type=1326 audit(1732664869.187:89031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23737 comm="syz.5.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 621.366621][ T29] audit: type=1326 audit(1732664869.187:89032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23737 comm="syz.5.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 621.390286][ T29] audit: type=1326 audit(1732664869.187:89033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23737 comm="syz.5.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 621.413864][ T29] audit: type=1326 audit(1732664869.187:89034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23737 comm="syz.5.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 621.437459][ T29] audit: type=1326 audit(1732664869.187:89035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23737 comm="syz.5.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 621.612689][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.697184][T23759] netlink: 'syz.1.4603': attribute type 10 has an invalid length. [ 621.767038][T23761] ALSA: seq fatal error: cannot create timer (-19) [ 621.824486][T23755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4602'. [ 621.833427][T23755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4602'. [ 621.963399][T23769] ALSA: seq fatal error: cannot create timer (-19) [ 622.049837][T23774] ALSA: seq fatal error: cannot create timer (-19) [ 622.085548][T23772] loop5: detected capacity change from 0 to 4096 [ 622.269911][T23784] ALSA: seq fatal error: cannot create timer (-19) [ 622.340496][T23787] ALSA: seq fatal error: cannot create timer (-19) [ 622.446149][T23790] ALSA: seq fatal error: cannot create timer (-19) [ 622.644379][T23794] loop1: detected capacity change from 0 to 4096 [ 622.719708][T23796] loop2: detected capacity change from 0 to 4096 [ 623.397315][T23808] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 623.444269][T23811] ALSA: seq fatal error: cannot create timer (-19) [ 623.576812][T23816] ALSA: seq fatal error: cannot create timer (-19) [ 623.680904][T23823] ALSA: seq fatal error: cannot create timer (-19) [ 623.696975][T23825] netlink: 'syz.2.4622': attribute type 10 has an invalid length. [ 623.812779][T23829] ALSA: seq fatal error: cannot create timer (-19) [ 624.122028][T23838] ALSA: seq fatal error: cannot create timer (-19) [ 624.369639][T23848] ALSA: seq fatal error: cannot create timer (-19) [ 624.541356][T23843] loop5: detected capacity change from 0 to 8192 [ 624.559148][T23851] loop2: detected capacity change from 0 to 4096 [ 624.678002][T23853] loop1: detected capacity change from 0 to 4096 [ 625.397249][T23865] loop5: detected capacity change from 0 to 4096 [ 625.474196][T23864] ALSA: seq fatal error: cannot create timer (-19) [ 625.539948][T23871] ALSA: seq fatal error: cannot create timer (-19) [ 625.746589][T23880] netlink: 'syz.2.4642': attribute type 10 has an invalid length. [ 626.062368][ T29] kauditd_printk_skb: 640 callbacks suppressed [ 626.062430][ T29] audit: type=1326 audit(1732664874.027:89676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.5.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 626.092244][ T29] audit: type=1326 audit(1732664874.057:89677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.5.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 626.185510][ T29] audit: type=1326 audit(1732664874.197:89678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23874 comm="syz.0.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 626.229296][ T29] audit: type=1326 audit(1732664874.217:89679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23874 comm="syz.0.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 626.252932][ T29] audit: type=1326 audit(1732664874.217:89680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23874 comm="syz.0.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 626.276595][ T29] audit: type=1326 audit(1732664874.217:89681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23874 comm="syz.0.4639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 626.314932][ T29] audit: type=1326 audit(1732664874.267:89682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.5.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 626.338551][ T29] audit: type=1326 audit(1732664874.267:89683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.5.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 626.362163][ T29] audit: type=1326 audit(1732664874.267:89684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.5.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 626.385757][ T29] audit: type=1326 audit(1732664874.277:89685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.5.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 626.543203][T23890] loop2: detected capacity change from 0 to 4096 [ 626.602719][T23893] loop1: detected capacity change from 0 to 4096 [ 627.041810][T23905] loop5: detected capacity change from 0 to 512 [ 627.053930][T23905] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.4648: attempt to clear invalid blocks 1 len 1 [ 627.092348][T23905] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4648: bg 0: block 343: padding at end of block bitmap is not set [ 627.168000][T23905] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 627.194359][T23905] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4648: invalid indirect mapped block 1819239214 (level 0) [ 627.228925][T23905] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4648: invalid indirect mapped block 1819239214 (level 1) [ 627.290915][T23905] EXT4-fs (loop5): 1 truncate cleaned up [ 627.424578][T23909] loop2: detected capacity change from 0 to 4096 [ 627.491032][T23911] ALSA: seq fatal error: cannot create timer (-19) [ 627.573103][T23917] loop1: detected capacity change from 0 to 512 [ 627.609693][T23917] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.4652: attempt to clear invalid blocks 1 len 1 [ 627.660490][T23917] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4652: bg 0: block 343: padding at end of block bitmap is not set [ 627.725835][T23920] loop5: detected capacity change from 0 to 4096 [ 627.744000][T23917] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 627.762890][T23922] netlink: 'syz.0.4654': attribute type 10 has an invalid length. [ 627.773539][T23917] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4652: invalid indirect mapped block 1819239214 (level 0) [ 627.838330][T23917] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4652: invalid indirect mapped block 1819239214 (level 1) [ 627.898009][T23917] EXT4-fs (loop1): 1 truncate cleaned up [ 628.444591][T23931] loop1: detected capacity change from 0 to 512 [ 628.477999][T23931] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.4656: attempt to clear invalid blocks 1 len 1 [ 628.565129][T23936] ALSA: seq fatal error: cannot create timer (-19) [ 628.585324][T23931] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4656: bg 0: block 343: padding at end of block bitmap is not set [ 628.674664][T23931] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 628.721177][T23931] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4656: invalid indirect mapped block 1819239214 (level 0) [ 628.780589][T23931] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4656: invalid indirect mapped block 1819239214 (level 1) [ 628.780990][T23939] loop2: detected capacity change from 0 to 4096 [ 628.815215][T23931] EXT4-fs (loop1): 1 truncate cleaned up [ 628.904236][T23945] loop5: detected capacity change from 0 to 8192 [ 629.398160][T23953] loop1: detected capacity change from 0 to 2048 [ 630.034251][T23965] loop5: detected capacity change from 0 to 4096 [ 630.109826][T23967] loop2: detected capacity change from 0 to 4096 [ 630.279194][T23972] loop1: detected capacity change from 0 to 4096 [ 631.200889][ T3329] EXT4-fs unmount: 35 callbacks suppressed [ 631.200905][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.232771][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 631.232782][ T29] audit: type=1326 audit(1732664879.247:90063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 631.262546][ T29] audit: type=1326 audit(1732664879.247:90064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 631.286198][ T29] audit: type=1326 audit(1732664879.247:90065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 631.311700][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.354239][T23984] loop2: detected capacity change from 0 to 4096 [ 631.435654][ T29] audit: type=1326 audit(1732664879.447:90066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 631.524976][T23984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.533440][T23988] loop1: detected capacity change from 0 to 4096 [ 631.556990][T23988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.576295][ T29] audit: type=1326 audit(1732664879.587:90067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 631.692516][ T29] audit: type=1326 audit(1732664879.667:90068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 631.744183][ T29] audit: type=1326 audit(1732664879.757:90069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 631.767782][ T29] audit: type=1326 audit(1732664879.757:90070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 631.791405][ T29] audit: type=1326 audit(1732664879.757:90071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 631.832317][ T29] audit: type=1326 audit(1732664879.807:90072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.5.4664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55f3c40837 code=0x7ffc0000 [ 631.952723][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.097550][T23998] loop5: detected capacity change from 0 to 512 [ 632.120860][T23998] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.4674: attempt to clear invalid blocks 1 len 1 [ 632.229724][T23998] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4674: bg 0: block 343: padding at end of block bitmap is not set [ 632.312262][T23998] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 632.342218][T23998] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4674: invalid indirect mapped block 1819239214 (level 0) [ 632.366143][T23998] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4674: invalid indirect mapped block 1819239214 (level 1) [ 632.380710][T23998] EXT4-fs (loop5): 1 truncate cleaned up [ 632.386757][T23998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.426272][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.622507][T24004] loop5: detected capacity change from 0 to 4096 [ 632.686376][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.706966][T24004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.722862][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.910359][T24011] loop1: detected capacity change from 0 to 4096 [ 632.918566][T24013] loop2: detected capacity change from 0 to 4096 [ 632.950551][T24011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.978690][T24013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.814089][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.916483][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.941758][T24032] loop5: detected capacity change from 0 to 4096 [ 633.975183][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.984898][T24032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.050939][T24036] loop1: detected capacity change from 0 to 4096 [ 634.062496][T24036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.158070][T24039] loop2: detected capacity change from 0 to 2048 [ 634.227379][T24039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.269644][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.569169][T24048] loop2: detected capacity change from 0 to 4096 [ 634.621865][T24048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.941765][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.154173][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.178954][T24057] loop5: detected capacity change from 0 to 4096 [ 635.232701][T24057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.310724][T24060] loop1: detected capacity change from 0 to 4096 [ 635.383347][T24060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.587049][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.760735][T24066] loop2: detected capacity change from 0 to 4096 [ 635.792612][T24066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.028739][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.152491][T24077] loop5: detected capacity change from 0 to 4096 [ 636.268990][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.270714][T24077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.301586][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.349656][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 636.349702][ T29] audit: type=1326 audit(1732664884.357:90626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24072 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 636.389414][T24082] loop2: detected capacity change from 0 to 4096 [ 636.395923][ T29] audit: type=1326 audit(1732664884.357:90627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24072 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 636.419572][ T29] audit: type=1326 audit(1732664884.367:90628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24072 comm="syz.4.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 636.459662][T24084] loop1: detected capacity change from 0 to 4096 [ 636.470587][ T29] audit: type=1326 audit(1732664884.437:90629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24075 comm="syz.5.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 636.494309][ T29] audit: type=1326 audit(1732664884.437:90630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24075 comm="syz.5.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 636.517952][ T29] audit: type=1326 audit(1732664884.437:90631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24075 comm="syz.5.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 636.541669][ T29] audit: type=1326 audit(1732664884.437:90632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24075 comm="syz.5.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 636.565299][ T29] audit: type=1326 audit(1732664884.437:90633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24075 comm="syz.5.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 636.576990][T24082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.588862][ T29] audit: type=1326 audit(1732664884.437:90634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24075 comm="syz.5.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 636.625116][ T29] audit: type=1326 audit(1732664884.437:90635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24075 comm="syz.5.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 636.652357][T24084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.058089][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.219380][T24099] loop5: detected capacity change from 0 to 4096 [ 637.251370][T24099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.698544][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.773337][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.795949][T24107] loop2: detected capacity change from 0 to 512 [ 637.826661][T24107] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4704: attempt to clear invalid blocks 1 len 1 [ 637.884859][T24107] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4704: bg 0: block 343: padding at end of block bitmap is not set [ 637.938623][T24107] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 637.982546][T24107] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4704: invalid indirect mapped block 1819239214 (level 0) [ 638.027491][T24107] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4704: invalid indirect mapped block 1819239214 (level 1) [ 638.089420][T24107] EXT4-fs (loop2): 1 truncate cleaned up [ 638.106856][T24107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.219269][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.272991][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.375047][T24118] netlink: 'syz.0.4709': attribute type 10 has an invalid length. [ 638.422948][T24118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4709'. [ 638.454054][T24116] loop2: detected capacity change from 0 to 4096 [ 638.489407][T24116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.510861][T24122] loop5: detected capacity change from 0 to 4096 [ 638.531162][T24120] loop1: detected capacity change from 0 to 4096 [ 638.563567][T24122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.663621][T24120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.307994][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.324002][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.457291][T24142] loop5: detected capacity change from 0 to 4096 [ 639.489440][T24145] loop2: detected capacity change from 0 to 512 [ 639.515213][T24142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.644293][T24145] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4714: attempt to clear invalid blocks 1 len 1 [ 639.691676][T24145] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4714: bg 0: block 343: padding at end of block bitmap is not set [ 639.762554][T24145] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 639.812118][T24145] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4714: invalid indirect mapped block 1819239214 (level 0) [ 639.877782][T24145] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4714: invalid indirect mapped block 1819239214 (level 1) [ 639.902782][T24145] EXT4-fs (loop2): 1 truncate cleaned up [ 639.908946][T24145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.922231][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.985919][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.027974][T24152] loop1: detected capacity change from 0 to 4096 [ 640.058121][T24152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.316374][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.465082][T24161] netlink: 'syz.5.4721': attribute type 10 has an invalid length. [ 640.510344][T24161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4721'. [ 640.617969][T24164] loop2: detected capacity change from 0 to 4096 [ 640.649286][T24164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.977147][T24171] netlink: 'syz.4.4724': attribute type 10 has an invalid length. [ 641.015992][T24171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4724'. [ 641.120522][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.134074][T24174] loop5: detected capacity change from 0 to 2048 [ 641.205182][T24174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.251239][T24176] loop1: detected capacity change from 0 to 4096 [ 641.272699][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.317498][T24176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.401407][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.442479][ T29] kauditd_printk_skb: 635 callbacks suppressed [ 641.442494][ T29] audit: type=1326 audit(1732664889.447:91271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24175 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 641.472221][ T29] audit: type=1326 audit(1732664889.447:91272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24175 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 641.561513][T24183] loop5: detected capacity change from 0 to 4096 [ 641.600320][T24186] loop2: detected capacity change from 0 to 2048 [ 641.615228][T24183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.637545][ T29] audit: type=1326 audit(1732664889.507:91273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24168 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 641.661095][ T29] audit: type=1326 audit(1732664889.507:91274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24168 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 641.684816][ T29] audit: type=1326 audit(1732664889.507:91275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24168 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 641.708410][ T29] audit: type=1326 audit(1732664889.567:91276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24168 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 641.732014][ T29] audit: type=1326 audit(1732664889.567:91277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24168 comm="syz.0.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 641.779372][T24186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.837107][T24195] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4730'. [ 641.921787][ T29] audit: type=1326 audit(1732664889.717:91278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24175 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 641.945385][ T29] audit: type=1326 audit(1732664889.717:91279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24175 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 641.968999][ T29] audit: type=1326 audit(1732664889.717:91280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24175 comm="syz.1.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 642.175781][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.297192][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.346408][T24204] loop2: detected capacity change from 0 to 512 [ 642.406018][T24204] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.4733: attempt to clear invalid blocks 1 len 1 [ 642.446763][T24204] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4733: bg 0: block 343: padding at end of block bitmap is not set [ 642.508895][T24204] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 642.548998][T24204] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4733: invalid indirect mapped block 1819239214 (level 0) [ 642.620856][T24204] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4733: invalid indirect mapped block 1819239214 (level 1) [ 642.711097][T24204] EXT4-fs (loop2): 1 truncate cleaned up [ 642.746629][T24204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.788213][ T6074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.869269][T24213] netlink: 'syz.5.4735': attribute type 10 has an invalid length. [ 642.879255][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.899466][T24211] loop1: detected capacity change from 0 to 4096 [ 642.903394][T24213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4735'. [ 642.946146][T24211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.999053][T24216] loop2: detected capacity change from 0 to 2048 [ 643.361425][T24225] loop2: detected capacity change from 0 to 4096 [ 643.456230][T24228] loop1: detected capacity change from 0 to 4096 [ 643.668980][T24233] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4741'. [ 644.038943][T24241] loop5: detected capacity change from 0 to 4096 [ 644.380064][T24246] loop1: detected capacity change from 0 to 4096 [ 644.591136][T24252] loop2: detected capacity change from 0 to 4096 [ 644.801347][T24260] loop5: detected capacity change from 0 to 4096 [ 645.857167][T24281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4757'. [ 645.866208][T24281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4757'. [ 645.906487][T24277] loop1: detected capacity change from 0 to 4096 [ 645.945995][T24282] loop2: detected capacity change from 0 to 2048 [ 646.043762][T24292] loop5: detected capacity change from 0 to 2048 [ 646.203971][T24296] loop5: detected capacity change from 0 to 4096 [ 646.292315][T23628] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 646.486247][T24303] loop2: detected capacity change from 0 to 4096 [ 646.512886][ T29] kauditd_printk_skb: 652 callbacks suppressed [ 646.512900][ T29] audit: type=1326 audit(1732664894.527:91933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24298 comm="syz.0.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 646.642207][ T29] audit: type=1326 audit(1732664894.557:91934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24298 comm="syz.0.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 646.665877][ T29] audit: type=1326 audit(1732664894.557:91935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24298 comm="syz.0.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 646.689489][ T29] audit: type=1326 audit(1732664894.557:91936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24298 comm="syz.0.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 646.713057][ T29] audit: type=1326 audit(1732664894.557:91937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24298 comm="syz.0.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 646.736625][ T29] audit: type=1326 audit(1732664894.557:91938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24298 comm="syz.0.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 646.760216][ T29] audit: type=1326 audit(1732664894.557:91939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24298 comm="syz.0.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 646.783996][ T29] audit: type=1326 audit(1732664894.557:91940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24298 comm="syz.0.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 646.807649][ T29] audit: type=1326 audit(1732664894.557:91941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24298 comm="syz.0.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 646.831236][ T29] audit: type=1326 audit(1732664894.557:91942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24298 comm="syz.0.4762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff411e7e919 code=0x7ffc0000 [ 647.260819][T24313] loop1: detected capacity change from 0 to 4096 [ 647.405194][T24316] loop5: detected capacity change from 0 to 4096 [ 647.801630][T24328] loop2: detected capacity change from 0 to 4096 [ 648.421100][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4771'. [ 648.430041][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4771'. [ 648.486840][T24339] netlink: 'syz.1.4772': attribute type 10 has an invalid length. [ 648.540088][T24341] loop5: detected capacity change from 0 to 8192 [ 648.635471][T24339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4772'. [ 649.170839][T24349] loop5: detected capacity change from 0 to 4096 [ 649.312682][T24352] loop2: detected capacity change from 0 to 4096 [ 649.985455][T24368] loop1: detected capacity change from 0 to 4096 [ 650.754909][T24378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4784'. [ 650.764024][T24378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4784'. [ 651.122415][T24403] netlink: 'syz.5.4790': attribute type 10 has an invalid length. [ 651.142431][T24405] loop2: detected capacity change from 0 to 2048 [ 651.156047][T24403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4790'. [ 651.487360][T24423] loop1: detected capacity change from 0 to 512 [ 651.531012][ T29] kauditd_printk_skb: 619 callbacks suppressed [ 651.531084][ T29] audit: type=1326 audit(1732664899.537:92562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.1.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feee66fd5aa code=0x7ffc0000 [ 651.560703][ T29] audit: type=1326 audit(1732664899.537:92563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.1.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feee66fd5aa code=0x7ffc0000 [ 651.593708][ T29] audit: type=1326 audit(1732664899.597:92564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.1.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7feee66fd1b7 code=0x7ffc0000 [ 651.617314][ T29] audit: type=1326 audit(1732664899.597:92565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.1.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feee67000ba code=0x7ffc0000 [ 651.663946][T24423] ext4 filesystem being mounted at /981/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.697588][T24423] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4791: corrupted xattr block 32: e_value out of bounds [ 651.775596][T24423] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 651.809180][T24440] loop5: detected capacity change from 0 to 512 [ 651.818269][ T29] audit: type=1326 audit(1732664899.697:92566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24434 comm="syz.4.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 651.842045][ T29] audit: type=1326 audit(1732664899.697:92567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24434 comm="syz.4.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 651.865696][ T29] audit: type=1326 audit(1732664899.697:92568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.1.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feee66fd2b0 code=0x7ffc0000 [ 651.889283][ T29] audit: type=1326 audit(1732664899.697:92569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.1.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7feee66fd697 code=0x7ffc0000 [ 651.912895][ T29] audit: type=1326 audit(1732664899.697:92570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.1.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feee66fd2b0 code=0x7ffc0000 [ 651.936507][ T29] audit: type=1326 audit(1732664899.697:92571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24422 comm="syz.1.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee66fe919 code=0x7ffc0000 [ 651.956517][T24441] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 651.975690][T24440] ext4 filesystem being mounted at /745/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.992872][T24440] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4793: corrupted xattr block 32: e_value out of bounds [ 652.008981][T24440] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 652.017525][T24423] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4791: corrupted xattr block 32: e_value out of bounds [ 652.029479][T24440] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4793: corrupted xattr block 32: e_value out of bounds [ 652.055877][T24440] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 652.070488][T24440] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4793: corrupted xattr block 32: e_value out of bounds [ 652.099611][T24440] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4793: corrupted xattr block 32: e_value out of bounds [ 652.121547][T24423] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 652.157482][T24423] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4791: corrupted xattr block 32: e_value out of bounds [ 652.164707][T24440] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 652.181451][T24423] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4791: corrupted xattr block 32: e_value out of bounds [ 652.198250][T24423] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 652.234207][T24471] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4797'. [ 652.330083][T24474] loop2: detected capacity change from 0 to 512 [ 652.395339][T24474] ext4 filesystem being mounted at /914/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.398748][T24475] loop1: detected capacity change from 0 to 4096 [ 652.416465][T24482] loop5: detected capacity change from 0 to 512 [ 652.422850][T24474] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4796: corrupted xattr block 32: e_value out of bounds [ 652.510427][T24482] ext4 filesystem being mounted at /746/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.545198][T24474] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 652.622884][T24482] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4799: corrupted xattr block 32: e_value out of bounds [ 652.643205][T24474] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4796: corrupted xattr block 32: e_value out of bounds [ 652.672493][T24482] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 652.694811][T24474] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 652.703715][T24482] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4799: corrupted xattr block 32: e_value out of bounds [ 652.722536][T24474] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4796: corrupted xattr block 32: e_value out of bounds [ 652.727420][T24501] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 652.772218][T24482] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 652.782367][T24474] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4796: corrupted xattr block 32: e_value out of bounds [ 652.820525][T24482] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4799: corrupted xattr block 32: e_value out of bounds [ 652.835239][T24474] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 652.871714][T24482] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4799: corrupted xattr block 32: e_value out of bounds [ 652.912592][T24482] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 653.049439][T24522] netlink: 'syz.2.4803': attribute type 10 has an invalid length. [ 653.124694][T24526] loop5: detected capacity change from 0 to 512 [ 653.175196][T24526] ext4 filesystem being mounted at /747/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.190994][T24526] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4805: corrupted xattr block 32: e_value out of bounds [ 653.227767][T24526] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 653.283103][T24526] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4805: corrupted xattr block 32: e_value out of bounds [ 653.299855][T24526] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 653.323211][T24532] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 653.341365][T24526] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4805: corrupted xattr block 32: e_value out of bounds [ 653.386022][T24526] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4805: corrupted xattr block 32: e_value out of bounds [ 653.401395][T24545] netlink: 'syz.0.4807': attribute type 10 has an invalid length. [ 653.405830][T24526] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 653.440430][T24545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4807'. [ 653.643896][T24559] loop1: detected capacity change from 0 to 512 [ 653.652597][T24562] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4811'. [ 653.665444][T24557] loop5: detected capacity change from 0 to 512 [ 653.683234][T24559] ext4 filesystem being mounted at /983/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.712361][T24557] ext4 filesystem being mounted at /749/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.716030][T24559] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4809: corrupted xattr block 32: e_value out of bounds [ 653.745034][T24557] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4810: corrupted xattr block 32: e_value out of bounds [ 653.783220][T24557] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 653.811794][T24559] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 653.856534][T24557] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4810: corrupted xattr block 32: e_value out of bounds [ 653.898656][T24559] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4809: corrupted xattr block 32: e_value out of bounds [ 653.915971][T24580] netlink: 'syz.2.4813': attribute type 10 has an invalid length. [ 653.916736][T24557] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 653.937101][T24580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4813'. [ 653.950354][T24559] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 653.964366][T24557] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4810: corrupted xattr block 32: e_value out of bounds [ 653.982820][T24559] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4809: corrupted xattr block 32: e_value out of bounds [ 654.008797][T24557] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4810: corrupted xattr block 32: e_value out of bounds [ 654.020634][T24581] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 654.039679][T24559] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4809: corrupted xattr block 32: e_value out of bounds [ 654.061295][T24557] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 654.082545][T24559] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 654.245011][T24598] loop1: detected capacity change from 0 to 512 [ 654.301152][T24601] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 654.326582][T24598] ext4 filesystem being mounted at /984/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.342935][T24598] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4816: corrupted xattr block 32: e_value out of bounds [ 654.358524][T24598] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 654.369663][T24598] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4816: corrupted xattr block 32: e_value out of bounds [ 654.384167][T24598] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 654.396277][T24598] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4816: corrupted xattr block 32: e_value out of bounds [ 654.428890][T24598] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4816: corrupted xattr block 32: e_value out of bounds [ 654.490431][T24598] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 654.522524][T24627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4819'. [ 654.596259][T24632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4821'. [ 654.639209][T24635] netlink: 'syz.2.4822': attribute type 10 has an invalid length. [ 654.654102][T24635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4822'. [ 654.734509][T24644] loop1: detected capacity change from 0 to 512 [ 654.769846][T24637] loop5: detected capacity change from 0 to 512 [ 654.784348][T24644] ext4 filesystem being mounted at /986/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.815264][T24637] ext4 filesystem being mounted at /751/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.864596][T24637] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4823: corrupted xattr block 32: e_value out of bounds [ 654.865065][T24644] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4825: corrupted xattr block 32: e_value out of bounds [ 654.892641][T24637] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 654.902275][T24644] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 654.921257][T24637] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4823: corrupted xattr block 32: e_value out of bounds [ 654.929937][T24644] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4825: corrupted xattr block 32: e_value out of bounds [ 654.975008][T24659] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 654.991960][T24644] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 655.031428][T24644] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4825: corrupted xattr block 32: e_value out of bounds [ 655.045281][T24637] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 655.058416][T24644] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4825: corrupted xattr block 32: e_value out of bounds [ 655.061375][T24637] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4823: corrupted xattr block 32: e_value out of bounds [ 655.098442][T24644] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 655.122122][T24637] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4823: corrupted xattr block 32: e_value out of bounds [ 655.152592][T24673] netlink: 'syz.0.4829': attribute type 10 has an invalid length. [ 655.194134][T24637] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 655.246290][T24681] loop2: detected capacity change from 0 to 512 [ 655.266316][T24687] loop1: detected capacity change from 0 to 512 [ 655.281785][T24688] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 655.302693][T24681] ext4 filesystem being mounted at /920/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.344096][T24687] ext4 filesystem being mounted at /987/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.363451][T24687] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4832: corrupted xattr block 32: e_value out of bounds [ 655.373372][T24681] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4831: corrupted xattr block 32: e_value out of bounds [ 655.429668][T24687] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 655.451113][T24681] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 655.455769][T24698] loop5: detected capacity change from 0 to 512 [ 655.470428][T24681] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4831: corrupted xattr block 32: e_value out of bounds [ 655.495665][T24698] ext4 filesystem being mounted at /752/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.504296][T24687] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4832: corrupted xattr block 32: e_value out of bounds [ 655.521027][T24681] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 655.540705][T24681] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4831: corrupted xattr block 32: e_value out of bounds [ 655.555348][T24687] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 655.561841][T24698] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4833: corrupted xattr block 32: e_value out of bounds [ 655.587990][T24681] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4831: corrupted xattr block 32: e_value out of bounds [ 655.591003][T24687] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4832: corrupted xattr block 32: e_value out of bounds [ 655.610980][T24698] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 655.625859][T24687] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4832: corrupted xattr block 32: e_value out of bounds [ 655.642851][T24681] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 655.659375][T24698] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4833: corrupted xattr block 32: e_value out of bounds [ 655.674275][T24687] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 655.717049][T24698] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 655.753884][T24698] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4833: corrupted xattr block 32: e_value out of bounds [ 655.809423][T24698] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4833: corrupted xattr block 32: e_value out of bounds [ 655.819765][T24720] loop2: detected capacity change from 0 to 512 [ 655.845419][T24720] ext4 filesystem being mounted at /921/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.875213][T24720] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4835: corrupted xattr block 32: e_value out of bounds [ 655.889276][T24698] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 655.898775][T24720] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 655.920950][T24720] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4835: corrupted xattr block 32: e_value out of bounds [ 655.983855][T24720] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 655.989698][T24731] loop1: detected capacity change from 0 to 512 [ 656.020555][T24720] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4835: corrupted xattr block 32: e_value out of bounds [ 656.052875][T24731] ext4 filesystem being mounted at /988/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.124716][T24731] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4836: corrupted xattr block 32: e_value out of bounds [ 656.147884][T24720] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4835: corrupted xattr block 32: e_value out of bounds [ 656.174661][T24731] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 656.192327][T24720] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 656.221224][T24731] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4836: corrupted xattr block 32: e_value out of bounds [ 656.253072][T24755] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 656.273118][T24731] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 656.291312][T24758] loop2: detected capacity change from 0 to 512 [ 656.307903][T24731] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4836: corrupted xattr block 32: e_value out of bounds [ 656.324854][T24758] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 656.337198][T24755] loop5: detected capacity change from 0 to 512 [ 656.414373][T24755] ext4 filesystem being mounted at /754/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.432621][T24731] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4836: corrupted xattr block 32: e_value out of bounds [ 656.579193][T24758] loop2: detected capacity change from 0 to 8192 [ 656.594358][T24755] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4839: corrupted xattr block 32: e_value out of bounds [ 656.612266][ T29] kauditd_printk_skb: 1245 callbacks suppressed [ 656.612280][ T29] audit: type=1326 audit(1732664904.597:93817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24754 comm="syz.5.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55f3c3d2b0 code=0x7ffc0000 [ 656.642277][ T29] audit: type=1326 audit(1732664904.597:93818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24754 comm="syz.5.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f55f3c3d697 code=0x7ffc0000 [ 656.665811][ T29] audit: type=1326 audit(1732664904.597:93819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24754 comm="syz.5.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55f3c3d2b0 code=0x7ffc0000 [ 656.689487][ T29] audit: type=1326 audit(1732664904.597:93820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24754 comm="syz.5.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 656.713078][ T29] audit: type=1326 audit(1732664904.607:93821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24754 comm="syz.5.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f55f3c3e919 code=0x7ffc0000 [ 656.801074][T24777] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 656.810126][T24758] loop2: p1 p2 < > p3 p4 < p5 > [ 656.827658][T24758] loop2: p1 size 108986237 extends beyond EOD, truncated [ 656.866074][T24755] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 656.913453][T24755] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4839: corrupted xattr block 32: e_value out of bounds [ 656.961234][T24758] loop2: p3 size 131072 extends beyond EOD, truncated [ 657.013978][T24758] loop2: p5 size 108986237 extends beyond EOD, truncated [ 657.048662][T24731] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 657.049058][ T29] audit: type=1326 audit(1732664904.897:93822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24776 comm="syz.4.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 657.066548][T24755] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 657.081313][ T29] audit: type=1326 audit(1732664904.897:93823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24776 comm="syz.4.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 657.113962][ T29] audit: type=1326 audit(1732664904.897:93824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24776 comm="syz.4.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 657.137631][ T29] audit: type=1326 audit(1732664904.897:93825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24776 comm="syz.4.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 657.139340][T24781] netlink: 'syz.4.4844': attribute type 10 has an invalid length. [ 657.161222][ T29] audit: type=1326 audit(1732664904.897:93826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24776 comm="syz.4.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6709e919 code=0x7ffc0000 [ 657.228773][T24755] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4839: corrupted xattr block 32: e_value out of bounds [ 657.281207][T24755] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4839: corrupted xattr block 32: e_value out of bounds [ 657.320829][T12854] udevd[12854]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 657.331054][T11746] udevd[11746]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 657.332038][T13919] udevd[13919]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 657.352400][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 657.363721][T12765] udevd[12765]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 657.400269][T24792] loop1: detected capacity change from 0 to 512 [ 657.406694][T24755] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 657.469616][T24792] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 657.516756][T24807] loop2: detected capacity change from 0 to 512 [ 657.526514][T24792] EXT4-fs (loop1): 1 truncate cleaned up [ 657.544678][T24807] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 657.608422][T24807] EXT4-fs (loop2): 1 truncate cleaned up [ 657.653787][T24814] loop5: detected capacity change from 0 to 512 [ 657.705000][T24819] loop1: detected capacity change from 0 to 512 [ 657.727624][T24819] ext4 filesystem being mounted at /990/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.745279][T24814] ext4 filesystem being mounted at /755/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.753204][T24819] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4850: corrupted xattr block 32: e_value out of bounds [ 657.765562][T24814] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4849: corrupted xattr block 32: e_value out of bounds [ 657.785048][T24830] __nla_validate_parse: 1 callbacks suppressed [ 657.785061][T24830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4851'. [ 657.786942][T24814] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 657.810268][T24814] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4849: corrupted xattr block 32: e_value out of bounds [ 657.822369][T24819] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 657.835804][T24814] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 657.844764][T24819] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4850: corrupted xattr block 32: e_value out of bounds [ 657.844969][T24819] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 657.882584][T24819] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4850: corrupted xattr block 32: e_value out of bounds [ 657.913682][T24814] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4849: corrupted xattr block 32: e_value out of bounds [ 657.914636][T24834] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 657.930040][T24819] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4850: corrupted xattr block 32: e_value out of bounds [ 657.935960][T24839] loop2: detected capacity change from 0 to 8192 [ 657.982429][T24814] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4849: corrupted xattr block 32: e_value out of bounds [ 658.051508][T24819] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 658.062020][T24850] netlink: 'syz.2.4854': attribute type 10 has an invalid length. [ 658.068023][T24814] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 658.084750][T24850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4854'. [ 658.186961][T24855] loop1: detected capacity change from 0 to 512 [ 658.227893][T24855] ext4 filesystem being mounted at /991/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.238614][T24860] loop5: detected capacity change from 0 to 512 [ 658.268032][T24855] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4855: corrupted xattr block 32: e_value out of bounds [ 658.284806][T24860] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 658.311251][T24870] netlink: 'syz.4.4858': attribute type 10 has an invalid length. [ 658.320162][T24870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4858'. [ 658.323460][T24855] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 658.346120][T24860] EXT4-fs (loop5): 1 truncate cleaned up [ 658.366306][T24855] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4855: corrupted xattr block 32: e_value out of bounds [ 658.380534][T24855] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 658.389888][T24855] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4855: corrupted xattr block 32: e_value out of bounds [ 658.409679][T24855] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4855: corrupted xattr block 32: e_value out of bounds [ 658.441098][T24855] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 658.586466][T24885] loop5: detected capacity change from 0 to 512 [ 658.606182][T24885] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 658.652392][T24885] EXT4-fs (loop5): 1 truncate cleaned up [ 658.664234][T24890] loop2: detected capacity change from 0 to 512 [ 658.674574][T24890] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 658.713716][T24890] EXT4-fs (loop2): 1 truncate cleaned up [ 658.737233][T24887] loop1: detected capacity change from 0 to 512 [ 658.764816][T24887] ext4 filesystem being mounted at /992/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.818465][T24887] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4861: corrupted xattr block 32: e_value out of bounds [ 658.864574][T24887] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 658.879190][T16974] ================================================================== [ 658.887263][T16974] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 658.894269][T16974] [ 658.896571][T16974] read-write to 0xffff888237c2e8a4 of 4 bytes by task 11015 on cpu 0: [ 658.904696][T16974] wq_worker_running+0x98/0x130 [ 658.909524][T16974] schedule_timeout+0xb8/0x160 [ 658.914270][T16974] wait_for_common+0xfb/0x1c0 [ 658.918924][T16974] usb_start_wait_urb+0xdc/0x190 [ 658.923842][T16974] usb_control_msg+0x182/0x240 [ 658.928585][T16974] hub_ext_port_status+0xbf/0x480 [ 658.933589][T16974] hub_event+0x538/0x2910 [ 658.937901][T16974] process_scheduled_works+0x483/0x9a0 [ 658.943335][T16974] worker_thread+0x51d/0x6f0 [ 658.947902][T16974] kthread+0x1d1/0x210 [ 658.951948][T16974] ret_from_fork+0x4b/0x60 [ 658.956363][T16974] ret_from_fork_asm+0x1a/0x30 [ 658.961110][T16974] [ 658.963410][T16974] read to 0xffff888237c2e8a4 of 4 bytes by task 16974 on cpu 1: [ 658.971012][T16974] kick_pool+0x4d/0x2c0 [ 658.975145][T16974] __queue_work+0x8bb/0xb40 [ 658.979627][T16974] queue_work_on+0xd3/0x180 [ 658.984107][T16974] process_srcu+0x711/0xb00 [ 658.988589][T16974] process_scheduled_works+0x483/0x9a0 [ 658.994025][T16974] worker_thread+0x51d/0x6f0 [ 658.998593][T16974] kthread+0x1d1/0x210 [ 659.002638][T16974] ret_from_fork+0x4b/0x60 [ 659.007031][T16974] ret_from_fork_asm+0x1a/0x30 [ 659.011776][T16974] [ 659.014076][T16974] value changed: 0x00000000 -> 0x00000001 [ 659.019765][T16974] [ 659.022069][T16974] Reported by Kernel Concurrency Sanitizer on: [ 659.028206][T16974] CPU: 1 UID: 0 PID: 16974 Comm: kworker/1:0 Not tainted 6.12.0-syzkaller-09734-g445d9f05fa14 #0 [ 659.038685][T16974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 659.048716][T16974] Workqueue: rcu_gp process_srcu [ 659.053635][T16974] ================================================================== [ 659.068094][T24903] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 659.081697][T24887] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4861: corrupted xattr block 32: e_value out of bounds [ 659.118536][T24887] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 659.128174][T24887] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4861: corrupted xattr block 32: e_value out of bounds [ 659.143301][T24887] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.4861: corrupted xattr block 32: e_value out of bounds [ 659.158190][T24887] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 659.165010][T24914] loop5: detected capacity change from 0 to 512 [ 659.205201][T24914] ext4 filesystem being mounted at /758/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.264905][T24909] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4863: corrupted xattr block 32: e_value out of bounds [ 659.284721][T24909] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 659.322327][T24909] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4863: corrupted xattr block 32: e_value out of bounds [ 659.395876][T24909] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 659.415634][T24909] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4863: corrupted xattr block 32: e_value out of bounds [ 659.464408][T24909] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.4863: corrupted xattr block 32: e_value out of bounds [ 659.504741][T24909] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15